IT Info Security Specialist

Division or Field Office:

Office of the CIO

Department of Position: Enterprise Info Security Dept 

Work from:

Corproate Office, Erie PA Salary Range:

$77,638.00 - $124,019.00 *

salary range is for this level and may vary based on actual level of role hired for

*This range represents a national range and the actual salary will depend on several factors including the scope and complexity of the role and the skills, education, training, credentials, location, and experience of an applicant, as well as level of role for which the successful candidate is hired. Position may be eligible for an annual bonus payment.

 

At Erie Insurance, you’re not just part of a Fortune 500 company; you’re also a valued member of a diverse and inclusive team that includes more than 6,000 employees and over 13,000 independent agencies.  Our Employees work in the Home Office complex located in Erie, PA, and in our Field Offices that span 12 states and the District of Columbia. 

Benefits That Go Beyond The Basics

We strive to be Above all in Service® to our customers—and to our employees. That’s why Erie Insurance offers you an exceptional benefits package, including:

• Premier health, prescription, dental, and vision benefits for you and your dependents. Coverage begins your first day of work.
• Low contributions to medical and prescription premiums. We currently pay up to 97% of employees’ monthly premium costs.
• Pension. We are one of only 13 Fortune 500 companies to offer a traditional pension plan. Full-time employees are vested after five years of service.
• 401(k) with up to 4% contribution match. The 401(k) is offered in addition to the pension.
• Paid time off. Paid vacation, personal days, sick days, bereavement days and parental leave.
• Career development. Including a tuition reimbursement program for higher education and industry designations.
   

Additional benefits that include company-paid basic life insurance; short-and long-term disability insurance; orthodontic coverage for children and adults; adoption assistance; fertility and infertility coverage; well-being programs; paid volunteer hours for service to your community; and dollar-for-dollar matching of your charitable gifts each year.

 

Position Summary

Working independently or as part of a team, contributes to the planning, implementation, and management of the Information Security program to safeguard ERIE’s digital assets. Implements and maintains security systems and procedures to govern, identify, protect, detect, respond to, and recover from cybersecurity risks, threats, vulnerabilities, and incidents. Completes and may lead assignments of moderate complexity within the Information Security portfolio with minimal guidance. Performs duties in one or more of the following Information Security disciplines, including but not limited to: Application Security (AppSec); Cloud Security (CloudSec); Governance, Risk Management & Compliance (GRC); Identity & Access Management (IAM); Security Operations (SecOps), or Vulnerability Management.

 

 

What Will You Do:

This opportunity is for a Senior or Professional IT Analyst on the Information Security Vulnerability Management Team.  The Vulnerability Management analyst will be responsible for identifying, continuously monitor and verifying remediation of vulnerabilities in internal and external applications, endpoints, databases, networking, and mobile and cloud services.  They will lead efforts to govern Vulnerability Management by informing, advising, and collaborating with technology leadership, application and asset owners, and business units in areas such as patch management, security protocol currency, and vuln management regulatory compliance.
 

Preferred Experience & Skills based on level:

• Knowledge of security vulnerability and patch management processes.

• Experience conducting vulnerability scans, coordinating vulnerability remediation or similar activities.

• Knowledge of network security architecture and infrastructure concepts.

• Knowledge of network traffic flows and protocols.

• Understanding of Windows and other operating systems, endpoint applications, networking protocols, and devices.

• Experience in analytic problem-solving and performing impact/risk assessments.

• Effective communication and presentation skills. Strong influencing and negotiation skills.