Sr. Analyst, Information Security

Crowley Maritime Corporation - Scott Air Force Base, IL

Full-time - Mid Level

Scott Air Force Base, IL

5,001-10,000 employees

Professional, Scientific, and Technical Services

About the position

As a Sr. Analyst in Information Security at Crowley Maritime Corporation, you will play a crucial role in safeguarding sensitive information and ensuring the integrity of data across the organization. Your primary responsibility will be to implement and maintain robust security measures that protect computer systems, networks, and data from loss and service interruptions. This position is particularly significant as it supports the United States Transportation Command (USTRANSCOM) and the Department of Defense (DoD) in their migration from the Automated Air Load Planning System to the Integrated Computerized Deployment System (ICODES). This system is essential for planning and managing cargo placement within marshalling yards and surface conveyances, integrating intelligent tools for staging and load planning across multiple military and commercial transportation modes. You will be tasked with developing, implementing, and improving Crowley's Information Security solutions, including the Data Classification and Data Loss Prevention (DLP) program. Your role will involve analyzing and documenting security risks, breaches, and other cybersecurity incidents, as well as developing and implementing a network disaster recovery plan. You will oversee the monitoring of computer networks for security issues and collaborate with the security team to identify and address network weaknesses. Additionally, you will be responsible for researching and recommending security enhancements, training staff on network and IT security procedures, and conducting risk assessments to identify complex security risks. The successful candidate will ensure that the information system security architecture, designs, plans, controls, processes, standards, policies, and procedures align with IS standards and overall IS security. You will conduct IS security risk assessments and compliance audits, evaluate hardware, firmware, and software for potential impacts on IS security, and provide updates on current information security technologies and regulatory issues to management. This position requires a proactive approach to creating, facilitating, and promoting information system security policy, procedure, and compliance education, as well as assisting management with budget preparation and forecasting.

Responsibilities

• Plan and implement security measures to protect computer systems, networks, and data from loss and service interruptions.
• Analyze and document security risks, breaches, and other cybersecurity incidents and the damage they cause.
• Develop and implement a network disaster recovery plan and oversee the monitoring of computer networks for security issues.
• Install and operate security software and measures to protect systems and information infrastructure, including firewalls and data encryption programs.
• Collaborate with the security team to perform tests and find network weaknesses.
• Research and recommend security enhancements and purchases.
• Work with management to develop best practices for information security.
• Research and keep current on the latest IT intelligence technologies, trends, and security standards.
• Train staff on network and IT security procedures.
• Conduct risk assessments to identify complex security risks and/or exposures to determine the cause of security violations.
• Ensure that information system security architecture/designs, plans, controls, processes, standards, policies, and procedures are aligned with IS standards and overall IS security.
• Conduct IS security risk assessments and compliance audits, evaluating hardware, firmware, and software for possible impact on IS security.
• Provide updates on current information security technologies and related regulatory issues and escalate to management as necessary.
• Create, facilitate, and promote information system security policy, procedure, and compliance education.
• Assist management with budget preparation and forecasting, in addition to providing guidance to other information systems security team members.

Requirements

• Bachelor's degree in computer science, business, information systems, or a related field; or a combination of post high school education and experience equal to nine (9) years.
• 5 - 8 years of experience related to information security administration, project management, and/or application security.
• Intermediate proficiency with Microsoft Office products including Word, Outlook, Excel, and SharePoint.
• Proficient understanding of security issues, techniques, and implications across one or more computer platforms.

Nice-to-haves

• Relevant commercial certifications are desired.