What are the responsibilities and job description for the Information Security Analyst position at NIBCO INC.?
NIBCO is a recognized leader in the flow control industry. Headquartered in Northern Indiana, with a manufacturing history that spans over a century, NIBCO operates manufacturing facilities across the United States, as well as Mexico and Poland. NIBCO is known by our customers for exceptional quality, commitment to on-time delivery, and outstanding product innovation. Setting us apart from our competitors is our people.
If you're looking for a place where your hard work and great ideas make a difference-NIBCO is the place for you.
POSITION TITLE: Information Security Analyst
LOCATION: Remote
PERFORMANCE SUMMARY:
The Information Security Analyst is a member of the IS Security Team and works closely with the other members of IS and business partners to support a comprehensive information security program. This includes defining security policies, processes and standards. The Information Security Analyst works with the IS department to deploy and support technical controls to meet specific security requirements and helps define processes and standards to ensure that security configurations are maintained.
RESPONSIBILITIES:
- Performs user and access administration on designated systems and applications, in accordance with the defined policies, standards and procedures of the organization
- Performs system security administration on designated technology platforms, including operating systems, applications and network security devices, in accordance with the defined policies, standards and procedures of the organization, as well as with industry best practices and vendor guidelines
- Performs installation and configuration management of security systems and applications, including policy assessment and compliance tools, network security appliances and host-based security systems
- Performs threat and vulnerability assessments, in some cases followed by appropriate remedial action, to ensure that systems are protected from known and potential threats and are free from known vulnerabilities
- Coordinate the application patches where appropriate and, at the direction of the Information Security Manager removes or otherwise mitigates known control weaknesses, as a means of hardening systems in accordance with security policies and standards
- Locates and repairs security problems and failures
- Collates security incident and event data to produce monthly exception and management reports
- Reports unresolved network security exposures, misuse of resources or noncompliance situations using defined escalation processes
- Assists and trains other Information Services team members in the use of security tools, the preparation of security reports and the resolution of security issues
- Develops and maintains documentation for security systems and procedures
- Researches, recommends, evaluates and implements cybersecurity solutions that identify and/or protect against potential threats, and respond to security violations
- Provides guidance to members of Information Services team
- Locates and repairs security problems and failures
- Develops and maintains documentation for security systems and procedures
- Researches, recommends, evaluates and implements cybersecurity solutions that identify and/or protect against potential threats, and respond to security violations
- Provides guidance to members of Information Services team
- Collaborates on critical IT projects to ensure that security issues are addressed throughout the project life cycle
EXPERIENCE REQUIRED:
- Minimum of 2 years of experience in IT, preferably in network or infrastructure
- Excellent written and verbal communication skills; interpersonal and collaborative skills; and the ability to communicate security and risk-related concepts to technical and nontechnical audiences
- Project management skills
- High level of personal integrity, and the ability to professionally handle confidential matters and exude the appropriate level of judgment and maturity
EDUCATION REQUIREMENTS:
- Bachelor's degree in information systems, or equivalent work experience
SKILLS REQUIRED:
- Knowledge of cybersecurity principles, including risk assessment and management, threat and vulnerability management, incident response, and identity and access management
- Experience in developing, documenting and maintaining security procedures
- Technical proficiency with security-related systems and applications
- Experience in developing, documenting and maintaining procedures
- Knowledge of network infrastructure
- Working technical knowledge of current systems' software, protocols and standards
- Strong analytical and problem-solving skills to enable effective security incident and problem resolution
- Ability to work under stress in emergencies, with the flexibility to handle multiple high-pressure situations simultaneously
- Ability to work well under minimal supervision
- Strong team-oriented interpersonal skills, with the ability to interface effectively with a broad range of people and roles, including vendors and IT-business personnel
- Strong written and verbal communication skills
- Strong customer/client focus, with the ability to manage expectations appropriately, provide a superior customer/client experience and build long-term relationships
COMPETENCIES:
- Customer Focus
- Attention to Detail
- Problem Solving
- Building Partnerships
- Initiative
- Change leadership
#LI-Remote
NIBCO is committed to equal opportunity employment. It is the policy of NIBCO to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law.