Senior Security Risk Analyst(Hybrid - Wilmington, MA)

Company Description

Locus Robotics is a leader in the rapidly growing eCommerce order fulfillment optimization space. Our solution helps warehouse owners attain 2-3X efficiency improvement over cart-picking operations, by empowering pickers to work collaboratively with our robots. All this is accomplished while integrating with the operator’s Warehouse Management System, utilizing, and optimizing existing facility infrastructure.

As a results-oriented Senior Security Risk Analyst, you will spearhead the development and execution of company-wide risk management program, ensure that risk management techniques and strategies are maintained, and foster relationship with internal/external partners and the executive team. Reporting to the Senior Director of Enterprise Security, Risk and Compliance, you will mature and promote risk initiatives, work with partners and vendors, and serve as a key advisor to cross-functional teams and company leadership.

Job Description

• Manage the company-wide risk management program in alignment with the security review board and senior management oversight.
• Perform periodic assessments of information systems, people, and processes to identify security vulnerabilities and develop and execute remediation action plans.
• Manage the Third Party Risk Management program: Perform assessments of vendor risk, develop mitigation plans and partner with internal stakeholders to assign monitoring responsibility.
• Enforce and interpret security policies, procedures, and regulatory requirements by performing internal and vendor security risk assessments.
• Provide security consulting on complex issues that involve combinations of platforms, computing environments, and technologies.
• Mitigate vulnerabilities and configuration deficiencies by conducting investigations of possible security exceptions.
• Partner with IT to conduct, remediate and maintain a solid and mature cybersecurity posture.
• Active participant and subject matter expert in the security incident response process.
• Implement, update, maintain, document, and improve security risk programs.
• Perform assessment and/or implementation of appropriate security methods and control techniques.
• Prepare status reports for management on security matters and develop security risk analysis scenarios and response procedures.
• Assist in identifying security controls for the company's production environments.
• Establish a program and deploy solutions as needed to ensure ongoing company brand protection.

Qualifications

• 4-year degree (Computer Science, Information Systems, or relational functional field) and/or equivalent combination of education or work experience.
• 7+ year's general information technology experience.
• 5+ years of professional Information Security experience focused on security risk, compliance assessment and remediation.
• 5+ years of professional experience with security tools: vulnerability scanning, cyber assessments.
• Strong knowledge of networking, databases, systems, applications, mobile, SaaS and other cloud technologies.
• Professional certifications required (CISSP, CRISC, GSEC, others).
• Exceptional analytical ability, communication skills and the ability to work effectively with customers, IT management and staff, vendors, and consultants.
• Strong knowledge of industry frameworks and best practices (ISO, NIST, and/or others).
• Strong knowledge of regulatory requirements and compliance (PCI, SOX, HIPAA, GDPR).

Additional Information

Locus Robotics is an Equal Opportunity Employer