Summary

This is a leadership position responsible for security operations for the J.R. Simplot Company through effective cyber-risk management. The individual filling this role will apply advanced technical security knowledge to solve common and complex security issues within established guidelines, recommend appropriate alternatives striking a balance between security and operational needs, and will be considered a subject matter expert. The position requires the ability to exercise independent judgement within general to broadly defined policies and practices to identify or determine best methods for achieving security objectives. Will be required to act as a team leader providing expertise or direction to team activities.

Key Responsibilities

• Recommends and implements security technical design and architecture to support new technology and compatibility with current infrastructure architecture (including SaaS and IoT technologies).
• Primary contact enabling large technology projects through effective cyber-risk managed.
• Keeps current on latest cybersecurity threats and recommend/implement solutions.
• Participates in planning, design, implementation, and maintenance of security systems and controls.
• Develops new security standards, procedures and policies, as necessary, to maintain the security of J.R. Simplot people, processes and technologies.
• Conducts technical risk analysis / assessments to identify and qualify potential risks and recommends remediation strategies to help maintain an acceptable risk tolerance.
• Partnering with business and technical teams to guide efforts in a direction that protects Company data and systems.
• Contributes to forensic investigation efforts related to security incidents, policy violations, and legal and HR. response.

Typical Education

Relevant Experience

• 5-10 years of directly related experience and training.
• Ability to partnering with business and technical teams to guide efforts in a direction that protects Company data and systems.
• Ability to perform technical risk analysis / assessments to identify and qualify potential risks and recommends remediation strategies to help maintain an acceptable risk tolerance.
• Strong influence and negotiation skills
• One or more IT security certifications is strongly preferred: CISSP, ISSEP, CISM, GSEC, GICH, CCNP, etc.
• Cloud Security (Azure or AWS) is preferred
• Experience with multiple standard security technologies: proxy, firewalls and network security capabilities, IDS/IPS, DLP, AV, end-point protection, vulnerability scanning, security event log monitoring, etc.
• Experience responding to external and internal threats.
• #LI-MG1