Security Governance & Risk Administrator II

Summary

Improving America's infrastructure isn't for the weak. It takes grit, determination, and hard work to execute high impact projects. Michels Corporation engages 8,000 people and 18,000 pieces of heavy equipment in our insatiable drive to be the best. Our work improves lives. Find out how a career as a IT Technical Architect II (Cloud Operations) can change yours.A Security Administrator II (Governance, Risk, Compliance) monitors corporate security devices and applications. Provides oversight for physical security systems. Provides security consultancy during application development. Critical for success are professional management and communication skills.Maintain and promote a strong health, safety, environment, and quality (HSEQ) culture for all employees, vendors, subcontractors, and customers to comply with HSEQ policies, procedures, regulations, and continual improvement objectives. Identify and communicate workplace hazards and risks with a commitment to correct or seek assistance in correcting unsafe or nonconforming actions or conditions.We are consistently ranked among the top 10% of Engineering News-Record's Top 400 ContractorsOur steady, strategic growth revolves around a commitment to qualityWe are family owned and operatedWe invest an average of $5,000 per employee on training each yearWe reward hard work and dedication with limitless opportunitiesWe believe it is everyone's responsibility to promote safety, regardless of job titles.We offer a comprehensive benefits program, including Health, Dental, Life, Flexible Spending Accounts, Health Savings Account, Short Term and Long-Term Disability Insurance, 401(k) plan, Legal Plan, and Identity Theft and Monitoring Plan. Depending on your positions and location you may participate in a different benefit plan.Key Responsibilities: Maintain and promote a strong safety culture for all employees, vendors, and customers and follow all health, safety and environmental policies, procedures, and regulations. Identify and communicate workplace hazards and correct or seek assistance in correcting unsafe actions or conditions.Review infrastructure designs for security vulnerabilities, and policies in light of security best practices and information security policies.Monitor, analyze and report on corporate security systems and security applications.Analyzes and resolves security breaches and vulnerability issues.Support forensic activities and digital review/evidence collection for security incidents.Conducts user activity audits and supports business regulatory requirements.Perform internal network vulnerability scanning and external penetration testing and resolve issues.Support business regulatory requirements.Act as a point of escalation for Service Desk incidents and requests.Understand and review current and future router and firewall access control lists for security best practices, vulnerabilities, and policies.Regulate physical security systems: security camera systems and access control systems.Review security of enterprise software code.Adhere to IT and corporate standards and security policies. Assist with recommendations for changes to existing or suggest new security standards and policies associated with risk mitigation and security event response.Other duties as assigned.Qualifications and Skills Bachelor's Degree in Information Technology or related field, 5-8 years of relevant experience, with 35 years in information security, or equivalent combinationSystems Security Certified Practitioner (SSCP) certificationCompetent with networking, hardware, software, and server systems technologiesCompetent with parsing security and server logsCompetent in IT security best practicesCompetent with router/firewall access control lists (ACLs), virtual private networks (VPNs), and complex routing scenarios.Proficient with Microsoft Office, Microsoft Project, Microsoft Visio, and two latest versions of Microsoft WindowsDesired Qualifications: Bachelor's Degree in Computer Science, Information Security or a related fieldCertified Information Systems Security Professional (CISSP) or Certified Secure Software Lifecycle Professional (CSSLP) CertificationFamiliar with Software as a Service (SaaS) security conceptsUnderstanding of application development best practicesExperience with Linux operating systems, Checkpoint firewalls, and various scripting languagesAA/EOE/M/W/Vet/Disability#J-18808-Ljbffr

Job Description

Improving America's infrastructure isn't for the weak. It takes grit, determination, and hard work to execute high impact projects. Michels Corporation engages 8,000 people and 18,000 pieces of heavy equipment in our insatiable drive to be the best. Our work improves lives. Find out how a career as a IT Technical Architect II (Cloud Operations) can change yours.A Security Administrator II (Governance, Risk, Compliance) monitors corporate security devices and applications. Provides oversight for physical security systems. Provides security consultancy during application development. Critical for success are professional management and communication skills.Maintain and promote a strong health, safety, environment, and quality (HSEQ) culture for all employees, vendors, subcontractors, and customers to comply with HSEQ policies, procedures, regulations, and continual improvement objectives. Identify and communicate workplace hazards and risks with a commitment to correct or seek assistance in correcting unsafe or nonconforming actions or conditions.We are consistently ranked among the top 10% of Engineering News-Record's Top 400 ContractorsOur steady, strategic growth revolves around a commitment to qualityWe are family owned and operatedWe invest an average of $5,000 per employee on training each yearWe reward hard work and dedication with limitless opportunitiesWe believe it is everyone's responsibility to promote safety, regardless of job titles.We offer a comprehensive benefits program, including Health, Dental, Life, Flexible Spending Accounts, Health Savings Account, Short Term and Long-Term Disability Insurance, 401(k) plan, Legal Plan, and Identity Theft and Monitoring Plan. Depending on your positions and location you may participate in a different benefit plan.Key Responsibilities: Maintain and promote a strong safety culture for all employees, vendors, and customers and follow all health, safety and environmental policies, procedures, and regulations. Identify and communicate workplace hazards and correct or seek assistance in correcting unsafe actions or conditions.Review infrastructure designs for security vulnerabilities, and policies in light of security best practices and information security policies.Monitor, analyze and report on corporate security systems and security applications.Analyzes and resolves security breaches and vulnerability issues.Support forensic activities and digital review/evidence collection for security incidents.Conducts user activity audits and supports business regulatory requirements.Perform internal network vulnerability scanning and external penetration testing and resolve issues.Support business regulatory requirements.Act as a point of escalation for Service Desk incidents and requests.Understand and review current and future router and firewall access control lists for security best practices, vulnerabilities, and policies.Regulate physical security systems: security camera systems and access control systems.Review security of enterprise software code.Adhere to IT and corporate standards and security policies. Assist with recommendations for changes to existing or suggest new security standards and policies associated with risk mitigation and security event response.Other duties as assigned.Qualifications and Skills Bachelor's Degree in Information Technology or related field, 5-8 years of relevant experience, with 35 years in information security, or equivalent combinationSystems Security Certified Practitioner (SSCP) certificationCompetent with networking, hardware, software, and server systems technologiesCompetent with parsing security and server logsCompetent in IT security best practicesCompetent with router/firewall access control lists (ACLs), virtual private networks (VPNs), and complex routing scenarios.Proficient with Microsoft Office, Microsoft Project, Microsoft Visio, and two latest versions of Microsoft WindowsDesired Qualifications: Bachelor's Degree in Computer Science, Information Security or a related fieldCertified Information Systems Security Professional (CISSP) or Certified Secure Software Lifecycle Professional (CSSLP) CertificationFamiliar with Software as a Service (SaaS) security conceptsUnderstanding of application development best practicesExperience with Linux operating systems, Checkpoint firewalls, and various scripting languagesAA/EOE/M/W/Vet/Disability#J-18808-Ljbffr