Information Security Champion (Analyst)

Software Guidance & Assistance, Inc., (SGA), is searching for an Information Security Champion (Analyst) for a CONTRACT assignment with one of our premier Automotive Services clients in Sandy Springs, GA. The Information Security Champion is responsible for establishing and maintaining security programs and services, working closely with stakeholders across Daimler/MBUSA IT Cybersecurity, ITT, App Dev and Business Operations. The information security Champion is a contributor to the following IT Cybersecurity programs/capabilities: Incident Response with tabletops, Application Recovery, Business Continuity Services and Disaster Recovery, User Awareness, Ensuring application adherence to Security requirements/controls, DevSecOps, InfoSec Risk Management and Data Privacy. This role requires strong leadership skills as well as deep technical acumen. Responsibilities :

• Responsible for ensuring security policy is complied with for all applications. This is to be in compliance with MB AG RISE policy.
• Responsible for thorough research on all security vulnerabilities and ensuring application teams have a plan for remediation. This includes the documentation & implementation of the remediation countermeasures from the vulnerabilities identified during the security checks (EPA, SP, CIVA, SCAS, etc.)
• Maintains the overall security status of all applications assigned to the Department Manager. This includes:
• Confluence page updates, IC, PlanningIT entries, ServiceNow, Data@Cloud, GLAD, Audit support, etc.
• Manage the application asset management system, planningIT and perform regular quality checks to ensure security attributes are updated and monitored.
• Facilitate migration of Shadow IT apps into planningIT.
• Facilitate KPI tracking and reporting, driving results.
• Closely Collaborate with IT security team members. This involves:

• Developing application risk factors and reconciling against the portfolio to define security requirements and tracking
• Developing a data privacy program including a maintained reference guide of state regulations (existing & proposed) along with specific security requirements to address regulations.

• Performs and maintains Information Classifications and updates our application repository (planningIT).
• Ensure User Access Reviews are performed for applications assigned to DM, per RISE policy.
• Provide thought leadership in the area of IT and Security.
• Actively optimizes processes to drive efficiency and effectiveness.
• Motivating and inspiring team members.
• Influencing stakeholders to further the MBUSA security posture.
• Developing strong stakeholder relationships built on credibility and partnership.
• Helping drive a pragmatic security agenda that is effective but help the business and IT teams achieve speed-to-market.
• Driving initiatives and successfully managing scope, timeline, budgets, quality.
• Development and delivery of presentations designed to articulate key messages to support the security program.
• Drives innovation and automation in the security space.

• Minimum 1-3 years of relevant work experience IT/Information Security
• Excellent written and verbal communication skills; interpersonal and collaborative skills; and the ability to communicate security and risk-related concepts to technical and nontechnical audiences.
• Strong cybersecurity experience in large complex business organizations;
• Deep understanding of cybersecurity and the relationship between threat, vulnerability and information value in the context of risk management.
• Known as a thought leader or active content contributor in the cybersecurity community
• Strong proficiency with common cybersecurity management frameworks, regulatory requirements and industry leading practices

• Preferred at least 3-5 years experience in many of the following areas:
  • Security Architecture/design
  • Forensics, eDiscovery, network security
  • Cloud, endpoint and mobile security
  • Azure, AWS Security
  • SCADA/ICS Securty
  • TVM, patch management and remediations
  • Firewalls, IPS, URL/content filtering, emails security, encryption, SIEM, WAF
  • Windows, Linux OS
  • Server hardening/security baseline standards
  • PKI/certificate management
  • SAP Security
  • Security Operations, Incident Response
  • NIST, SANS20, ISMS ISO27000, CCPA)
  • Identity and Access Management (MFA, SSO, User Access Reviews)