Security Analyst

Skills

Bachelor Degree in computer science engineering information security mathematics or an equivalent combination of education training and experience. A minimum of 3 years of work experience in Information Security IT IT Audit or Compliance Relevant information security certifications preferred (i.e. CISSP CISM CFCE GCFE etc.) Strong knowledge of information systems security standards and practices (e.g. access control system hardening system audit and log file monitoring security policies and incident handling) Strong experience in Windows and *nix environments Excellent understanding of TCP/IP and network communications Proven knowledge of network and server infrastructure technologies and devices including firewalls routers switches etc. Demonstrable knowledge and experience with SIEM IPS/IDS VPN Vulnerability Scanner Active Directory Malware Analysis Penetration Testing UNIX/Linux Incident Response Firewalls and APT Methodologies; Functional knowledge and experience with text and data representation and manipulation (XML HTML Regular Expressions Scripting SQL) Proficiency with common program languages used in information security (i.e. Python PERL VB Java) Experience working as a member of an information security incident response team conducting computer forensics analyses and performing investigative duties related to security policy violations Demonstrated knowledge of regulatory compliance requirements including PCI-DSS HIPAA etc. Strong problem solving and analytical skills Strong written and verbal communication skills Proficiency in Microsoft software: Outlook Word Excel PowerPoint Project and Visio Ability to quickly understand security systems in order to identify and validate security requirements Ability to manage multiple projects priorities and deadlines Demonstrated initiative customer orientation and team work competencies Adaptability flexibility and ability to work as part of a team or in an individual capacity Must demonstrate effective decision making results delivery and the ability to stay current with relevant technologies and security practices. Willingness to work outside of regular business hours as required which can include evenings weekends and holidays Ability to handle and maintain the integrity and confidentiality of highly sensitive material and information Ability to work in an office/remote environment and concentrate on complex tasks for extended periods of time Ability to lift and handle computer equipment and associated hardware

Description

The Senior Information Security Specialist plays a vital role in protecting the Hudson Bay Company's (HBC) information assets by proactively identifying risks and implementing appropriate controls in accordance with HBC's information security program. The information security specialist works collaboratively with other members of HBC's IT Security, Information Technology and Legal teams to ensure the protection of the Company's information assets.