10112 - Senior Risk Operations Specialist (SSRM)

Hyundai Autoever America•Irvine, CA

12d•$103,170 - $158,873•Onsite

About The Position

The Senior Risk Operations Specialist, Supplier Security Risk Management (SSRM), is a senior-level individual contributor responsible for supporting and managing critical information security and network security initiatives across the organization. This role plays a key part in protecting corporate assets by designing, implementing, administering, operating, and continuously improving enterprise security technologies, processes, and controls. The position supports a broad range of cybersecurity functions, including intrusion detection, incident response, vulnerability management, application security, and compliance with corporate information security policies. The successful candidate will work closely with internal and external stakeholders to identify security requirements, evaluate risks, implement security solutions, and strengthen overall security posture across systems, networks, and business applications. In addition, this role provides technical security engineering expertise, leads or participates in incident response activities, supports audit and compliance initiatives, and delivers reporting and recommendations to senior stakeholders. The position requires a strong combination of hands-on technical expertise, risk management knowledge, and the ability to communicate effectively with both technical and executive audiences.

Requirements

Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent work experience AND 8+ years of relevant IT experience with at least 5 years performing Security Engineering, Security Planning, or Security Operations functions.
Experience working within medium-to-complex computing environments with advanced knowledge of security technologies and services.
Hands-on experience with two or more enterprise security technologies, including: Network Intrusion Prevention/Detection Systems, Virtual Private Networks (SSL, IPSec, Site-to-Site), Enterprise-class Stateful Inspection Firewalls, Network Access Control and Identity Management solutions, Windows Server and Desktop Operating Systems, Network Packet Inspection technologies, Directory Services including LDAP, Active Directory, and Secure Authentication Technologies
Experience implementing information security technologies and/or security processes.
Experience defining information security strategies and frameworks.
Experience integrating security technologies into enterprise operational frameworks.
Strong verbal and written communication skills with the ability to engage technical and executive-level stakeholders.
Ability to manage multiple priorities within a team-oriented environment.
Strong attention to detail and analytical problem-solving skills.
Knowledge of information security risk assessment methodologies and industry standards.
Experience creating technical documentation, reports, proposals, statements of work, and white papers.
Ability to work independently and successfully complete projects with minimal supervision.

Nice To Haves

Master’s degree in Computer Science, Information Systems, or a related field, or equivalent work experience AND 8+ years of relevant IT experience with at least 5 years performing Security Engineering, Security Planning, or Security Operations functions.
CISSP certification.
CISSP-ISSAP certification.
SANS certifications or other professional certifications related to security engineering.

Responsibilities

Design, build, test, and deploy enterprise security technologies and associated operational procedures and runbooks.
Provide technical security engineering support for existing security systems and automate security implementation, monitoring, and enforcement processes.
Investigate, evaluate, deploy, and integrate security tools and technologies to improve protection of corporate infrastructure and assets.
Conduct technical risk assessments and security exposure analyses of systems, networks, and business applications.
Analyze network security architectures to ensure optimal security, performance, and cost effectiveness.
Oversee installation, configuration, and operational support of security technologies.
Participate in and lead incident response activities, investigations, and remediation efforts.
Collaborate with internal and external stakeholders to identify security requirements and develop solutions to security challenges.
Prepare and deliver periodic or ad hoc security reports and situational awareness updates for senior stakeholders.
Monitor networks and infrastructure for cyber threats, malware, and unauthorized activity, ensuring complete remediation of identified issues.
Implement security infrastructure changes in accordance with established change management policies and procedures.
Evaluate, configure, tune, and operate security solutions including intrusion prevention systems, vulnerability scanners, and encryption technologies.
Recommend enhancements to security technologies, processes, and reporting capabilities.
Support security audits, assessments, compliance reviews, and risk management initiatives.
Participate in an established on-call rotation to support after-hours security operations.
Perform additional security-related projects and operational support activities as assigned.