The Senior Analyst Information Security is responsible for taking an active and lead role in enhancing security operations in-line with AEOs complex and growing cyber infrastructure and business operations.
Make recommendations to management on enhancements to existing and new security hardware, software or related tools. Assist in evaluating, planning, configuration, and implementation of new/existing security applications/tools
Update security tools for logging /monitoring, and increasing coverage of existing tools. Implement next-generation enterprise protection tools such network malware detection technologies
Perform risk analysis for corporate functional and technical areas relevant to data security
Configure, implement, monitor, and support security software/systems that will help ensure compliance with regulatory, industry, and corporate policies and procedures. This includes but is not limited to IDS/IPS (Host/Network/Wireless), secure file transfer, DLP, Full Disk encryption, firewall rule assessments, log management/correlation, secure password storage/retrieval, Application Whitelisting, vulnerability management, etc
Ensure security best practices are identified and integrated into all facets of the project including network, system designs/configuration, and implementations
Identify and recommend potential areas where existing data security policies and procedures require change, or where a supplement is required to mitigate key security risks. Partner with various business units to enhance security policies/procedures
Facilitate penetration testing and audit participation, where applicable
Create and maintain data security documentation, policies and procedures
Recommend and enforce technical service level standards and procedures for data security
Establish alternative security measures to allow for business continuity while protecting the companys assets
Assists in the identification, response, investigation, and remediation of potential breaches of and issues surrounding data security
Responsible for executing programs for user awareness, compliance monitoring, and security compliance; maintaining information security devices and software; monitoring compliance procedures; and resolving security policy issues
Manage relationships with 3rd party providers of security monitoring and tools to ensure assets are being protected
Responsible for providing support during off hours for security
Track data security issues to closure in a timely manner by partnering with business units, communicating solutions, and verifying remediation
All other duties as assigned
Approve contracts and purchases in accordance with the non-merchandise procurement policy
Approve/restrict access to the security infrastructure, including but not limited to: network access, phone access, application and system access, physical access to the datacenter, etc
Ability to decide to enact the Incident Response Team
Bachelors degree in Business Administration, Management Information Systems, or a related discipline, or equivalent work experience required
Security certification such as CISSP, CISM, etc
Advanced degree (MBA, Masters) preferred
Five years of information technology experience including project management and security concepts for technology systems (OSI model, applications, platforms, etc.)
Strong analytical, prioritizing, interpersonal, problem-solving, presentation, budgeting, project management (from conception to completion), & planning skills
Demonstrated collaborative skills and ability to work well within a team
Ability to work with and influence peers and senior management
Self-motivated with critical attention to detail, deadlines and reporting
Our people comefirst. We employ more than 30,000 associates throughout the world and webelieve that a truly diverse workplace is the result of an inclusive culture.Its about more than simply bringing together people who are different, itsabout celebrating what makes us real.
We strive to be anemployer of choice - a place where people are excited to come to work becausethey believe in what we do, enjoy working with each other, and have fun doingit. In addition to our great culture we offergenerous benefits including health, well-being, time off, flexibility,discounts on merchandise, casual dress code and even free on-site parking!
Learn more at www.AEO-Inc.comAmerican EagleOutfitters is an Equal Opportunity Employer
Loading some great jobs for you...