IT Security Analyst

The Company

Ingles Markets began in 1963 as a single supermarket and has since grown into a regional grocery store chain with just under 200 retail locations operating in 6 southeastern states, a 1.6-million-square foot distribution center, two truck fleets, and a milk processing plant. Ingles Markets' headquarters and distribution center are located just 15 minutes outside of Asheville, NC in the town of Black Mountain.

The Team

We are a lean team that services 27,000 employees across 6 states. We work hard as a collective team to ensure everything is accomplished, even if it is not in our job description. While we do take things seriously, we like to have fun while we are doing it, so we can create the most impact and difference that we can.

The Position

The IT Security Analyst develops and installs security systems to protect the company's computer systems. The analyst monitors computer networks, installs new security software, and reports and documents security breaches. This is a hybrid working position and candidates should live within commuting distance of Black Mountain, NC.

Key Responsibilities:

• Conduct regular security assessments and risk analyses to identify vulnerabilities and potential threats to the company's systems and data.

• Implement and maintain security measures, policies, and procedures to ensure compliance.

• Monitor and analyze security logs and incidents, responding to and mitigating security breaches or incidents.

• Perform security audits and reviews of systems, applications, and networks, assessing their security posture and identifying areas for improvement.

• Collaborate with IT and development teams to ensure that security best practices are integrated into the design and development of new systems and applications.

• Provide expertise and guidance to internal teams on security-related matters, including data protection, access controls, and encryption.

• Occasionally be on-call for security incident response or emergencies.

• Conduct security awareness training for employees to promote a security-conscious culture and educate them about potential risks and threats.

• Assist in investigating and resolving security incidents, working with relevant stakeholders and law enforcement if necessary.

• Maintain and update security documentation, including policies, procedures, and incident response plans.

• Research and stay current with security trends, threats, and technologies.

• Oversee compliance-related penetration testing and conduct vulnerability assessments to identify potential weaknesses in the company's infrastructure.

• Participate in regulatory compliance audits and ensure the company remains compliant with relevant industry standards and regulations.

• Participate in security team on-call schedule for after-hours and weekend escalations.

• Perform other duties as assigned.

The Ideal Candidate:

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or related field, or equivalent combination of education and experience.

• 2+ years' experience in information security.

• CompTIA Security+, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), and Certified Information Systems Auditor (CISA) industry-standard certifications are preferred.

• In-depth understanding of SOX, PCI DSS, and HIPAA regulations and compliance requirements.

• Proficiency in security technologies, tools, and frameworks and staying current with security trends and policies.

• Strong understanding of networking protocols, architectures, and operating systems.

• Excellent verbal and written communication skills.

• Strong problem-solving and analytical ability.

• Adhere to the company's security policies and protocols.

Nearest Major Market: Asheville