Senior Information Security Analyst

Ag Growth International (Agi) • Naperville, IL

427d

About The Position

The Senior Information Security Analyst (ISA) is responsible for managing the enterprise information security program, ensuring the security of information assets and technologies. This role involves overseeing information security operations, cyber incident management, and contributing to the development of the Cyber Security Program. The Senior ISA will represent the Application Portfolio Lead and Security during IT planning initiatives, ensuring that security measures are integrated into strategic IT plans.

Requirements

• A post-secondary degree in Computer Science or equivalent experience in information technology security
• 5+ years in IT roles with at least 3-5 years in an IT security role
• Knowledge of Penetration and Web Application Testing
• Strong analytical skills
• One or more certifications preferred: ISACA Certified Information Security Manager, (ISC) SCCP, (ISC) CISSP, (ISC) ISSAP, COBIT, ISO, PCI
• Security Investigation experience is an asset
• Experience collaborating with business and IT Operations leaders
• Experience in selecting and managing information security team members
• Experience working with legal, audit, and compliance staff
• Experience developing and maintaining policies, procedures, standards, and guidelines
• Experience performing risk assessments, business impact analysis, and vulnerability assessments
• Knowledge of NIST Framework
• Familiarity with Microsoft Azure Active Directory and Microsoft 0365
• Experience with on-premise and Cloud Security (AWS, AZURE)
• Working knowledge of routing, switching, and security devices (firewalls, intrusion prevention devices)
• Experience with security monitoring tools (SIEM, MSSP, MDATP)
• Familiarity with technologies such as Web Proxy, Firewalls, Cisco Meraki, Active Directory.

Nice To Haves

• Security Investigation experience
• Experience with security monitoring tools
• Familiarity with various security technologies.

Responsibilities

• Provide technical expertise within areas of responsibility
• Commit to personal development of new technical skills and knowledge
• Scan external technical and business environments for new ideas
• Ensure technical information is recorded and maintained according to AGI IT standards
• Enhance understanding of technology across AGI with technical and business teams
• Collaborate with the Enterprise Architecture team to maintain architecture diagrams and technical standards
• Assess IT risks and compliance, advising the Director, IT Infrastructure and Security
• Contribute to IT Risk, Governance and Compliance Framework
• Develop security standards and controls for networks, servers, personal computing devices, data, and integrations
• Create security incident response and remediation plans
• Monitor key trends and define metrics for Technology Risk reporting
• Act as a point of escalation for serious security incidents and risks
• Manage identity and access management (IAM) with the Director, IT Infrastructure and Security
• Assist in promoting and managing AGI's Information Security Awareness Program
• Ensure compliance with data privacy regulations
• Provide security guidance for all IT projects and services
• Document and maintain IT security as part of all projects and technologies
• Oversee day-to-day security operations
• Ensure SecDevOps approach in application development
• Manage outsourced IT security service providers
• Perform internal Security Audits to verify security controls
• Conduct internal Security Risk Assessments to analyze cybersecurity controls
• Complete external IT Security Audits or requests for information
• Conduct IT Security Assessments on third-party providers with recommendations.

Benefits

• Equal opportunity employer
• Accommodations available for candidates with disabilities

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Construction of Buildings
• Education Level: No Education Listed
• Number of Employees: 1,001-5,000 employees