REMOTE POSITION

DESCRIPTION OF ESSENTIAL DUTIES:

• Architects, designs, implements, and maintains information security controls and countermeasures
• Analyzes trends, news, and changes in threat and compliance environment concerning organizational risk, performs risk and compliance self-assessments, and engages and coordinates third-party risk and compliance assessments
• Analyzes and recommends security controls and procedures in business processes related to the use of information systems and monitors for compliance.
• Advocates for the necessary business investments to support security systems. Research existing technologies and apply corporate strategies to develop a more secure environment, using best practice security methodologies.
• Monitors information systems for security incidents; report on incidents, vulnerabilities, and trends; develops effective monitoring and visibly capabilities
• Participate in the evaluation, selection, and implementation of security technologies and products
• Develops and administers, or provides advice, evaluation, and oversight for, information security training and awareness programs.
• Administers the configuration and vulnerability management platform(s) and works with the appropriate parties to identify and document any compensating controls and exceptions
• Maintains a deep level of knowledge regarding IT infrastructure, particularly as it relates to cyber security

OTHER RESPONSIBILITIES/REQUIREMENTS

• Deep knowledge of information security principles and practices
• Well versed in cyber security tools, network topologies, intrusion detection, PKI, network security monitoring, and DLP as well as have familiarity and experience in the implementation of cyber security regulations and vulnerability assessments
• Knowledge of cloud technologies particularly as it relates to securing cloud environments
• Understanding of MITRE ATT&CK/D3FEND frameworks
• Assist in the engineering, configuration, and auditing of network firewalls, proxies, endpoint protection suites, and content filters
• Proactively identify and work with impacted teams to remediate vulnerabilities
• Support day-to-day administration of various security platforms
• Be available for on-call rotations

QUALIFICATION, EDUCATION AND EXPERIENCE REQUIREMENTS:

• Bachelor’s degree is preferred
• Ten plus years’ work experience in the information technology field: preferably in the system administration or security fields; a Master’s degree may substitute for some work experience
• Preferred certifications: CISSP, CISM, or OSCP
• Demonstrates technical leadership in the field of Cyber Security
• Must have and maintain a valid driver’s license and maintain a driving record that complies with the Underwriting guides for the Mutual Insurance Company

SUPERVISORY RESPONSIBILITIES:

• Mentoring of Cyber Security personnel of day-to-day operations including implementation of projects

PHYSICAL DEMANDS/WORK ENVIRONMENT:

• Must be able to lift and carry 50 pounds on occasional basis
• Light travel with some overnight trips may be required

EOE M/F/D/V AA