Apply on Employer Site

Gallo Glass Company · 16 hours ago

Information Security Analyst

Modesto, CA

Full-time

Hybrid

Mid, Senior Level

$40/hr - $60/hr

3+ years exp

Gallo Glass Company is a family-owned company with a 90+ year legacy, recognized as one of the Best Places to Work. They are seeking an Information Security Analyst to protect their systems, networks, applications, and data, investigating incidents and implementing corrective actions to maintain a resilient and compliant environment.

ManufacturingService IndustryWine And Spirits

Comp. & Benefits

No H1B

Responsibilities

Investigate incidents, identify root causes, recommend and implement corrective actions, and continuously tune security tools and controls across on-prem and cloud environments

Lead medium-sized projects, support security operations, and collaborate across IT, business partners, auditors, and vendors to keep the environment resilient and compliant

Conduct risk assessments, review penetration test results, and develop practical implementation plans for system, database, application, encryption, logging, backup, and endpoint security

Translate technical findings into business risk and remediation priorities, and help develop standards that map to industry frameworks such as NIST and ISO

Stay current with threat trends and emerging vulnerabilities to anticipate and prevent breaches

Qualification

Information SecurityData SecuritySecurity Tools ManagementVulnerability AssessmentApplication SecurityNetwork SecurityProfessional CertificationsRegulatory ComplianceAnalytical SkillsCommunication SkillsProblem-Solving Skills

Required

Bachelor's degree in Computer Science, Business Administration, MIS, Mathematics, or Engineering, plus 3 years of experience with information security, System Administration or equivalent with increasing levels of responsibility; OR High School Diploma or State-issued equivalency certificate plus 7 years of experience in Information Security, System Administration or equivalent with increasing levels of responsibility

Demonstrated technical expertise in IT systems

Strong analytical ability, communication skills and the ability to work effectively with clients/customers, IT management and staff, vendors, consultants, and auditors

Required to travel to company offices, sites, and/or meeting locations for onboarding, training, meetings, and events for development, department needs, and business delivery up to 5% of the time, with or without reasonable accommodation. This may be in addition to travel requirements, if applicable, as listed in this job description

Required to be 18 years or older. This may be in addition to other age requirements, if applicable, as listed in this job description

Preferred

Bachelor's degree in Computer Science, Business Administration, MIS, Mathematics, or Engineering, plus 5 years of experience with data security reflecting increasing levels of responsibility

Extensive professional experience in management and deployment of security tools

Extensive knowledge of networking, databases, systems and/or Web operations

In-depth knowledge of data security and protection techniques

In-depth knowledge of application security and application security best practices. Professional experience in the following: Vulnerability and configuration assessment tools, IDS/IPS tools, logging and monitoring tools (SIM), DLP, audit & assessment (GRC tools), data encryption and network or application firewalls, enterprise monitoring (SIEM). Familiarity with mobile, SaaS & Cloud technologies

Professional certifications (CISSP, ISACA, GSEC, others)

Knowledge of industry frameworks and best practices (ISO, NIST, CSC, others)

Knowledge of regulatory requirements and compliance (PCI, SOX, HIPAA, GLBA)