Information Security Engineer

Synovus; Franklin (TN); Sur place; USD 120 000 - 160 000; Plein temps

Résumé du poste

Synovus is seeking a senior information security professional to lead architectural decisions, risk assessments, and security program improvements across enterprise environments. The role involves evaluating new tools, coordinating with IT and business teams, and maintaining security standards and incident response processes.

The candidate should have extensive information security experience, CISSP/MCSE/CNE preferred, and the ability to communicate complex security concepts to diverse

Qualifications

• Bachelor's Degree in Information Technology, Business Administration, or related field or an equivalent combination of education and experience.
• Eight years of information security experience including intrusion detection, penetration testing, identity and access management; CISSP/MCSE/CNE preferred.

Responsabilités

• Design, implement, and maintain security architecture, standards, procedures and guidelines for multiple platforms.
• Evaluate, test and implement emerging technologies; present security enhancements for approval.
• Perform security assessments and risk analyses; develop security scenarios and response procedures.
• Coordinate security activities with business units, users and external networks to mitigate risk.
• Maintain security tools; investigate violations and monitor vulnerabilities.
• Provide security awareness education and consult on security policies and practices.
• Contribute to 24x7 on-call rotation to ensure security infrastructure availability.
• Generate security metrics and reports for internal stakeholders.

Connaissances

Security architecture

Incident response

Risk assessment

Information security

Communication

Formation

Bachelor's degree in Information Technology/Business Administration or related field

Equivalent combination of education and experience

Description du poste

Consults on a senior level and provides professional support for major components of the firm's information security program. Responsible for supporting the technical analysis, design consulting and product review of security components. Leads the identification of new tools and techniques. Evaluates and assesses existing technical issues by researching and identifying innovative solutions to broad and complex information security challenges. Manages components of various projects to completion, consulting with various corporate teams, both within the Information Technology and business environments to define information security solutions.

Job Duties and Responsibilities

• Provides support in the development and implementation of security architecture, standards, procedures and guidelines for multiple platforms in diverse system environments. Ensures that security concerns are addressed and mitigated and appropriate standards are defined and published.
• Often drives the evaluation, testing and implementation of emerging technologies, information systems security issues. Presents proposed security enhancements to management for approval, funding and implementation.
• Performs security assessments and reviews networking initiatives for security compliance. Prepares status reports and "informational" metrics on security matters; develops security risk analysis scenarios and response procedures.
• Serves as a resource regarding the security of data networks and centralized data frameworks, to include coordinating activities with the business unit, users and external networks.
• Robust operational knowledge of the TCP/IP stack, network protocols, network topology and architecture, Windows and Unix operating systems, system logs events, anti-virus technologies, authentication systems (AD, LDAP, RADIUS, RACF), DNS, DHCP, SNMP, NetFlow, IP and application development processes/lifecycles
• Provides input into the design, implementation, and maintenance of the information security architecture. Analyzes, reviews, and determines the technical requirements necessary to mitigate the security risk for Information Technology needs, plans, and initiatives.
• Implements and maintains required security tools. Investigates information security violations; monitors and communicates technical vulnerabilities.
• Recognizes and identifies potential areas where existing security policies and procedures require change, or where new ones need to be developed. Conducts risk assessments and security briefings; advises management of critical issues.
• Evaluates products and/or procedures to enhance productivity and effectiveness. Provide direct support to the firm and Information Technology staff for security related issues. Coordinates security awareness programs and provides education on security policies and practices. Provides consultations on security issues regarding new and existing systems.
• Monitors Information Technology assets for security requirements to include procedures, software, and integrity.
• Works to build and maintain a security sensitive mindset within the firm culture.
• Participates in major projects and initiatives with a low level of management oversight
• Assists with the development, implementation, monitoring, maintenance and compliance of all information security standards, policies, and procedures.
• Participates in the on-call rotation that ensures 24x7 coverage of the corporate security infrastructure and network environments, assuming responsibility for resolving or escalating any network issues that arise during own on-call period
• Generates security/network-related Management Information for regular internal reporting, including producing some high-level analysis of any emerging trends.
• Each team member is expected to be aware of risk within their functional area. This includes observing all policies, procedures, laws, regulations and risk limits specific to their role. Additionally, they should raise and report known or suspected violations to the appropriate Company authority in a timely fashion.
• Meet all the client's financial needs, both business and personal, and refer clients to other specialty areas such as Trust, Investments, Insurance, Treasury Management, etc. as appropriate.
• Assist other team members as needed to ensure delivery of distinctive service.
• Performs other related duties as required.

The information on this description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job. Pinnacle is an Equal Opportunity Employer committed to fostering an inclusive work environment.

Minimum Education

Bachelor's Degree in Information Technology, Business Administration, or related field or an equivalent combination of education and experience.

Minimum Experience

Eight years of information security experience to include a background in a multiple information security technologies (e.g. intrusion detection, penetration testing, identity and access management).Certified Information Systems Security Professional (CISSP), Microsoft Certified Systems Engineer (MCSE), and/or Certified Network Engineer (CNE) are preferred.

Required Knowledge, Skills & Abilities

• Stand or Walk Regularly
• Talk and Hear Regularly
• Ability to see objects up close or at a distance, use peripheral vision, identify basic colors
• Use of Hands/ability to reach

Synovus is an equal opportunity employer committed to fostering an inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.

Applicants with Disabilities: All interested and qualified candidates are invited to apply for employment opportunities with Synovus. If you are an applicant with a disability who is unable to use our online tools to search and apply for jobs, please contact us at [e-mail] .

Pinnacle Bank, a Tennessee bank, d/b/a Synovus Bank