Security Analyst III

#WeAreONEOK – Fortune 500 company. 100+ years in business. Leading midstream service provider. Safety first. Sustainable operations. Environmentally responsible. Employee focused.

JOB SUMMARY

We’re looking for a Security Analyst III to join the Enterprise Security team at ONEOK. In this role you will join a dynamic group with diverse skills who are passionate about cybersecurity. Our growing team manages, maintains, and improves all aspects of the enterprise security architecture and posture.

Job Profile Summary

Responsible for the design, implementation, operations, and maintenance of specific security functions within the overall information security strategy, management system processes, programs, communications, and activities throughout the organization.

Essential Functions and Responsibilities

• Designs and refines specific functions within the information security framework that ensures confidentiality, integrity, and availability of information assets by protecting against unauthorized use, disclosure, modification, or loss

• Provides guidance for specific information security functions including developing process/technology roadmaps, determining appropriate organizational awareness activities, and advising management on changes in the technical, legal and/or regulatory environments that may impact the security of information assets

• Works with Director of Information Security to determine the appropriate levels of information risk for the enterprise and collaborates with affected business units and key stakeholders to ensure that exposure is minimized in accordance with applicable laws and regulations

• Collaborate with appropriate personnel across certain areas of the company to ensure appropriate risk levels are identified for information assets and if applicable, physical security of facilities

• Lead implementation of information security policies, standards, procedures and guidelines for specific security functions.  Design and operate monitoring and improvement activities to ensure ongoing compliance with internal security policies as well as applicable laws and regulations

• Assist in the information security incident response process and provide guidance to management related to incident escalation and resolution.  Assist in the preventive monitoring of potential information security threats, investigation of alleged information security breaches and, if necessary, drive appropriate incident response

• Assist in the information security awareness, training, and educational activities for all personnel who have access to information assets

• Collaborate with delivery teams to design, develop, and implement secure solutions

Education

• Bachelor's Degree in information security, information technology, computer science, other related field; or an equivalent combination of formal education and job related experience 

Work Experience

• Experience in information technology, including significant security activities

• Experience developing information security and technology roadmaps

• Experience in a regulated sector.  Familiarity with gas / utilities business processes preferred

• Experience with key information security frameworks and governing bodies such as the International Organization for Standardization (ISO) and the National Institute of Standards and Technology (NIST)

• Experience researching, preparing, composing, recommendations, security documentation, flowcharts, standards, procedures, reports, and correspondence

• Experience interacting, advising, and communicating effectively

• Experience analyzing information, conducting meetings, and making presentations

Knowledge, Skills and Abilities

• Knowledge of: IT infrastructure environments, local and wide-area networks and application security needs

• Ability to: manage small to medium information security projects

• Ability to: develop consensus and facilitate decision-making 

• Ability to: communicate and/or exchange information; conduct oral presentations

Desire Certifications (not required)

• CISSP Certified Information Systems Security Professional

• Certified Information Security Manager (CISM)

• Certified Cloud Security Professional (CSSP)

• Cloud Security Certifications (AWS, Azure, or GCP)

Strength Factor Rating - Physical Demands/Requirements

• Sedentary Work - Exerting up to 10 pounds of