Apply on Employer Site

Colony Brands, Inc. · 13 hours ago

SR. IT SECURITY ANALYST (ONSITE)

Monroe, WI

Full-time

Onsite

Mid, Senior Level

3+ years exp

Colony Brands, Inc. is one of the world’s largest and most successful direct marketing catalog and e-Commerce companies, and they are seeking a Senior IT Security Analyst to enhance their information security programs. The role involves developing and implementing security policies, ensuring compliance, and responding to security incidents while working closely with IT teams and project partners.

ConsumerHealth Care

No H1B

Responsibilities

Serving as a subject matter expert to the business and providing security guidance

Partnering with Project Teams to facilitate and implement new systems, policies, and processes

Partnering with Managed service SOC to coordinate centralized logging and identification of security incidents or misconfigured security controls

Coordinating/conducting responses to information security incidents (ability to begin forensic investigation as part of the Incident Response process)

Preparing documentation, business notifications, and security alerts

Daily interaction with our employees on security alerts from EDR (Endpoint Detection & Response), SIEM (Security Incident & Event Management), Phishing identification tools, and general service tickets

Researching, recommending, and developing security and risk mitigation solutions

Qualification

Information Security EngineeringSecurity Policy DevelopmentIncident ResponseVulnerability ScannersCloud Security (AWS)CISSP CertificationSecurity Awareness ProgramsContinuous ImprovementCommunication Skills

Required

Bachelor's degree in MIS, Computer Sciences, Information Technology or related discipline

3+ years' related business experience

Preferred

A Broad and in-depth understanding of information security and information technology auditing

A commitment to continuous improvement and knowledge growth; this role requires someone who will stay current with security technologies

Documented ability to utilize security systems such as, vulnerability scanners, logging software, Multi Factor Authentication, SAML Federation, and experience with patch management processes

Experience with diverse desktop and server environments, networking, and operational security technologies both on premise and in the Cloud (AWS preferred)

Solid written and verbal communication skills at all comprehension levels. Experience with driving Security Awareness programs is desired

CISSP/CISM Certification is preferred

Experience working with small to mid-size companies is helpful

PCI, SOC1, Audit &/or HIPPA experience is a plus