Senior Cybersecurity Analyst 2 - Risk and Compliance

Description

Please note, this is a hybrid position requiring 8 days per month on-site in Lakeland, FL.Join Publix Technology - Where Innovation Meets Impact

Publix Super Markets, Inc., the largest employee-owned company in the U.S., is powered by a dynamic technology team of 2,100 associates. We deliver modern, cutting-edge solutions to 1,400 stores and over 200,000 internal team members across 8 states. Whether you're passionate about IT security, platform engineering, architecture, software development, or infrastructure, we offer exciting career paths at every level - from internships to technical leadership. Be part of a Fortune “100 Best Companies to Work For” and help us build more than just great subs - build the future of technology for Publix.As a Senior Cybersecurity Analyst (Risk and Compliance) you will leverage a broad understanding of IT, regulatory, and cybersecurity domains to assess the security posture of various aspects of Publix and determine the adequacy of current controls. This opportunity will allow you to further expand and apply your skills to solve critical business and data protection related challenges as part of a team, driving identification and assessment of risks, validation of compliance to multiple regulations, and adherence to standards and security best practices.

Job Responsibilities:

• Proactively identify potential cyber security risks across various areas of the business.
• Analyze the likelihood and impact of identified risks to understand their potential impact.
• Provide in-depth analysis of cyber security risks to the leadership team to make decisions that protect Publix.
• Develop strategies, plans, and recommendations to reduce or eliminate cyber security risks and work with relevant teams to implement.
• Continuously monitor the effectiveness of cyber risk management strategies, prioritize mitigation activities, and report risk-related issues and challenges to relevant stakeholders.
• Assess organizational compliance with regulatory and legal requirements but strategically help teams think through the best way to manage risk in accordance with security best practices.
• Serve as a liaison and foster strategic working relationships with technical architects, engineering teams, and businesses to inform them of IT controls or requirements as well as ensure security standards are being met.
• Assist with regulatory related projects such as gap assessments, annual audits, and remediation tracking.
• Provide security and compliance consultation on new projects pertaining to PCI DSS, cloud security, data privacy, HIPAA, SOX, etc.
• Assist in third party risk management assessments to evaluate the security of vendors and hosted solutions based on approved information security standards.

Required Qualifications

• Bachelor’s degree in management information systems, Computer Science, Information Security, or other analytical disciplines or equivalent experience,
• 4 years of combined experience in Information Security, Compliance, Technology Audit, or a related field,
• 4 years of experience in leading and conducting risk assessments.
• 4 years of internal auditing or internal governance support.
• 4 years of experience in security risk assessment, threat modeling, and risk analysis.
• 2 years of experience with security control frameworks such as ISO 27001, COBIT, NIST, PCI DSS, HITRUST, SOX, HIPAA, etc.

Preferred Qualifications

• 6 years of combined experience in Information Security, Compliance, Technology Audit, or a related field
• Successful completion of one or more of the following certifications: CISA, CISM, CRISC, CCSP, and/or CISSP
• Operating system and cloud security experience
• Experience evaluating the security infrastructure for large enterprise merchants or service providers,
• General understanding of networking and firewall concepts
• Working knowledge of audit methodologies, security assessment tools, and monitoring methodologies

Year End Bonus

As a year-end bonus to associates, Publix issues one month’s extra pay (pro-rated in the first year) each year if associate remains employed through issue date of the bonus check that year. This is calculated as a 13th month of pay in the Potential Annual Pay with Bonus line above.

Benefits Information

• Employee stock ownership plan that contributes Publix stock to associates each year at no cost
• An opportunity to purchase additional shares of our privately-held stock
• 401(k) retirement savings plan
• Group health, dental and vision plans
• Paid Time Off
• Paid Parental Leave
• Short- and long-term disability insurance
• Tuition reimbursement
• Free hot lunches (buffet-style) at facilities with a cafeteria
• Visit our website to see all of our benefits: https://jobs.publix.com/benefits/

Additional Information

Your application may have additional steps that you will need to complete in order to remain eligible for consideration. Please be sure to monitor your email, including your spam folder, on a daily basis for critical, time-sensitive emails that could require action within 24-48 hours. Please do not use your Publix email address when applying. Once your application has been successfully submitted you will receive a confirmation email.

***Relocation/Household Good Shipment Allowance will NOT be provided.***

Facility

Lak Information Systems/DTO2 B015