Security Analyst III

Canon Virginia, Inc. is seeking a Security Analyst III for its Regional Technical Headquarters in Newport News, VA. In this hybrid role, you will help protect organizational IT systems, networks, and data by implementing access controls, security measures, and risk and vulnerability assessment activities, while also supporting disaster recovery planning and security governance.

Working as part of a team across the organization, you will manage IT security and IT risk for data systems, networks, and web-related environments. The role also includes facilitating security training, supporting audits and examinations, and helping drive remediation of identified vulnerabilities using established IT security tools and methodologies.

Key Responsibilities

• Protects computer assets by establishing and enforcing system access controls and maintaining disaster preparedness.
• Plans and implements security measures to protect computer systems, network, and data.
• Works to prevent data loss and service interruptions through research and evaluation of technologies that can effectively protect the organization.
• Creates disaster recovery plans and procedures for IT employees to follow during emergencies.
• Develops policies, procedures, and standards that align with existing and newly developed policy and regulatory requirements, including SOX, PCI, and/or FFIEC guidance.
• Facilitates IT security and risk training curriculum.
• Addresses questions and support needs from internal and external audits and examinations.
• Manages IT security and IT risk across the organization for data systems, network, and/or web.
• Assesses information risk, facilitates remediation of vulnerabilities in networks, systems, and applications, and reports findings and recommendations for corrective action.
• Performs vulnerability assessments as assigned using IT security tools and methodologies.
• Assesses the IT security and risk posture within IT networks, systems, and software applications.
• Establishes computer and terminal physical security standards, coordinating with facilities security and recommending improvements.
• Safeguards computer files through regular backups, and develops procedures for source code management and disaster preparedness, including improvement recommendations.
• Develops security standards, recommends security enhancements to management or senior IT staff, and maintains and improves security monitoring procedures and processes.
• Establishes system controls by developing frameworks for controls and levels of access, with recommendations for improvements.

Required Qualifications

• Any combination of education and experience equivalent to a Bachelor’s degree in Networking, Information Technology, or a related field, plus 4 to 6 years of security experience.
• Network Certification required.
• Expert experience in network setup, configuration, security, and troubleshooting.
• Extensive technical knowledge of network systems, management and analysis tools, protocols, security systems, data privacy laws, network hardware and standards including: Ethernet, Token ring, LAN, WAN, frame relay, xDSL, TCP/IP, ATM, T1, 802.11x.
• Experience troubleshooting client/server environments, operating systems, switched and routed environments, and hardware, software, and network connections.
• Expert knowledge of current network hardware and installation of networking equipment; strong interpersonal, written, and oral communication skills.
• Strong customer service orientation.
• Experience working in a team-oriented, collaborative environment.
• Working knowledge of CMMC 2 certification preferred.
• Must be 18 years of age or older.

Technologies and Standards

• Ethernet, Token ring, LAN, WAN, frame relay, xDSL, TCP/IP, ATM, T1, 802.11x
• SOX, PCI, FFIEC, CMMC 2

Work Location and Schedule

• Hybrid in Newport News, VA: full-time with a hybrid schedule requiring office attendance 4 days per week and the option to work from home 1 day per week, unless business needs require in-office attendance on other days.
• Standard in-office days are Monday and Wednesday.
• The third and fourth in-office day are determined by divisional management.
• Work schedules and office reporting requirements may change based on business needs.

Equal Opportunity: Canon Virginia, Inc. is an equal opportunity employer and a federal contractor. During the recruitment process, you will be invited to voluntarily self-identify in compliance with federal/state laws.