|
POSITION SUMMARY:
The Security Analyst is responsible for identifying, assessing, and reporting security risks. This position is also responsible for ensuring that the information security controls support effective protection of the corporation’s Team Member and Guest information.
This position requires a highly motivated, team-oriented person with strong communication skills.
Relocation to Eau Claire, WI and minimal travel required.
PRIMARY RESPONSIBILITIES:
* Strategy and Guidance
-
Provide strategic risk assessments for projects, including the evaluation and recommendation of technical controls.
-
Work closely with the technical architecture teams to support alignment between the architecture and security of systems.
-
Participate in the planning and design of the enterprise security architecture.
-
Develop, maintain, and publish information security policies, procedures, standards and guidelines.
-
Participate in the deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with best operating procedures.
* Incident Response
-
Evaluate the severity of security events and determine the appropriate response to protect corporate IT assets and the company’s reputation.
-
Oversee the corporate incident response program and coordinate activities between the IT support teams while keeping upper management informed.
-
Provide on-call support for security incident response where required.
* Threat & Vulnerability Management
-
Monitor the external environment for emerging threats and communicate relevant information and recommendations to support teams.
-
Manage vulnerability scans on all applicable systems and applications, facilitating appropriate remediation efforts.
-
Manage application security scanning tools to promote secure application development.
* Security Operations
-
Provide up-to-date standards and guidelines for the baseline configuration of all in-place devices. Audit and report on all production deviations from the baseline.
-
Administer and monitor security solutions for efficient and appropriate operations.
-
Review security logs, events and reports of the corporation’s IT assets. Interpret the implications of those events and devise plans for appropriate resolution.
-
Actively participate in Payment Card Industry Data Security Standard (PCI DSS) assessments, coordinating the Qualified Security Assessors and internal IT staff.
* Acquisition and Deployment:
-
Maintain up-to-date detailed knowledge of the IT security industry, including awareness of new or revised security solutions and improvements to security processes.
-
Recommend additional security solutions or enhancements to existing security solutions to improve the corporation’s overall enterprise security.
-
Participate in the deployment, integration and configuration of new security solutions and for any enhancements to existing security solutions in accordance with standard best operating procedures.
To apply:
Apply by mail:
Amy Albers
5101 Menard Dr.
Eau Claire, WI 54703
Apply On-line:
www.menards.com/careers
Email resumes:
aalbers@menard-inc.com
|
