MLL-124 CISSP, CISA, CISM or SANS GIAC Certified Senior Security Analyst or Architect to develop security policies, controls, risk and vulnerability assessments in support of cyber security controls innitiatives within the retail industry. (Remote)

MLL-124 Our client is seeking a CISSP, CISA, CISM or SANS GIAC Certified Senior Security Analyst to develop security policies, controls, risk and vulnerability assessments in support of cyber security controls innitiatives within the retail industry (REMOTE).

Must Haves:

• 7+ years of Cyber Security project experience
• 5+ years of experience creating, and presenting Cyber Security presentations for C-Suite executives.
• 3+ years information infrastructure experience
• Knowledge and direct experience with several technology areas such as:
• Networking, VPSs, firewalls, SIEM, cloud platforms/cloud security, vulnerability management, virtualization
• Microsoft technologies (Endpoints, Servers, M365, Azure)
• Endpoint security
• Scripting languages (Powershell, Pythom, PHP, others) is required
• Must have one of the four CISSP, Audit, Networks, Security (SANS) professional certification (GIAC) Certification as Certified Information Security Manager (CISM) or Certified Information Security Auditor (CISA)

Nice to Haves

• Knowledge and experience within retail and entertainment sectors considered an asset
• Knowledge and experience with the Payment Card industry related standards and guides are considered an asset

Responsibilities:

• A Security Analyst will support in the implementation and operation of security controls and monitoring services.
• They may also develop security policies or technical standards, conduct technical reviews, security risk and vulnerability assessments, and participate in security investigations and incident response activities. 
• Develop security policies, standards, guidelines or procedures 
• Conduct security risk assessments 
• Develop and maintain technical solutions to help mitigate security vulnerabilities 
• Support the activities that provide security monitoring and incident response services  
• Perform technical security assessments and design reviews 
• Support the activities that provide security monitoring and incident response services  
• Perform technical forensic investigations 
• Generate forensic and incident reports