Security Analyst III

Canon Careers•Newport News, VA

4d•Hybrid

About The Position

Canon Virginia, Inc. is seeking a Security Analyst III for its Regional Technical Headquarters in Newport News, Virginia. The role protects computer assets and organizational data by planning, implementing, and maintaining security measures across computer systems and networks. It also helps prevent data loss and service interruptions by researching protective technologies and creating disaster recovery plans and procedures for IT employees to follow in emergencies. The Security Analyst III develops security policies, procedures, standards, and controls that address existing and new policy and regulatory requirements, including SOX, PCI, and/or FFIEC guidance. The role manages IT security and risk across data systems, networks, and web environments; assesses security and risk posture; performs vulnerability assessments; coordinates remediation; and reports findings and corrective-action recommendations. It also supports audits and examinations, facilitates IT security and risk training, and recommends security enhancements to management or senior IT staff. This is a full-time, hybrid position. Employees are expected to work in the office four days per week, with the option to work from home one day per week, subject to business needs. Standard office days are Monday and Wednesday; divisional management determines the other two office days. Schedules and reporting requirements may change based on business needs. The stated hourly pay range is $81,793–$106,331; the role is classified as FLSA Exempt.

Requirements

Any combination of education and experience equivalent to a bachelor’s degree in Networking, Information Technology, or a related field and 4–6 years of security experience.
Network certification is required.
Expert experience in network setup, configuration, security, and troubleshooting.
Extensive experience and technical knowledge of network systems, management and analysis tools, protocols, security systems, data privacy laws, network hardware, and standards such as Ethernet, Token Ring, LAN, WAN, frame relay, xDSL, TCP/IP, ATM, T1, and 802.11x.
Experience troubleshooting client/server systems, operating systems, switched and routed environments, hardware, software, and network connections.
Expert technical knowledge of current network hardware and installation of networking equipment.
Strong interpersonal, written, and oral communication skills.
Strong customer service orientation.
Experience working in a team-oriented, collaborative environment.
Must be 18 years of age or older.

Nice To Haves

Working knowledge of CMMC 2 certification.

Responsibilities

Protect computer assets by establishing and enforcing system access controls and maintaining disaster preparedness.
Plan and implement security measures to protect computer systems, networks, and data.
Research technologies that can effectively protect the organization and prevent data loss and service interruptions.
Create disaster recovery plans and procedures for IT employees to follow in emergencies.
Develop policies, procedures, and standards that meet existing and newly developed policy and regulatory requirements, including SOX, PCI, and/or FFIEC guidance.
Facilitate IT security and risk training.
Address questions from internal and external audits and examinations.
Manage IT security and risk across data systems, networks, and/or web environments throughout the organization.
Assess information risk, facilitate remediation of vulnerabilities in networks, systems, and applications, and report findings and corrective-action recommendations.
Perform assigned vulnerability assessments using IT security tools and methodologies.
Assess the IT security and risk posture of networks, systems, and software applications.
Establish physical security for computers and terminals by developing standards, policies, and procedures; coordinating with facilities security; and recommending improvements.
Safeguard computer files through regular backups and procedures for source code management and disaster preparedness, and recommend improvements.
Develop organizational security standards and recommend security enhancements to management or senior IT staff.
Maintain and improve security monitoring procedures and processes.
Establish system controls by developing frameworks for controls and access levels and recommending improvements.