Sr Security Analyst

Meijer•Burrell Township, PA

1d•Onsite

About The Position

This position administers information security and applies measures to safeguard information against accidental or unauthorized modification, destruction or disclosure of information. Processes security requests per approved procedures. Confers as required with management, development personnel, risk assessment staff, auditors, facilities and security departments and other relevant personnel about issues related to ensuring that only approved security access methods are being utilized. Is familiar with security standards and regulations as required to provide enforcement.

Requirements

Bachelor’s or equivalent.
Industry certifications, including one or more of the following: CISSP, CISA, CISM, SANS GIAC, or other industry specific certification.
Familiarity with information security standards, including NIST, COBIT, ISO 27001, ITIL.
Experience with security systems and principles.
Ability to understand security policies and apply them to everyday situations.
Able to multitask, manage multiple requests and respond to customers in a timely manner.
Familiarity with multi-platform environments and their operational/security considerations.
Ability to relate business requirements and risks to technology implementation for security-related issues.
Technical proficiency in security-related systems.
Ability to explain the use and function of these systems to those who use them.
Proven ability to work under pressure in resolving system access issues.
Strong customer focus and ability to manage client expectations.
Strong team-oriented interpersonal skills.
Ability to interface effectively with a wide variety of people.

Nice To Haves

Prefer experience in Information Security.
Prefer experience in IT or Business Systems.

Responsibilities

Administers information security though processes and tools.
Works with ITS and business contacts to ensure only authorized personnel have system and security access per approved requests.
Assists resource owners and IT staff in understanding and responding to security audit failures reported by internal and external auditing departments.
Advises security administration staff on normal and exception processing of security authorization requests.
Reviews computer system access reports to identify possible security violations.