Security Analyst Senior

JOB SUMMARY\:

The Security Analyst role is responsible for planning, facilitating, and coordinating the implementation of Textron corporate IT security policies and general control practices within the Textron Aviation computing environment. This role is also responsible for supporting the identification of and response to cybersecurity events and incidents as well as planning, and facilitation of IT audit and assessment activities. An individual in this role will be expected to collaborate with other IT and business teams, assess risks and mitigation/remediation strategies, and provide applicable security assessments to assist in the planning, design, development, and deployment of new applications as well as enhancements to existing applications, hardware, and external software. This role also has responsibility in cybersecurity compliance and risk mitigation activities like vulnerability management, security controls assurance, and other technical IT security control requirements relative to network, application, and all computing systems security.

JOB RESPONSIBILITIES\:

· Participate in and support capacity planning and the development of long-term strategic goals, and technical roadmap development for IT security.

· Coordinate with all functions of IT and business application owners to ensure required compliance to all IT General Controls and IT Security Policy Requirements.

· Ensure the confidentiality, integrity, and availability of enterprise data on host computers, databases, applications, and during data transfer in accordance with privacy, security, and regulatory compliance requirements based on business needs and industry best practices.

· Develop and maintain cybersecurity incident response plans, identify, and respond to cybersecurity events and incidents.

· Collaborate and provide applicable IT security assessment with both the business and IT technical staff in the planning, design, development, and deployment of new applications, and enhancements to existing applications, hardware, and external software.

· Identify risk factors, evaluate risks, develop, and present findings/recommendations, and monitor/review/renew risk assessments as required.

· Ensure organizational awareness and training pertaining to applicable corporate and company policies, including Access Control, Change Management, and Disaster Recovery, and other IT Security policies, and regulatory requirements.

· Complete internal audit and assessment functions on periodic schedules to ensure our IT organization entity level controls, application controls, and datacenter controls, and all aspects of our IT organization and related infrastructure comply.

· Support cybersecurity operational functions such as vulnerability management, asset security control assurance, firewall and network security management, life cycle and technical debt management.

· Support Identity access management functions.