Job Information
Meijer Specialist, Information Security Compliance in Grand Rapids, Michigan
As a family company, we serve people and communities. When you work at Meijer, you’re provided with career and community opportunities centered around leadership, personal growth and development. Consider joining our family – take care of your career and your community!
Meijer Rewards
Weekly pay
Scheduling flexibility
Paid parental leave
Paid education assistance
Team member discount
Development programs for advancement and career growth
Please review the job profile below and apply today!
This role is open to remote work if you're located in one of our 6 footprint states - Michigan, Indiana, Illinois, Ohio, Wisconsin or Kentucky.
This role does not offer sponsorship - this includes OPT Student Visas.
.
What You’ll be Doing:
Develop, implement, and monitor a strategic, comprehensive enterprise information security compliance program.
Ensure that our IT infrastructure is in line with industry standards and compliance regulations.
Work closely with IT and business stakeholders to understand their needs and ensure that compliance requirements are met without hindering business operations.
Conduct regular audits and risk assessments to identify vulnerabilities and non-compliance issues.
Coordinate with external auditors and consultants to conduct external security audits.
Prepare and document standard operating procedures and protocols.
Design and implement educational programs to improve the understanding of related laws and regulatory requirements across the organization.
Respond to security breaches and identify the root cause to prevent future incidents.
Stay current with the latest security technology and practices, as well as compliance regulations and standards.
Serves as primary driver to identify securable resources and mentor/assist business staff in selecting appropriate resource owners.
Works with resource owners in business organizations to determine appropriate security policies for securable resources.
Consults with IT technical services staff to evaluate, select, install and configure hardware and software systems that provide appropriate security functions.
Mentors, leads or assists resource owners and IT staff in understanding and responding to security audit failures reported by internal and external auditing departments.
Advises security administration staff on normal and exception processing of security authorization requests.
Determine appropriate level of documentation. Documents security policies and maintains resource classification scheme. May be required on occasion to present information on security status, project status and security training to audiences from management to field staff as appropriate.
Proactively protects the integrity, confidentiality and availability of information in the custody of or processed by the company by: responding in a timely manner to a loss or misuse of information assets; leading and participating in investigations of suspected information security misuse or in compliance reviews as requested by auditors; communicating unresolved security exposures, misuse or noncompliance situations to management.
Consults with IT management to ensure selection and use of realistic enforcement mechanisms.
Oversees review of security policies and resource classification scheme; keeps management informed of project status.
Provides technical expertise and guides the administration of security tools that control and monitor information security, including: updating access control tables; setting up user logon ids and assigning/resetting passwords; designing computer system access reports to identifypossible security violations.
Researches, defines, develops and maintains effective disaster recovery plans, processes and procedures necessary to recover services in the event of a declared disaster. Provides direction and in house consulting in these areas.
Researches, evaluates, designs, tests, recommends and plans implementation of new or improved information security software or devices.
Analyzes new software applications or tool implementations for implications to existing security software and devices.
Defines curriculum and trains information owners in the implementation of necessary computer security controls or new/upgraded security software and devices.
Develops and implements information security educational programs, conducting awareness seminars and workshops as appropriate.
Maintains technical reference library. Develops technical information materials and workshops on these new areas for IT as appropriate.
This job profile is not meant to be all inclusive of the responsibilities of this position; may perform other duties as assigned or required.
What You Bring with You (Qualifications):
Bachelor’s degree in Computer Science, Information Technology, or a related field.
Professional certification such as CISSP, CISA, CISM, SANS GIAC, or other industry specific certification.
Minimum 5 years of experience in Information Security.
6+ years of experience in IT with a broad range of exposure to business planning, systems analysis, security solutions, application development and infrastructure support.
Experience in IT must include exposure to systems analysis, security solutions and application development, and infrastructure support.
In-depth knowledge of PCI, HIPAA, URAC, CTPAT, and other relevant compliance frameworks.
Familiarity with information security standards, including NIST, CIS, ISO 27001, ITIL.
Experience as an IT auditor is highly valuable.
Strong understanding of IT systems, architecture, and the security aspects of compliance.
Excellent communication and leadership abilities.
We opened our doors more than 90 years ago with the goal of helping people provide for themselves and their family. Today we’re a multi-billion dollar retailer with more than 70,000 employees across six states. Our Midwest geography includes corporate offices in Grand Rapids, Michigan, plus manufacturing facilities, distribution centers and over 270 stores across Michigan, Illinois, Indiana, Kentucky, Ohio and Wisconsin.
Meijer is an Equal Opportunity Employer, fostering a diverse and inclusive workplace. We are committed to treating all persons with dignity and respect. Meijer's policy is to not discriminate because of any applicant or team member's race, color, national origin, sex, sexual orientation, gender identity or expression, pregnancy, religion, age, physical or mental disability, uniformed service or veteran status, or any other lawfully-protected classification. If you have a disability and require a reasonable accommodation to complete any part of your application, please click here to submit your request . Submissions that are not seeking help to complete the application due to a disability will not be responded to.