JOB SUMMARY: Works closely with the other members of the Information Security Team to establish plans and protocols to protect digital files and information systems against unauthorized access, modification and/or destruction. Will also work with the IT department and other business units to select and deploy technical controls to meet specific security requirements, define processes and standards to ensure that security configurations are maintained, and analyze logs from such controls to identify and respond to risks and threat activity. PRIMARY RESPONSIBILITIES: Develops security processes and procedures, supports service-level agreements (SLAs) to ensure that security controls are managed and maintained. Works with Information Security leadership to develop strategies and plans to enforce security requirements and address identified risks. Maintains knowledge of security best practices, threats and trends in information security and applies that when recommending controls within the ISO 27001 security framework. Researches and collaborates with others to implement system and application hardening procedures for physical, virtual and cloud resources. Participates in vulnerability analysis and collaborates with others to remediate or provide mitigation guidance, as necessary. Interfaces with Managed Security Services Provider and performs general threat analysis and escalation for identified risks and/or vulnerabilities. Completes third party risk assessments as needed. Implements and maintains security controls necessary to effectively report progress in maturing the Information Security Program Has working knowledge of current security tool set and defines operational parameters for their use and conducts regular reviews of tool output. Participates in internal initiatives for the implementation, use, and improvement of processes, procedures, guidelines, and metrics for security systems. Analyzes the results of audits to produce recommendations of acceptable risk and risk mitigation strategies. In-depth knowledge and understanding of information risk concepts and principles, as a means of relating business needs to security controls. Provides technical leadership & mentoring to less senior members on the team. Plans and executes cybersecurity awareness events and communication campaigns. Monitors and reports on the effectiveness of security awareness initiatives. Assists with the collection, analysis, and presentation of cybersecurity program performance metrics and key risk indicators (KRIs). Documents and monitors mitigation strategies and risk management plans. Supports cross-functional teams in the implementation of regulatory controls and performs periodic gap assessments to validate compliance. Monitors compliance and reports effectiveness. SCOPE: Decision Impact: Dept. Department Responsibility: Single Budgetary Responsibility: No Direct Reports: No Indirect Reports: No Physical Requirements: N/A REQUIRED EDUCATION: Minimum Bachelor’s Degree in Computer Information Systems or equivalent degree/work experience GIAC certification preferred REQUIRED EXPERIENCE: Related Functional Experience: Minimum of 2 years supporting enterprise-class security controls, processes and systems Familiarity with ISO 27000-series PulteGroup, Inc. and its affiliates do not accept unsolicited resumes from individual recruiters or third party recruiting agencies (collectively, “Recruiters”) in response to job postings. If Recruiters nevertheless submit one or more unsolicited resumes to any employee at PulteGroup, Inc. or its affiliates without a valid written agreement in place for this position, it will be deemed the sole property of PulteGroup, Inc. and its affiliates. No fee will be owing or paid to Recruiters who submit unsolicited candidates, in the event the candidate is hired by PulteGroup, Inc. or its affiliates as a result of the referral, without a written agreement between PulteGroup, Inc. and through any means other than via our Applicant Tracking System. We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law. We will provide a reasonable accommodation to a qualified applicant with a disability that will enable the individual to have an equal opportunity to participate in the application process and to be considered for a job. This Organization Participates in e-Verify Pulte Homes of Minnesota is an equal employment opportunity/affirmative action employer. California Privacy Policy Here at PulteGroup: We will not send correspondence from any non-PulteGroup email (for example, we will not contact you via a gmail, yahoo or outlook email address) We conduct our interviews in person or via phone or Teams/Zoom video (we would never conduct an interview via text message or Teams chat) We will not issue you a check as part of your onboarding for any reason (including for supplies, home office equipment, computers, etc.) We will not request money as part of your interview or onboarding process If you suspect you have been contacted by a scammer and would like to verify the legitimacy of an offer, please contact Recruiting@Pulte.com. PulteGroup Employee Benefits At PulteGroup, we believe that our people are what makes us a great place to work and we strive to meet their health and welfare needs with a competitive suite of benefit offerings designed for their unique lifestyles. Comprehensive, Flexible and Affordable Healthcare Coverage Options Supplemental Healthcare Coverage Opportunities PTO and Work/Life Benefits Health Advocacy and Wellness Retirement Plan with Company Match Education and Employee Assistance Programs Paid Parental Leave and Adoption Benefits Mortgage Financing Discounts through Pulte Mortgage Introduce yourself to our recruiters and we'll get in touch if there's a role that seems like a good match.