• Is responsible for the day to day administration and maintaining compliance of our PCI zones.
• Works with business units to identify security requirements, using methods that may include risk and business impact assessments
• Assists in the development, coordination and completion delivery of information security operations documentation.
• Works with information security leadership to develop strategies and plans to enforce security requirements and address identified risks.
• Reports to management concerning residual risk, vulnerabilities and other security exposures, including misuse of information assets and noncompliance.
• Plays an advisory role in application development or acquisition projects to assess security requirements and controls and to ensure that security controls are implemented as planned.
• Collaborates on critical IT projects to ensure that security issues are addressed throughout the project life cycle.
• Works with IT department and members of the information security team to identify, select and implement technical controls.
• Develops security processes and procedures, and supports service-level agreements (SLAs) to ensure that security controls are managed and maintained.
• Researches, evaluates and recommends information-security-related hardware and software, including developing business cases for security investments.
• Penetration Testing and Vulnerability Assessments
• Incident Detection and Response
• Help in Business Impact Analyses
• Work with management to ensure network issues are considered and addressed as new equipment, facilities, services and systems are developed and implemented.
• Conduct training for staff members in functional areas.
• Develop and maintain standards and procedures for documentation.
• Develop and produce contingency planning reports for management.