Security Support Specialist

ORION•Lehi, UT

20h•Hybrid

About The Position

As a Security Support Specialist, you will ensure the adherence of security best practices and validate the confidentiality, integrity, and availability of the data within Orion’s multiple environments. The Security Support Specialist is responsible for reviewing information security controls and maintaining appropriate documentation. The Security Support Specialist acts as primary support for the Information Security Helpdesk and helps promote and maintain the Information Security Awareness program. The Security Support Specialist works with other members of the Information Security Department to support the Orion security program ensuring that regulatory compliance requirements are met. As we continue to evolve and live our Orion values, we are looking for someone to grow with us. It is anticipated that an incumbent in this role will work as a Hybrid employee, with three (3) or more days each week required on-site at one of the listed office locations. Candidates should be located within a commutable distance to an office. Internal candidates currently aligned to an Orion office location may be given preference; however, internal candidates with varying work arrangements may be considered based on experience and business needs. Work location is subject to change based on business needs.

Requirements

Works with various departments to document controls and procedures which meet the security and regulatory requirements of the organization
Has knowledge of enterprise security programs and the ability to support business needs in balance with security and regulatory requirements
Has working knowledge of cybersecurity frameworks: ISO, NIST, SOC2
Has experience developing and delivering training to a variety of audiences
Has experience in customer support with a focus on service delivery
Has strong technical writing skills and an ability to articulate security vulnerabilities to both technical and nontechnical teams
Has familiarity with common information security tools and technologies
Multi-tasks while maintaining careful attention to detail
Works effectively both individually and within a team environment
Works with a sense of urgency to meet deadlines and address competing priorities
Has skills with Microsoft Office software including Word, Excel, PowerPoint, and Outlook
Has effective written, listening, and verbal communication skills
Has effective problem solving and organizational skills
Has one of the following certifications or the ability to obtain within twelve months: CISSP, CCSP, CISA, CISM
Has a minimum of 3 years of experience in Information Technology, with at least 1 year in Information Security is required
Owns and manages relationships with stakeholders directly and works effectively with people at all levels in an organization

Nice To Haves

Has a minimum of a bachelor’s degree in MIS, Information Security or related field is preferred

Responsibilities

Complete due diligence requests from both internal and external sources
Assist in enterprise-wide regulatory compliance initiatives
Support the GRC program and promote a culture of security awareness throughout the organization
Maintain Orion’s Trust Center
Assist in providing evidence for internal and external security audits, compliance requests, and DDQs
Assist with Information Security awareness and training program
Support the Information Security helpdesk
Work with other members of the Information Security team to complete various security tasks and initiatives
Ensure adherence to Orion’s Integrated Management System (IMS) and other documented policies and procedures
Respond to and escalates potential security vulnerabilities