Sr. Information Security Analyst
Description
OMNIVISION is a leading developer of advanced digital imaging solutions. They provide a diverse culture that works together on the development of cutting-edge imaging technology, products and solutions. At OMNIVISION, they know that happy employees are critical to success, so they have created a culture focused on three tenets: Thrive, Engage, Innovate.
OMNIVISION’s Information Security organization is looking for a Sr. Information Security Analyst to join its team. The analyst will act as the primary contact for Vulnerability Management and Security Awareness Programs.
Core responsibilities include:
Vulnerability Management:
- Leads the efforts for OMNIVISION’s Vulnerability Management program including scheduling, scanning, analyzing identified vulnerabilities and translating them to business risks.
- Effectively communicates risks to stakeholders.
- Works with IT team members to address risks in a timely manner
- Influencing the development of vulnerability management standards and security policies.
- Operating vulnerability management processes, suggesting applicable change controls, and security exceptions.
- Designing and implementing vulnerability reporting and monitoring solutions.
- Maintaining and updating process guides and assisting with reporting to leadership and other stakeholders.
- Operates, Administers and Manages the tools related to Vulnerability Management Program
- Improving business-wide knowledge and understanding of emerging threats.
User Awareness:
- Using a risk-based approach, establish and drive a culture of security across OMNIVISION that drives secure behaviors throughout the workforce.
- Establish a best in-class approach to delivering security concepts and skills to end users through clear, accessible and engaging messaging
- Demonstrated capability in implementing and managing phishing training programs
- Demonstrated experience in creating, publishing, maintaining, and managing information security awareness training modules and related content.
Minimum Qualifications:
- 8 years of experience in the Information Technology or Information Security space with a minimum of 3 years in the Vulnerability Management program
- Experience in managing technical solutions like Tenable Nessus, Crowdstrike Exposure Management, Rapid 7 Nexpose, Proofpoint Security Awareness, KnowBe4
- Strong understanding of technical concepts with focus on Cloud, Networks and System Administration
- Experience working in distributed and Global workforce
- Knowledgeable about frameworks like NIST CSF, ISO 27001, GDPR.
- Ability to balance a variety of due dates, and requirements while working on various tasks
- Good written and verbal communication skills, including the capacity to speak with business partners in an effective manner regarding IT risks.
Annual base salary for this role in California, US is expected to be between $130,000 - $155,000. Actual pay will be determined on a number of factors such as relevant skills and experience, and the pay of employees in the similar role.
EOE/Minorities/Females/Vet/Disability