Apply on Employer Site

GALLO · 11 hours ago

Information Security Analyst

Modesto, CA

Full-time

Hybrid

Mid, Senior Level

$40/hr - $60/hr

3+ years exp

Gallo is a family-owned company with a 90+ year legacy in the alcohol beverage industry. They are seeking an Information Security Analyst to join their Information Security team, where the main responsibilities include investigating incidents, conducting risk assessments, and collaborating with various stakeholders to enhance security measures.

Wine & Spirits

Growth Opportunities

No H1B

Hiring Manager

Jennie Johnson

Responsibilities

Investigate incidents, identify root causes, recommend and implement corrective actions, and continuously tune security tools and controls across on-prem and cloud environments

Lead medium-sized projects, support security operations, and collaborate across IT, business partners, auditors, and vendors to keep the environment resilient and compliant

Conduct risk assessments, review penetration test results, and develop practical implementation plans for system, database, application, encryption, logging, backup, and endpoint security

Translate technical findings into business risk and remediation priorities through clear, actionable reports

Help develop standards that map to industry frameworks such as NIST and ISO

Stay current with threat trends and emerging vulnerabilities to anticipate and prevent breaches

Qualification

Information SecurityData SecuritySecurity Tools ManagementVulnerability AssessmentApplication SecurityNetwork SecurityRegulatory ComplianceAnalytical SkillsTechnical ExpertiseCloud TechnologiesIndustry FrameworksProfessional CertificationsCommunication SkillsProblem-Solving SkillsTeam CollaborationMentoring

Required

Bachelor's degree in Computer Science, Business Administration, MIS, Mathematics, or Engineering, plus 3 years of experience with information security, System Administration or equivalent with increasing levels of responsibility; OR High School Diploma or State-issued equivalency certificate plus 7 years of experience in Information Security, System Administration or equivalent with increasing levels of responsibility

Demonstrated technical expertise in IT systems

Strong analytical ability, communication skills and the ability to work effectively with clients/customers, IT management and staff, vendors, consultants, and auditors

Required to travel to company offices, sites, and/or meeting locations for onboarding, training, meetings, and events for development, department needs, and business delivery up to 5% of the time, with or without reasonable accommodation. This may be in addition to travel requirements, if applicable, as listed in this job description

Required to be 18 years or older. This may be in addition to other age requirements, if applicable, as listed in this job description

Preferred

Bachelor's degree in Computer Science, Business Administration, MIS, Mathematics, or Engineering, plus 5 years of experience with data security reflecting increasing levels of responsibility

Extensive professional experience in management and deployment of security tools

Extensive knowledge of networking, databases, systems and/or Web operations

In-depth knowledge of data security and protection techniques

In-depth knowledge of application security and application security best practices. Professional experience in the following: Vulnerability and configuration assessment tools, IDS/IPS tools, logging and monitoring tools (SIM), DLP, audit & assessment (GRC tools), data encryption and network or application firewalls, enterprise monitoring (SIEM). Familiarity with mobile, SaaS & Cloud technologies

Professional certifications (CISSP, ISACA, GSEC, others)

Knowledge of industry frameworks and best practices (ISO, NIST, CSC, others)

Knowledge of regulatory requirements and compliance (PCI, SOX, HIPAA, GLBA)