Senior Risk Analyst

Constellation Brands Victor , NY 14564

Posted 2 months ago

Job Description:

Position Summary:

The Senior Information Security Risk Analyst's responsibilities include identifying, evaluating and reporting on information security risks in a manner that meets Constellation Brands' regulatory and other compliance requirements to ensure CBI information assets are guarded against unauthorized access, modification or destruction. The Security Risk Analyst will work proactively with various constituents within and across business units, information technology, information security and other internal departments and organizations to implement and support controls, processes and best practices that meet Constellation Brands' defined policies and standards for information security and risk management.

We are hiring two Senior Information Security Analysts.

Responsibilities:

  • Assist in defining, building and implementing a process to assess risks and the state of controls for company-wide information system/technology operations (data centers, application systems, development efforts, computing environments/technologies, and telecommunications).

  • Lead and support initiatives to implement and maintain an information security risk management program based on industry recognized risk management framework including a risk register for tracking of risks.

  • Assists in establishing metrics and regular reporting mechanisms (data analytics) for assessing and measuring security and risk across the organization.

  • Thinks strategically and communicates the risks and impact of IT and finance controls to technical and non-technical managers at various levels of the Company.

  • May conduct security architectural reviews on projects, applications and initiatives that ensure that corporate security policy, standards and guidelines are adhered to.

  • Coordinate alignment of risk register with IT Controls and Compliance, Security Operations, and other Information Technology and Business functions related to risk reporting.

  • Work with project teams, IT, business unit constituents and other stakeholders to conduct information asset and application risk assessments including for third-party vendors, ensuring the appropriate balance of risk reduction, cost, resources and customer experience.

  • Perform information security risk-related activities including budgeting, planning, testing, reporting and recommending appropriate remediation measures.

  • Maintain an up-to-date understanding of security industry best practices and monitor the legal and regulatory environment for developments that could require changes to established policies and practices.

  • Coordinate and oversee technical risk assessments and penetration testing, security assessments, and other related activities performed by internal audit and third parties.

  • Researches and compiles data relating to specific risk projects, platforms and data and completes risk assessments and analyze the effectiveness of information security control activities and report on them, providing actionable recommendations.

  • Follow up on risks and deficiencies identified in monitoring reviews, self-assessments, automated assessments, and internal and external audits to ensure that appropriate tracking, and remediation measures are being monitored and obtained by appropriate parties.

  • Define and lead with other team members Security Awareness based training initiatives, including New Hire Training, Annual Employee training, and targeted security training for specific initiatives.

Recommended Qualifications:

  • Bachelor's degree in Information Systems, Business or related program preferred, or equivalent work experience in an information security or similar information technology environment.

  • A minimum of 6 - 10 years of experience in the field of information technology, with a minimum of 4 years in information security, with a focus in Risk Management highly preferred.

  • Strong working knowledge of information systems security standards and practices.

  • Experience with one or more of the following: risk assessments, application security assessments, information security/risk management/compliance frameworks such as NIST, ISO, PCI, SOX, etc., security monitoring, development of policies and procedures, security awareness, or other related information security subject areas.

  • Possession of security certification(s) highly preferred: CISSP, SSCP, CISM, CISA, Security+, GSEC, MCSE.

  • Willingness and ability to take a stand or advocate a position that may be unpopular with others.

  • Facilitates meetings with management and conducts various presentations.

  • Prepares and submits high-quality assessments, reports and analysis to Company management.

Core Competencies to be Successful

  • Knowledge/Expertise

  • Teamwork and Collaboration

  • Integrity and Trust

  • Communication/Influence

  • Project Management/Planning

  • Challenging the Process

  • Attention to Detail

  • Initiative and Drive

ADA Physical/Mental/Workplace

Requirements:
  • Occasional lifting up to 25 lbs.

  • Sitting, working at desk/personal computer for extended periods of time.

  • Primary work environment is professional corporate office.

  • Ability to travel commercially both domestically and internationally.

Location

Victor, New York

Additional Locations

Job Type

Full time

Job Area

Information Technology

Equal Opportunity

Constellation Brands is committed to a continuing program of equal employment opportunity. All persons have equal employment opportunities with Constellation Brands, regardless of their sex, race, color, age, religion, creed, sexual orientation, national origin or citizenship, ancestry, physical or mental disability, medical condition (cancer or genetic characteristics), marital status, gender (including gender identity or gender expression), familial status, military or veteran status, genetic information, pregnancy, childbirth, breastfeeding, or related conditions (or any other group or category within the framework of the applicable discrimination laws and regulations).


icon no score

See how you match
to the job

Find your dream job anywhere
with the LiveCareer app.
Mobile App Icon
Download the
LiveCareer app and find
your dream job anywhere
App Store Icon Google Play Icon
lc_ad

Boost your job search productivity with our
free Chrome Extension!

lc_apply_tool GET EXTENSION

Similar Jobs

Want to see jobs matched to your resume? Upload One Now! Remove
Senior BI Analyst

Constellation Brands

Posted 7 days ago

VIEW JOBS 9/13/2019 12:00:00 AM 2019-12-12T00:00 Job Description Position Summary: The Senior Business Intelligence Analyst is responsible for providing high quality data driving solutions that address key business questions. The Senior BI Analyst works directly with other team members and organizational stakeholders to develop complete and insightful data driven BI solutions. The analyst is expected to be competent in standard BI tools, such as MicroStrategy, but also be able to develop solutions in niche BI tools like, Power BI, Tableau. Furthermore, the Senior Business Intelligence Analyst is required to have knowledge and practical experience with traditional relational database technologies. The analyst is responsible for developing rapid POCs and prototypes for numerous use cases and deploy applicable prototypes to the broader organization. The Senior Business Intelligence Analyst is a member of a cross-functional team comprised of analytical and technical team members. Responsibilities: * Develop business intelligence and analytical solutions in order to solve complex business problems leading to data driven decision making. Solutions need to not only answer what happened, but also answer why it happened and discern what to do next. * Work closely with key stakeholder to develop highly visual analytical workflows leverage MicroStrategy. * Transform data consumption from Excel based pivot tables to highly immersive data visualization applications. * Develop standard reports, dashboard and scorecards leverage traditional BI tool like MicroStrategy. * Introduce and integrate data mining and predictive analytical techniques as a part of the core business intelligence offerings. * Participate in planning sessions with key stakeholders to develop use cases and requirements for data driven analytical solutions. * Take ownership of a problem and stay with it through to resolution -- often involves coordinating the actions of people in other teams to achieve the desired result. * Create rapid prototypes with team members leveraging traditional BI and database technologies and alternative solutions. * Identify and apply statistical and advanced analytical methods with customer teams enabling action oriented results. * Ensure assigned deliverables are within business / audit control requirements. * Implement necessary processes and tools to ensure process maturity and best practices are followed. * Lead design discussions and decisions as it relates to business intelligence and database solutions and drive decisions through to completion. * Provide end user training and UAT support when required. Required Qualifications: * 5+ years of experience developing business intelligence reporting solutions. * 2+ years of experience applying data analytical techniques within an organization. * 4+ years of experience with MicroStrategy * MSTR Architect, iCubes, Object Manager, Documents, and Mobile * MicroStrategy Administration is a plus * Strong customer focus * Strong relational database knowledge and SQL skills is required; such as Oracle Exadata, AWS Redshift, etc. * Experience with statistical tools, such as R or SAS is a plus * Proficiency in core Microsoft Office applications * Strong knowledge of information visualization best practices and strategies * Excellent record in process ownership and development * Effective and clear communication skills with customers * Ability to work on multiple projects concurrently with shifting priorities * Working knowledge of agile project management principles * Must be a team player with positive attitude and able to work with a variety of people at all levels * Bachelor's degree in Information Technology, Computer Science, Mathematics or comparable * Wine / Spirits / Beer / Beverage industry, three-tier system, business/systems analysis and change management experience is a plus Location Victor, New York Additional Locations Job Type Full time Job Area Information Technology Equal Opportunity Constellation Brands is committed to a continuing program of equal employment opportunity. All persons have equal employment opportunities with Constellation Brands, regardless of their sex, race, color, age, religion, creed, sexual orientation, national origin or citizenship, ancestry, physical or mental disability, medical condition (cancer or genetic characteristics), marital status, gender (including gender identity or gender expression), familial status, military or veteran status, genetic information, pregnancy, childbirth, breastfeeding, or related conditions (or any other group or category within the framework of the applicable discrimination laws and regulations). Constellation Brands Victor NY

Senior Risk Analyst

Constellation Brands