Note: The job is a remote job and is open to candidates in USA. Kohl's is seeking an Information Security Analyst to detect, prevent, and respond to information threats and security breaches across its networks, systems, applications, and data. The role maintains security policies, conducts audits and risk assessments, resolves incidents, monitors emerging threats, and supports Data Loss Prevention initiatives, security awareness, and secure business solutions.
Responsibilities
- Maintain information security policies and coordinate company-wide information security controls
- Conduct information security audits and analyses and regularly drive solutions and actionable deliverables
- Resolve routine security incidents and audits
- Proactively monitor, evaluate and maintain systems and procedures that safeguard internal information systems, networks, databases and Web-based security
- Recommend and implement changes to enhance systems security and prevent unauthorized access
- Educate and communicate security requirements and procedures to users
- Monitor and research new and emerging threats and stay current on information security websites
- Interpret vulnerability scan data to prioritize risks
- Assist in software, hardware and service evaluations, security audits, security risk assessments and the administration of compliance with regulations and privacy laws
- Additional tasks may be assigned
- Analyze DLP dashboards and alerts to determine tool and policy effectiveness, developing strategies to reduce observations and risk
- Work with business teams, as needed, to understand work processes requiring sensitive data and collaboratively develop secure solutions to meet the related business needs
- Identify and help drive innovations to support data protection needs as identified by DLP tooling
- Assist with suggesting DLP policy, standard, and requirement improvements
- Assist with supporting DLP security awareness programs, including the preparation of materials and the education of associates
- Assist with development of Enterprise DLP roadmap, including incremental steps to mature the program
Skills
- Ability to work independently and as part of a product team
- Ability to collect data and derive risk posture
- Understanding of penetration testing, configuration hardening, and vulnerability management
- Knowledge of hacker tactics, techniques and procedures
- Strong interpersonal and communication skills with the ability to interact with technical SMEs and business stakeholders
- Technology security experience
- Data analyst skillset
Benefits
- Remote work arrangement
Company Overview
Company H1B Sponsorship