Principal Security Analyst - IT Compliance-Remote

Publix Super Markets, Inc. is the largest privately-owned food retailer in the nation with more than 1,200 stores and more than 200,000 associates throughout the Southeast. We are associate-owned, proud of our family atmosphere, and consistently named as one of the best companies to work for in America. We are largely debt-free and renowned for our financial performance as well as our premier customer service. Publixs Information Services (I/S) department is located in Lakeland, Florida and Alpharetta, Georgia and employs over 1000 associates. I/S provides the information technology required for all Publix business units including retail stores and all office and warehouse environments. The Publix I/S mission is to maximize the value of information technology to Publix associates and customers.

• Assessing organizational compliance with regulatory and legal requirements, but strategically helping teams think through the best way to manage risk in accordance with security best practices.
• Serving as a liaison and foster strategic working relationships with technical architects, engineering teams, and the business to inform them of IT controls or requirements as well as ensure security standards are being met.
• Assisting with regulatory related projects such as gap assessments, annual audits, remediation tracking, and secure configuration management.
• Providing security and compliance consultation on new projects pertaining to PCI DSS, cloud security, data privacy, HIPAA, SOX, etc.
• Assisting teams with system and application hardening initiatives by identifying, researching, and evaluating security controls and compliance requirements and presenting them to relevant stakeholders.
• Providing in-depth analysis of security risks to the leadership team to make decisions that protect Publix.
• Assisting in the development, documentation, and presentation of security education, awareness, and training activities for users.
• Conducting reviews to identify and mitigate potential security weaknesses and ensure that all relevant security features applicable to a system are implemented and functional.

• Bachelors Degree in Management Information Systems, Computer Science, Information Security, or other analytical disciplines or equivalent experience,
• At least six years of combined experience in Information Security, Compliance, Technology Audit, or a related field,
• Experience with security control frameworks such as ISO 27001, COBIT, NIST, PCI DSS, HITRUST, SOX, HIPAA, etc.,
• Strong written and verbal communication skills, as well as interpersonal skills including the ability to articulate to both technical and non-technical audiences,
• Excellent analytical and problem-solving skills to perform find resolutions and assist with making contributions for process improvements, and
• Ability to work independently and multi-task effectively.

• At least eight years of combined experience in Information Security, Compliance, Technology Audit, or a related field,
• Successful completion of one or more of the following certifications: CISA, CISM, CRISC, CCSP, and/or CISSP,
• Operating system and cloud security experience,
• Experience evaluating the security infrastructure for large enterprise merchants or service providers,
• General understanding of networking and firewall concepts, and
• Working knowledge of audit methodologies, security assessment tools and monitoring methodologies.

• Employee stock ownership plan that contributes Publix stock to associates each year at no cost
• An opportunity to purchase additional shares of our privately-held stock
• 401(k) retirement savings plan
• Group health plan (with prescription benefits)
• Group dental plan
• Group vision plan
• Sick pay
• Paid Parental Leave
• Long-term disability insurance
• Company-paid life insurance (with accidental death & dismemberment benefits)
• Tuition reimbursement
• Vacation pay
• Free hot lunches (buffet-style) at facilities with a cafeteria
• Paycheck direct deposit
• Credit union
• Access to over 50 discount offers including discounts on computer, vehicle and wireless purchases
• 6 paid holidays (associates can exchange the following holidays with their managers approval: New Years Day, Memorial Day, Fourth of July, and Labor Day).