Summary: This position is responsible for protecting company's physical and intellectual properties through technology. Reporting to the local Security Manager with a matrix reporting relationship to the Senior Manager for North America Security Operations, the Information Security Engineer II will establish Information Security policies, design security framework, implement applications technology, monitor security risks, problem solve incident and train other security profiles and users.
Responsibilities:- Conduct company's overall security assessment
- Develop and maintain security polices, standards, and procedures
- Explore and negotiate terms of security solutions
- Investigate logs, data, and integration flows; trace root causes using DB queries when necessary.
- Oversee and direct solutions implementation progress
- Monitor security breaches and ensure internal compliance
- Manage IT Security assets (CCTV, IDP, Virus, Firewall, subscriptions, etc.)
- Manage IT-related issues and serve as a communication channel with HQ
- Manage hardware and software asset registration, disposal, inventory, and in-use counts.
- Operate and stabilize manufacturing production and logistics systems, including on-site support.
- Other ad-hoc projects as necessary
Qualifications and Requirements:- Bachelor's Degree in IT or related field or equivalent, relevant experience
- 3+ years of relevant work experience within manufacturing/construction industry
- Knowledge of security frameworks such as NIST, ISO 27001, and CIS.
- Strong understanding of security technologies (SIEM, VPN, endpoint security).
- Experience with vulnerability management and risk assessment tools.
- Experience with system interfaces, integration monitoring, and troubleshooting data synchronization issues.
Skills:- Strong analytical, problem-solving, and communication skills.
- Resourceful and adaptable to changing security needs.
- Incident response and forensic investigation skills.
- Strong understanding of security principles, including risk assessment and mitigation
- Resourceful and adaptable to changing security needs.
- Security certifications (CISSP, CISA, and/or CompTIA Security+).
