Security Analyst III

Canon Virginia, Inc.•Newport News, VA

5d•$81,793 - $106,331•Hybrid

About The Position

Canon Virginia, Inc. is seeking a Security Analyst III for its Regional Technical Headquarters in Newport News, Virginia. The role protects computer assets and organizational data by establishing access controls, planning and implementing security measures, maintaining disaster preparedness, and researching technologies that help prevent data loss and service interruptions. It develops disaster recovery plans and procedures for IT employees, security standards, policies, and procedures, including those addressing regulatory requirements such as SOX, PCI, and/or FFIEC guidance. The analyst manages IT security and risk across data systems, networks, and web environments; assesses risk and security posture; performs vulnerability assessments; and facilitates remediation of vulnerabilities. The position also supports audits and examinations, facilitates IT security and risk training, maintains security monitoring processes, and recommends corrective actions and improvements to management and senior IT staff. This is a full-time hybrid position based in Newport News, Virginia. The schedule requires four days in the office and offers the option to work from home one day per week. Standard in-office days are Monday and Wednesday; divisional management determines the other two. Schedules and office reporting requirements may change based on business needs. The hourly position has a stated pay range of $81,793–$106,331 and is classified as FLSA exempt.

Requirements

Education and experience equivalent to a bachelor’s degree in Networking, Information Technology, or a related field, combined with 4–6 years of security experience.
Network certification required.
Expert experience in network setup, configuration, security, and troubleshooting.
Extensive experience and technical knowledge of network systems, management and analysis tools, protocols, security systems, data privacy laws, network hardware, and standards such as Ethernet, Token Ring, LAN, WAN, frame relay, xDSL, TCP/IP, ATM, T1, and 802.11x.
Client/server, operating system, switched and routed environment, hardware, software, and network connection troubleshooting experience.
Expert technical knowledge of current network hardware and installation of networking equipment.
Strong interpersonal, written, and oral communication skills.
Strong customer service orientation.
Experience working in a team-oriented, collaborative environment.
Must be 18 years of age or older.

Nice To Haves

Working knowledge of CMMC 2 certification preferred.

Responsibilities

Protect computer assets by establishing and enforcing system access controls and maintaining disaster preparedness.
Plan and implement security measures to protect computer systems, networks, and data.
Research technologies to prevent data loss and service interruptions.
Create disaster recovery plans and procedures for IT employees to follow in emergencies.
Develop policies, procedures, and standards that meet existing and new policy and regulatory requirements, including SOX, PCI, and/or FFIEC guidance.
Facilitate IT security and risk training curriculum.
Address questions from internal and external audits and examinations.
Manage IT security and IT risk across organizational data systems, networks, and/or web environments.
Assess information risk and facilitate remediation of vulnerabilities in networks, systems, and applications; report findings and recommend corrective actions.
Perform assigned vulnerability assessments using IT security tools and methodologies.
Assess the IT security and risk posture of networks, systems, and software applications.
Establish physical security for computers and terminals by developing standards, policies, and procedures; coordinate with facilities security and recommend improvements.
Safeguard computer files through regular backups and procedures for source code management and disaster preparedness; recommend improvements.
Develop organizational security standards and recommend enhancements to management or senior IT staff.
Maintain and improve security monitoring procedures and processes.
Establish system controls by developing frameworks for controls and access levels and recommending improvements.