Sr. Information Security Specialist Full Time Intern Regular

1 week ago Be among the first 25 applicants

Direct message the job poster from Delta Electronics Americas

Corporate Recruiter/ Talent Acquisition/Strategic Recruitments/Employee HR Training@ Delta Electronics Americas

Role: Sr. Information Security Specialist

Location: Fremont, CA

We are seeking an experienced Sr. Information Security Specialist to join our team, focusing on the high-tech manufacturing industry. This role will be responsible for addressing customer compliance inquiries, ensuring adherence to corporate information security policies, and leading incident response notifications in collaboration with the Security Operations Center (SOC) team.

Key Responsibilities

Customer Compliance Support

• Respond to and resolve customer inquiries regarding information security compliance.
• Provide relevant documentation and reports to meet compliance standards such as ISO 27001, NIST, GDPR, or other industry standards.
• Regularly review and update compliance documents to ensure accuracy and relevance.

Policy Enforcement

• Ensure information security policies and procedures comply with regulatory requirements and industry standards.
• Collaborate with cross-functional teams to promote understanding and implementation of security policies.
• Participate in periodic security audits and follow up on corrective actions.

Incident Management and Notification

• Work closely with the SOC team to lead incident response notifications and actions.
• Analyze root causes of security incidents, develop remediation plans, and implement measures to prevent recurrence.
• Prepare detailed incident reports, including technical analysis, impact assessment, and mitigation efforts.

Training and Awareness

• Conduct regular information security awareness training for employees to promote a security-conscious culture.
• Act as an internal security advisor to guide other departments on security-related matters.

Security Architecture & Design

• Lead the design, implementation, and maintenance of secure network architectures.

Vulnerability Management

• Lead vulnerability scanning and penetration testing to identify weaknesses in the system and applications.

Security Monitoring & Risk Management

• Oversee and fine-tune security monitoring tools and SIEM (Security Information and Event Management) systems for proactive detection of suspicious activities.

Job Requirements:

Education:

• BS degree in Information Security, Computer Science or related field.
• Industry certifications such as CISSP, CISM desired.

Experience:

• 9-12 years of experience working in the information technology Security areas.

Skills and Certifications

• Strong knowledge of information security standards (e.g., ISO 27001, NIST, GDPR, CMMC).
• Experienced in ISMS (Information Security Management System) and PIMS (Personal Information Management System) implementation and establishment.
• Information security risk assessment, audit, and analysis.
• General knowledge of IT systems, databases, operating systems, networks.
• Industry certifications such as CISSP, CISM, ISO 27001/27701/20000/9001 Lead Auditor or equivalent are preferred.
• Hands-on experience with vulnerability assessment tools and techniques (e.g., Nessus, OpenVAS, Nexpose).
• Proficiency with security monitoring tools (e.g., SIEM platforms like Splunk, QRadar, or ArcSight).
• Experience in incident response, digital forensics, and malware analysis.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology

Industries

• Manufacturing

#J-18808-Ljbffr