IT Infrastructure Security & Compliance Specialist

The Timberline Group; St. Louis (MO); On-site; USD 90,000 - 120,000; Full time

Job summary

The Timberline Group in St. Louis, MO is seeking an IT Infrastructure Security & Compliance Specialist to drive secure, compliant infrastructure across the enterprise.

You will partner with the manager and act as a central liaison to DTO Infrastructure Engineering, GRC, and Operations to break down complex challenges and build sustainable work streams. You will help implement security controls, monitor tools, and address compliance requirements across Sarbanes-Oxley, HIPAA, and related

Qualifications

• 5+ years of broad IT Infrastructure experience, focus on servers and/or networks.
• Practical understanding of cybersecurity in infrastructure, IT security compliance, risk management and information security principles.
• Bachelor’s degree in computer science, information technology, cybersecurity or related field.

Responsibilities

• Break down complex challenges and build sustainable work streams.
• Act as liaison to multiple tech organizations (Infrastructure, GRC, Cybersecurity, Ops).
• Recommend and implement security/compliance programs across infrastructure.
• Support enhancements to secure infrastructure and governance, monitoring, and incident response.

Skills

IT Infrastructure

Server Admin

Network Admin

Cybersecurity

Risk Management

Information Security

Access Control

Compliance

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Job description

IT Infrastructure Security & Compliance Specialist

• St. Louis, Missouri

Overview/Scope:

Essentially this individual would be responsible for helping breakdown complex challenges, build sustainable work streams, understand requirements, and build programs to help support the infrastructure and how they can better secure and drive a more compliant infrastructure.

This person would partner with the manager and operate as a liaison/central point of contact to multiple technology organizations and functions including:

• DTO Infrastructure Engineering, Architecture, System & Network Operations Administration, Command Center, Service Management, and Operational Excellence
• Digital Cybersecurity Engineering, Architecture, Operations, Governance Risk & Compliance (GRC), Vulnerability Management, and Threat Management

4 major programs that this team is responsible for delivering on/advancing:

• Enhancements to the Infrastructure to become more secure on a continuous basis.
• Manage the broader Infrastructure- put controls in place as well as govern their own procedures and processes for review/audit purposes.
• Enhanced monitoring- make sure that the cyber security tool sets and technologies that they deploy to secure the infrastructure (both in corporate and our operational environments) are up to date.
• Consult in several capacities- make recommendations on how they might address a security/compliance challenge.

Must haves:

• 5+ years of broad IT Infrastructure experience specifically Server and/or Network Administration in a large enterprise level organization. Think 2nd or 3rd level support type individuals.
• Practical understanding of Cybersecurity in infrastructure setting; IT security compliance, risk management and information security principles including access control, network security, information security architecture, information security operations
• Bachelor’s degree required in Computer Science, Information Technology, Cybersecurity or similar technology related degree from an accredited college or university.

Nice to haves in order of importance:

• Basic understanding of engineering and architecture as it pertains to system administration.
• Experience deploying tools to manage and secure infrastructure.
• Comfortable working in multi-discipline teams and projects to achieve objectives either as subject matter expert or technical lead (ex. Cybersecurity, Infrastructure Operations/Engineering/Architecture)
• Hands on operations support to regulated systems, storage, or network infrastructure (ex. Sarbanes-Oxley, NERC-CIP, HIPAA, or similar)
• Infrastructure support as operations subject matter expert to projects deploying/upgrading server or network operating systems, cyber security, and/or systems management tools.
• Practical understanding of IT security compliance, risk management and information security principles including access control, network security, information security architecture, information security operations, and leading practices and associated tools
• ISC2 CISSP or ISACA CISM Certification
• ITIL v4 Foundation Certification
• Lean/Continuous Improvement expertise preferred, understanding of Agile development.

Soft Skills:

• Able to communicate with all levels of the org including technical teams and Senior level individuals such as managers/VPs.
• Fast learner/ability to come in and hit the ground running.