Information Security Specialist

Position Title:

Sr. Information Security Specialist

Department:

IT

Reports To:

Manager II IT Security

Exempt (Y/N):

Exempt – E.0.10

Location:

Chicago (Hybrid)

ABOUT USG AND OUR DIGITAL CUSTOMER EXPERIENCE JOURNEY

USG Corporation is an industry-leading manufacturer of building products and innovative solutions highlighted by Sheetrock®, Durock®, and Securock® Brands.

Headquartered in Chicago, USG serves construction markets around the world through its Gypsum, Performance Materials and Ceilings divisions. Its wall, ceiling, flooring, sheathing, and roofing products provide the solutions that enable customers to build outstanding spaces where people live, work, and play.

ROLE SUMMARY

The Senior Information Security Specialist will be a key role in the USG IT information security team, fully supporting USG’s security governance and IT risk management efforts and will be responsible for developing and supporting the associated security transformation roadmap. This position will also develop and manage USG’s IT security standards for safeguarding the environment, data, ensuring compliance with regulations, and protecting against security threats. They must ensure security controls are maintained and respond to cybersecurity risks or incidents.

USG offers a hybrid workplace. The office location is Chicago, IL. Minimal travel may be required.

DEFINITION OF THE TEAM

USG’s IT Security team is responsible for safeguarding the company's digital assets and ensuring the confidentiality, integrity, and availability of information. The team's primary responsibility is to develop and implement comprehensive security policies, procedures, and controls that align with the overall enterprise security strategy and standards to protect our assets and operations. This includes the implementation and ongoing support of sufficient technologies to carry out this purpose.

This team fosters a secure environment that supports the organization's operations, enhances trust with stakeholders, and drives business continuity through effective risk management and incident response. The IT Security team collaborates closely with various departments to understand their business needs and design security solutions that meet those requirements effectively while protecting USG. The team's work is critical to the success of the organization, as it enables secure business operations and supports the overall business strategy.

KEY ACCOUNTABILITIES AND RESPONSIBILITIES

• Support security strategy: Develop and manage an enterprise-wide security strategy, and communicate performance to key stakeholders

• Ensuring compliance and security: Ensure data systems comply with relevant regulations and security standards. Develop measures to protect data privacy and ensure the security of data pipelines and analytics infrastructure
• Risk assessment: Lead cybersecurity risk assessments and mitigation efforts, and oversee incident management and response planning
• Collaboration and communication: Collaborate with cross-functional teams, especially within customer experience teams of USG, including IT, data science, and business units of customer experience teams, to mitigate risk. Guide security engineering teams in making informed security decisions on infrastructure, systems, and applications design.

KEY QUALIFICATIONS

Education

Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or a related field

Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM)

Required Skills

• 7-10+ years’ experience in information security and risk management
• Experience with IT security frameworks and regulations such as ISO, NIST, and GDPR
• Proficiency in security tools and products, including firewalls, IDS/IPS, SIEM, and vulnerability scanning
• Ability to translate technical security risks into clear, concise, nontechnical terms
• Excellent problem-solving skills to address security challenges
• Strong collaboration skills with the ability to work effectively with cross-functional teams, including IT, data science, and business units of customer experience teams
• Strong ethical standards and integrity

Preferred Skills

• Experience with security standards for cloud applications including in the implementation of digital solutions
• Experience with