IT Infrastructure Security & Compliance Specialist
The Timberline Group · St. Louis, Missouri ·
- Seniority
- Lead
- Category
- Devops
- Experience
- 5+ years
Designs and maintains secure IT infrastructure by partnering with engineering and security teams, implementing controls, and ensuring compliance with regulations like HIPAA or NERC-CIP.
Overview/Scope:
Essentially this individual would be responsible for helping breakdown complex challenges, build sustainable work streams, understand requirements, and build programs to help support the infrastructure and how they can better secure and drive a more compliant infrastructure.
This person would partner with the manager and operate as a liaison/central point of contact to multiple technology organizations and functions including:
4 major programs that this team is responsible for delivering on/advancing:
Must haves:
Nice to haves in order of importance:
Soft Skills:
Essentially this individual would be responsible for helping breakdown complex challenges, build sustainable work streams, understand requirements, and build programs to help support the infrastructure and how they can better secure and drive a more compliant infrastructure.
This person would partner with the manager and operate as a liaison/central point of contact to multiple technology organizations and functions including:
- DTO Infrastructure Engineering, Architecture, System & Network Operations Administration, Command Center, Service Management, and Operational Excellence
- Digital Cybersecurity Engineering, Architecture, Operations, Governance Risk & Compliance (GRC), Vulnerability Management, and Threat Management
4 major programs that this team is responsible for delivering on/advancing:
- Enhancements to the Infrastructure to become more secure on a continuous basis.
- Manage the broader Infrastructure- put controls in place as well as govern their own procedures and processes for review/audit purposes.
- Enhanced monitoring- make sure that the cyber security tool sets and technologies that they deploy to secure the infrastructure (both in corporate and our operational environments) are up to date.
- Consult in several capacities- make recommendations on how they might address a security/compliance challenge.
Must haves:
- 5+ years of broad IT Infrastructure experience specifically Server and/or Network Administration in a large enterprise level organization. Think 2nd or 3rd level support type individuals.
- Practical understanding of Cybersecurity in infrastructure setting; IT security compliance, risk management and information security principles including access control, network security, information security architecture, information security operations
- Bachelor’s degree required in Computer Science, Information Technology, Cybersecurity or similar technology related degree from an accredited college or university.
Nice to haves in order of importance:
- Basic understanding of engineering and architecture as it pertains to system administration.
- Experience deploying tools to manage and secure infrastructure.
- Comfortable working in multi-discipline teams and projects to achieve objectives either as subject matter expert or technical lead (ex. Cybersecurity, Infrastructure Operations/Engineering/Architecture)
- Hands on operations support to regulated systems, storage, or network infrastructure (ex. Sarbanes-Oxley, NERC-CIP, HIPAA, or similar)
- Infrastructure support as operations subject matter expert to projects deploying/upgrading server or network operating systems, cyber security, and/or systems management tools.
- Practical understanding of IT security compliance, risk management and information security principles including access control, network security, information security architecture, information security operations, and leading practices and associated tools
- ISC2 CISSP or ISACA CISM Certification
- ITIL v4 Foundation Certification
- Lean/Continuous Improvement expertise preferred, understanding of Agile development.
Soft Skills:
- Able to communicate with all levels of the org including technical teams and Senior level individuals such as managers/VPs.
- Fast learner/ability to come in and hit the ground running.