Senior IT Security Analyst

Sherwin-Williams - Cleveland, OH

Full-time - Mid Level

Cleveland, OH

Chemical Manufacturing

About the position

The Senior IT Security Analyst is a pivotal role within the CyberSecurity Architecture and Engineering organization, tasked with two primary functions: the identification, investigation, design, and remediation of data security deficiencies across the enterprise, and the ongoing evaluation of existing data security solutions. This position requires a comprehensive understanding of the enterprise's security goals as defined by its policies, procedures, and guidelines, and a commitment to actively uphold these objectives. The Senior IT Security Analyst will lead enterprise-wide projects and implementations aimed at promoting security best practices and enhancing the overall security posture of the organization. Key responsibilities include evaluating risks, designing controls, and protecting sensitive data. In addition to technical expertise, the Senior IT Security Analyst will engage in collaborative efforts with business partners across various departments, fostering relationships that facilitate the identification of security gaps in applications and systems. This role will work closely with the Data Security Architect to drive team initiatives and ensure alignment with the organization's security architecture. The incumbent will also be responsible for developing and communicating security policies, procedures, and plans to stakeholders, ensuring that all security measures comply with applicable laws and regulations. The position is hybrid, requiring three days in the office and allowing for remote work two days a week.

Responsibilities

• Participate in the planning and designing of enterprise data security architecture under the direction of the Data Security Manager.
• Create enterprise security documents including policies, standards, baselines, guidelines, and procedures.
• Plan and design an enterprise Business Continuity Plan and Disaster Recovery Plan.
• Develop and communicate security policies and procedures to executive teams and stakeholders.
• Maintain up-to-date knowledge of the IT security industry, including new security solutions and threat vectors.
• Recommend enhancements to existing security solutions to improve overall enterprise security.
• Audit, integrate, and configure new security solutions according to best practices and enterprise security documents.
• Maintain operational configurations of all in-place security solutions as per established baselines.
• Monitor security solutions for efficient operations and review logs for problematic activity.
• Collaborate with IT, security, human resources, and legal to ensure compliance with company policies and regulations.
• Advocate for compliance policies through regular communications and presentations.
• Monitor security systems for potential threats and vulnerabilities to client databases and networks.

Requirements

• Bachelor's Degree or at least 12 years of experience in Information Technology or Business.
• 5+ years of IT and/or business experience.
• Familiarity with Data Protection concepts.
• Demonstrated skill in leading effective meetings with business and IT.
• Strong communication, analytical, and problem-solving skills.
• Proficient in Windows OS and MS-Office tools.

Nice-to-haves

• 5+ years of Cyber Security experience.
• 2+ years of experience with Data Loss Prevention tools.
• 2+ years of experience with data tools and platforms such as Snowflake, Dataiku, Business Objects, Tableau, or MicroStrategy.
• Experience with IT Audit, Compliance, or Information Security.
• Working knowledge of information security concepts related to Data Protection methodologies.
• Experience with security technologies like DLP, EDR, Proxy, SIEM.
• Experience evaluating cyber risks or threats.
• Experience embedding security into the software development lifecycle.

Benefits

• Competitive salary range from $85,840.30 to $109,524.99.
• Hybrid work schedule with flexibility for remote work.
• Opportunities for professional development and training.