Sr. Lead Cyber Risk Analyst

Overview

Join our close family of cybersecurity advisors as we help our colleagues across the company become more aware of cybersecurity best practices and coordinate remediation of emergent system vulnerabilities. As part of Cybersecurity Consulting within the Digital Transformation and Technology (DTT) department’s cybersecurity team, you will be charged to provide expert cybersecurity leadership and consultation to technical and non-technical colleagues with wide latitude and broad topical scope.

 In this role, you will navigate complex issues related to multiple interrelated platforms and collegial relationships at all levels of management for various systems and initiatives. You will be responsible for advising your colleagues on best practices to establish security in multiple business areas and remediate security gaps in existing projects that span all current and imagined technologies, especially in mobile and cloud environments.

 

Your team's work encompasses the traditional functional cybersecurity practices of security awareness, information systems security management, and vulnerability management. You will exercise significant influence on security day to day and strategically across all business areas of the company. In addition to business-focused security consulting, this role leads the area of cybersecurity metrics and compliance reporting.

 

Our Flexible Future model offers a healthy mix of working in person and virtually, strengthening key elements of the Chick-fil-A culture by fostering collaboration and community.

Responsibilities

Cybersecurity Strategy and Influence

• Collaborate with expert level insight to maintain and improve corporate security awareness training.
• Take ownership and a lead role among colleagues in creating and improving security policies, standards, and advisories based on consulting trends.
• Establish relationships among DTT and enterprise business units to analyze, consult, and collaborate on the security issues of various technical projects, working independently on complex projects and ensuring effective coordination and communication with project leadership and the rest of the cybersecurity team.
• Communicate and collaborate regularly with colleagues in security consulting and across the department via a variety of online and in-person means, showing initiative and discernment for sharing appropriate insights, job aids, and updates on progress for mutual benefit and team awareness wherever appropriate.
• Ensure regular communication and consultation as needed with the team leader regarding any issues, strategic trends, concerns, or delays in significant projects or for significant security gaps without a path to remediation.
• Serve in the role of Incident Coordinator as assigned to support investigation of cybersecurity events in accordance with the Chick-fil-A Incident Management plan.

Technical Direction

• Know and independently apply broad expert level knowledge of cybersecurity best practices to advise in securing highly complex systems and projects.
• Take initiative with senior cybersecurity team members to coordinate, advise, and devising iterative improvement in security posture for technology teams dealing with emergent security vulnerabilities.
• Act as operational manager for thought leadership and strategic direction of the team’s gathering and analysis of security metrics for Governance, Risk, and Compliance (GRC).
• Respond independently in a timely manner to ad hoc requests for security consulting.
• Model an attitude of lifelong learning to expand your security knowledge and maintain currency in knowledge of security best practices and threat trends both personally and in mentorship to more junior personnel.

Minimum Qualifications

Experience

• Experience providing cybersecurity consultation for complex projects in development and in production.
• Experience providing cybersecurity best practice guidelines to individuals and teams in a complex networked environment.
• Familiarity with administering security awareness programs

Knowledge

• Comprehensive understanding of cybersecurity best practices
• Comprehensive understanding of risk management practices
• Understanding of Cloud platforms and native security services
• Understanding of network security principles

Skills

• Self-starter who completes responsibilities with minimal supervision. 
• Clear communication in oral or written form
• Problem-solving
• Risk analysis
• Influencing change 
• Strong decision-making skills.

Abilities

• Builds strong relationships with others and values opinions and strengths of teammates.
• Able to discern functiona