Specialist, Security Engineer

At SpartanNash, we deliver the ingredients for a better life through customer-focused innovation. We do this for our supply chain customers and U.S. military commissaries, retail store guests and, most importantly, our Associates. In fact, we see a day when each will say, “I can’t live without them.”

Our SpartanNash family of Associates is 20,000 strong, ranging from bakery managers to order selectors; from IT developers to vice presidents of finance; from HR Business Partners to export specialists. Each of them plays an integral role in SpartanNash’s People First culture, Operational Excellence and Insights that Drive Solutions. Ready to contribute to the success of our food solutions company? Apply now!

Location:

850 76th Street S.W. - Byron Center, Michigan 49315

Job Description:

Position Summary:

This role is responsible to lead or participate in the development, design, implementation and maintenance of the Company's security technology, systems and information assets. Participate in the development of, and implement, security procedures and technologies to ensure system security and compliance. Act as a key point of contact and advise team on complex technical issues and resolution of such. 

Here’s what you’ll do: 

• Lead or participate in the development, design, implementation and maintenance of the Company's security technology, systems and information assets to protect against unauthorized access, modification, or destruction of the Company assets; evaluate and oversee potential security risks and work with internal IT teams, external vendors and cross-functional business partners as necessary.  

• Develop, implement and/or maintain a centralized Threat Intelligence, Data Loss Prevention and Monitoring system, an Incident Response system and playbooks to include forensics to safeguard information and data, coordinate with various IT and business areas accordingly.  

• Oversee and/or perform vulnerability scanning assessments for devices to verify compliance requirements.  

• Research and provide technical direction to support security technologies including data/security hardware platforms and software systems, IPS/IDS, vulnerability management, security metrics and incident response performance.  

• Participate in the development of, and implement, security procedures and technologies (i.e., firewalls, proxies, web security, etc.) to enhance information security through system/network monitoring, access control and security evaluations and to ensure compliance with regulations such as HIPPA, PCI, SOX, etc.  

• Conduct comprehensive vulnerability systems assessments to meet compliance objectives. Develop custom software solutions for security system operation, monitoring and support as appropriate.  

• Develop and maintain documentation of information security procedurals and configurations.  

• Assist in the specification of standards for new and existing security systems, software and hardware configuration and installation.  

• Develop and maintain security procedure documentation and troubleshooting documentation, user documentation for systems installed and/or created, and technical standards, procedures and techniques to ensure maximum system availability and performance levels, and/or specifications for security systems, software and hardware configuration and installation.  

• Responsible to assess the business impact of issues and act as a key point of contact and advise team on complex technical issues and resolution of such.  

• Identify issues, determine the appropriate resolution working cross-functionally as necessary, and partner with other IT areas to ensure resolution of security issues in a timely manner.  

• Participate in PCI and SOX external audits and internal control testing and maintain department compliance documentation.  

• Work with internal and external auditors as required related to security compliance audits.  

• Plan and implement timely upgrades, m