Sr Security Compliance Analyst

Company: Lowe's Companies, Inc.
Location: Mooresville
Posted on: February 24, 2021

Job Description:

Job Summary:
The Sr Security Compliance Analyst will lead the implementation and ongoing delivery of information security processes to reduce security risk providing visibility, and ongoing continuation to remediate gaps. This includes creating, executing, and improving processes and procedures with limited direct guidance from senior-level security associates.
The individual in this role has a strong understanding of most tools and processes supported by the team, including many of the key integration points with other parts of Technology. He/she works mostly independently and occasionally provides coaching and direction to more junior level associates on the team.
With a focus specifically on Security Governance, Risk, and Compliance, this role completes activities that help drive awareness and adherence to information security policies and standards. Tasks include collecting and reviewing metrics, monitoring programs for compliance, performing risk assessments, and working with others to implement appropriate controls.
Key Responsibilities:

• Analyzes data to detect trends, make recommendations, and provide reporting
• Leads activities to assess adherence to the information security processes supported
• Answers questions from associates about the information security processes supported; handles more complex questions/issues elevated from other analysts on the team
• Identifies opportunities for process improvements and makes recommendations for best practices
• Serves as an escalation point and mentor for junior staff
• Contributes to and helps maintain process documentation repositories
• Develops standard operating procedures; identifies and suggests possible improvements on procedures
• Collaborates with management to determine information security metrics and leads the collection of information security metrics
• Maintains an awareness of information security news and trends
• Consolidates security-related findings, tracks KPIs, and presents results to information security and business leaders and/or vendors
• Researches current technologies to assist in the development of new capabilities and recommends solution options
• Translates and documents business needs into technical requirements and solutions
• Advises users and team members on the execution of processes, interprets standards and regulations, and assists with solutions
• Creates and optimizes frameworks and tools and leads assessments of applications and businesses processes to help Lowe's integrate security services
• Assists with the training and development of more junior level analysts as needed
• Provides mentoring and guidance to more junior level analysts; may provide feedback and direction on specific tasks
• Supports continual enhancement of security risk monitoring programs
  
  Minimum Qualifications:
  
  • Bachelor's Degree in Computer Science, CIS, Engineering, Business Administration, Cybersecurity, or related field (or equivalent work or military experience in a related field)
  • 4 years of experience in information security
  • Intermediate understanding of fundamental security and network concepts (Windows and Unix security: OS lockdown; logging and monitoring; application security; user access; perimeter protection principles, network communication rules; intrusion detection and analysis methods; etc.)
    Preferred Qualifications: ---
    • 2 years of experience developing Cybersecurity or information assurance policies, standards, awareness training, or equivalent issuances (specific to Security Governance, Risk & Compliance role)
    • 2 years of experience conducting assessments or technical reviews to analyze risk (specific to Security Governance, Risk & Compliance role)
    • Experience with information security programs, audits, controls, assessments, risk assessments, or remediation management (specific to Security Governance, Risk & Compliance role)
    • Relevant information security certifications (e.g., CISSP, CISM, CEH, PCI ISA, CRISC, CISA, OSCP, GPen) (specific to Security Governance, Risk & Compliance role)
    • Experience conducting information security risk assessments of vendors and vendor software (specific to Security Governance, Risk & Compliance role)
      About Lowe's:Lowe's Companies, Inc. (NYSE: LOW) is a FORTUNE-- 50 home improvement company serving approximately 18 million customers a week in the United States and Canada. With fiscal year 2019 sales of $72.1 billion, Lowe's and its related businesses operate or service more than 2,200 home improvement and hardware stores and employ approximately 300,000 associates. Based in Mooresville, N.C., Lowe's supports its hometown Charlotte region and all communities it serves through programs focused on creating safe, affordable housing and helping to develop the next generation of skilled trade experts. For more information, visit Lowes.com.
      About Lowe's In The Community:As a FORTUNE-- 50 home improvement company, Lowe's is committed to creating safe, affordable housing and helping to develop the next generation of skilled trade experts through nonprofit partnerships. Across every community we serve, Lowe's associates donate their time and expertise through the Lowe's Heroes volunteer program. For the latest news, visit Newsroom.Lowes.com or on Twitter.

Keywords: Lowe's Companies, Inc., Charlotte , Sr Security Compliance Analyst, Professions , Mooresville, North Carolina