Cybersecurity Specialist

Rise Baking Company was founded by bakery experts passionate about providing our customers with high quality products and providing a positive, collaborative place to work for our people. 

We are a company built on elevating expectations. It’s what sets us apart from others in the baking industry. And our people are our finest ingredient. 

We believe the quality of our people is just as important as the quality of our products. Our environment encourages creativity, and we value an entrepreneurial and industrious approach to work —a place where honesty, respect, and trust are the essential ingredients for how we do business. We take pride in working with creative individuals with a passion for what they do, and we’re always looking to expand our team. 

We offer a wide variety of professional and management opportunities, including sales, product development, account management, general management, finance, engineering, administration, and information systems management. We also employ a diverse workforce of hourly food production, packaging, quality assurance, warehouse, sanitation personnel, leads, and supervisors. 

Like our products, our benefits package offers quality that makes a difference. 

Coverage options may include: 

• Medical, dental, life, disability, vision, and supplemental insurance 
• Company paid holidays 
• Paid Time Off (PTO) plans 
• Performance bonus potential 
• 401k plan with company match

Expectations Deliciously Exceeded.

Job Purpose

Design and enforce policies and procedures that protect the organization's computing infrastructure from all forms of security breaches. Develop and maintain a comprehensive plan to ensure the company’s IT environment is secure and follows industry best practices. Identify areas of risk, implement changes to strengthen the environment, and perform mock attacks.

Essential Functions

• Develop and implement a comprehensive plan to secure the company’s computing network
• Maintain all information security standards, procedures, and guidelines, including compliance monitoring, procedures, and documentation
• Build and manage the programs supporting existing compliance control activities and initiatives
• Integrate ongoing changes to laws, regulations, and NIST frameworks as required into daily activities
• Ensure the ongoing integration of information security with business strategies and privacy requirements
• Perform and manage the security audit program to assess effectiveness of policies and procedures and systems security safeguards
• Analyze application security needs based on the sensitivity or confidential nature of the data and implement security structure to support the data security needs of systems being developed or enhanced
• Conduct technical risk assessments and application security reviews; coordinate network penetration testing activities
• Develop emergency procedures for handling security breaches, manage internal communication regarding security, and provide estimates of budgetary requirements for security-related items and upgrades
• Document any security breaches, assess their damage, and coordinate remediation of suspected information security incidents
• Communicate unresolved security exposures, misuse, and noncompliance situations to senior management
• Monitor the security information and event management (SIEM) system/MSSP incident reports, Microsoft O365, and Active Directory activity/access/security logs
• Provide annual and on-demand training to workforce members to ensure understanding of security requirements and exposures
• Keep up to date with developments in IT security standards, threats, and changes in legislation and accreditation standards that affect information security
• Comply with all food safety requirements, training, policies, and procedures
• Perform other job-related duties as assigned

Qualifications (Education, Experience, Competencies)

• Degree in computer science or technology-related field
• Professional information security certification preferred
• Solid knowledge of various information security frameworks
• Experience with TCP/IP firewalls, VPNs, and other security devices
• Experience with disaster recovery planning, testing, auditing, risk analysis, business resumption planning, and contingency planning
• Excellent problem-solving and analytical skills
• Ability to oversee and conduct internal risk and security assessments, as well as enterprise security management tool evaluations
• Effective verbal and written communication skills
• Experience in project management and change management