Senior Info Security Analyst

UPS•Parsippany, NJ

1d•Remote

About The Position

The Sr. Information Security Analyst on the Information Security Identity Access Governance (Info Sec IAG) will assist in maintaining and building out our identity provisioning and auditing practice. This position is critical to maintaining the integrity, security, and compliance of our IBM z/OS Mainframe environment within IBM Security Server (RACF). This role ensures operational stability, regulatory adherence, and timely support for business-critical systems. This position leads the implementation of new Mainframe hardware cryptographic master keys, ensuring robust encryption capabilities. In addition, the role supports SOX compliance through quarterly DataSet audits and UPS control reviews for application access. Serving as the primary authority for encryption operations in our Mahwah data center, this resource also manages the digital certificate lifecycle, guaranteeing alignment with corporate security standards and regulatory requirements.

Requirements

Experience completing end to end Mainframe projects.
Minimal Mainframe requirements include knowledge and experience using IBM Security Server (RACF), IBM z/OS mainframe environments, TN3270 interfaces (i.e. QWS3270), 3270 session monitors (i.e. TPX), TSO, ISPF.
TKE utility experience and ICSF key management experience is a must.
Minimal Windows requirements include knowledge and experience using MS Office products and Planview.
Excellent written and verbal communication skills
Must be a U.S. Citizen or National of the U.S., an alien lawfully admitted for permanent residence, or an alien authorized to work in the U.S. for this employer.

Nice To Haves

Pluses include additional knowledge and experience of Mainframe auditing as well as using any of the following: Stig Viewer, Vanguard Administrator, IBM zSecure Audit for RACF, REXX, JCL.

Responsibilities

Performs incident management, team mailbox support, daily requests received in SailPoint which includes MFA assignment, Dataset, CICS, Generic IDs and DB2 new group requests.
Completes IIQ SailPoint post processing for elevated RACF group connections.
Handles support issues and carries a support phone during the allocated week.
Reports and performs access reviews such as DataSet Quarterly audits, SOX relates audits for UPS controls for application access.
Monitors and completes any manual jobs.
Installs and provide life cycle management support for digital certificates.
Performs encryption functions using pervasive and crypto keys.
Performs master key entry for new z/OS boxes as well as rotates master keys in ICSF.