XTN-0617191 | IT SECURITY ANALYST

The IT Security Analyst reports to the Clark Team Lead and is responsible for information security policy development and annual revisions; monitoring compliance with corporate IT security policies and applicable regulatory or legal requirements; coordination for the investigation and reporting of security events, and incident response activities. Works closely with the Infrastructure Engineering, Administration, and Systems teams to evaluate and recommend the proper security controls in support of the organization’s digital network, data, physical environment, and personnel. The analyst is charged with monitoring, assessing, and tuning the IT business continuity and disaster recovery program, vulnerability assessment scans across the enterprise delivery pipeline, risk assessment reviews, and facilitating remediation of identified vulnerabilities for corrective action. Exhibit the ability to identify opportunities to reduce risk and oversees changes related to risk mitigation, and reports on findings. Participates with IT audits and regulatory compliance needs. This position requires dependable and timely attendance at work to meet department and team workload demands. Job Responsibilities • Monitor, respond, and advise on information security issues related to any corporate owned devices to ensure the security controls in place are appropriate and operating as intended • Coordinate response to information security incidents • Ability to analyze systems and conduct activities within the SDLC framework • Develop and publish information security policies, procedures, standards and/or guidelines based on best-practices and applicable security requirements • Consistently exhibit and support a “customer” first attitude by providing best-practice security solutions that meet the needs of the business • Encourage a collaborative and positive environment for security awareness and education • Conduct security research to gain a better understanding of the enterprise threat landscape and keeping abreast of the latest security issues • Perform other related duties as assigned Related Duties • Maintain a positive work atmosphere by behaving and communicating in a manner that encourages a trust relationship across the organization • Lead by displaying a positive example • Seek to do the “Right Thing” Review Employee Handbook annually for changes and updates • Maintain a clean, organized and safe work environment • Attention to detail is a must • Ability to self-motivate • Ability to positively motivate others • Ability to work independently and within a team environment • Use of good judgment and common sense to prioritize work • Maintain confidentiality of privileged information obtained in the course of work • Other duties deemed necessary • Use agile-related methodologies as they are relevant to the environment and information security task workflow • Conduct risk assessments on new technologies as needed • Coordinate and execute IS security projects for the company • Conduct security research in keeping abreast of latest security technology, threats and remediation • Prepare Security and Risk Technical Team documentation, including department policies and procedures, company notifications, web content, and alerts • Evaluates current procedures and practices for accomplishing department objectives to develop and implement improved procedures and practices • Assist, as needed, in preparation for audits (e.g. Payment Card Industry (PCI), SOX, etc.) • Familiarity with information privacy law and privacy concerns • Participate in the annual revision of corporate security policies • Communicate effectively through presentations, using written and verbal means to co-workers, leadership, and executives • Effectively manage multiple tasks simultaneously; coordinating resources and ensuring scheduled goals are met • Have understanding of quality assurance and security testing techniques Knowledge & Experience • Advanced understanding of firewalls, switches, routers, email gateway and DLP, IPS/IDS, anti-virus/malware, vulnerability scanning, system event and system monitoring solutions, and security-related systems • Solid understanding of and practical experience with protecting data at rest, data in motion and data at endpoint concepts • Knowledge of Security Profiling and Threat models • Familiarity with cryptographic algorithms and libraries • Solid understanding of network protocols, ports, and services • Solid understanding of operating systems and related components • Solid understanding of applicable compliance, legal, state regulations and/or other security-related requirements Education • Bachelor level degree in information technology, security, or related field. KMC Careers If you're a rockstar at what you do and looking to be a part of our amazing story, we want to hear from you! We offer attractive salaries and benefits plus you get to work in some of the Philippines' best flexible workspaces. Our employees also