Sr Principal DT Security Analyst - GRC

Amtrak

1d•$149,400 - $193,644•Remote

About The Position

Set direction for enterprise-wide security projects, strategies, and policies. Develop, execute, and manage data and network security across the organization, including implementing security policies, breach procedures, and audits. Perform security architecture reviews, and prepare and present status reports, metrics, and risk analysis scenarios.

Requirements

Bachelor’s Degree or equivalent combination of education, training and/or relevant experience.
Plus 9 years of relevant work experience.
Extensive experience in IT and security work, including creating and implementing enterprise-wide IT security strategies
Strong relationship management skills, maintaining productive, cost-effective relationships with vendors
Experience tracking IT security trends and developments, conducting security audits, and synthesizing information into actionable reports
Proven ability to manage large teams and projects, meeting deadlines and staying within budget
Expertise in developing and implementing IT security training programs and leading internal security investigations

Nice To Haves

Bachelor’s Degree or equivalent combination of education, training and/or relevant experience.
Plus 11 years of relevant work experience.

Responsibilities

Set direction for enterprise-wide security projects, strategies, and policies, ensuring alignment with national and international standards.
Develop, execute, and manage IT security across the organization, including architectural reviews, risk assessments, and handling high-level security issues.
Oversee and maintain security standards, procedures, and guidelines; conduct business impact analyses and internal investigations of security violations.
Interface with business and IT leaders, providing security briefings, consulting on data classification, and supporting application and infrastructure projects.
Lead security incident responses, review application security risks, define metrics for reporting, and oversee security awareness and compliance training programs.