Information Security Sr Specialist

Job Description

This role is for a Data Protection Analyst working in the Data Discovery and Protection Program. The Analyst is responsible for supporting, developing, and enhancing the Data at Rest Protection Program for both on-premise and cloud environments. The colleague will engage with Business Units across the organization, produce metrics and documentation, and implement and support tools related to the data protection program.

A successful candidate will:

• Assess existing scanning program to implement cloud scanning capabilities
• Assist in deployment and maintenance of data scanning tools
• Partner with other groups within the organization to identify and remediate data at rest access risk.
• Work with risk partners to identify controls, determine control adequacy, and identify control monitoring opportunities and areas for improvement/enhancement
• Assist in collecting, analyzing, and interpreting data access information and remediate permission compliance issues based on company security standards
• Discern patterns of complex threat actor behavior, communicate an understanding of current and developing Cyber threats to key stakeholders, and stay current with emerging trends and threats in the field of insider threat

Qualifications

Required:

• Understanding of information security concepts, best practices, and regulations related to data loss prevention
• Understanding of enterprise security and networking technology and how the technology relates to the prevention, detection, and response of data loss
• Advanced understanding of the Microsoft Office suite (e.g., Outlook, Word, Excel, PowerPoint, etc)
• Excellent verbal and written communication skills (including but not limited to: correct English usage, grammar, spelling, punctuation, vocabulary, etc.).
• Ability to execute work independently and as a team member with good interpersonal skills - using tact, patience and courtesy.
• Experience as a security consultant
• Working knowledge of cloud topology
• Knowledge of file share security and Windows ACL administration
• Familiarity with the Financial Services Industry
• Knowledge of varying cloud platforms
• Familiarity with cloud security at major cloud service providers
• Certifications: Associate of (ISC)^2, CISSP, or similar.

Education:

• Bachelor's degree in Information Security, Computer Science or a related field OR
• Bachelor's degree in Business or other field + 3 years relevant experience
• Equivalent years: BA/BA = HS + 5 years of experience

About Us

Equal Employment Opportunity

Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family statparenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague's or a dependent's reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.

Equal Employment and Opportunity Employer

Job Applicant Data Privacy Policy

Background Check

Any offer of employment is conditioned upon the candidate successfully passing a background check, which may include initial credit, motor vehicle record, public record, prior employment verification, and criminal background checks. Results of the background check are individually reviewed based upon legal requirements imposed by our regulators and with consideration of the nature and gravity of the background history and the job offered. Any offer of employment will include further information.