FBS Information Security Specialist (Remote)

FBS - Farmer Business Services is part of Farmers operations with the purpose of building a global approach to identifying, recruiting, hiring, and retaining top talent. By combining international reach with US expertise, we build diverse and high-performing teams that are equipped to thrive in today's competitive marketplace.

We believe that the foundation of every successful business lies in having the right people with the right skills. That is where we come in—helping Farmers build a winning team that delivers consistent and sustainable results.

Since we don't have a local legal entity, we've partnered with Capgemini, which acts as the Employer of Record. Capgemini is responsible for managing local payroll and benefits.

What to expect on your journey with us:

• A solid and innovative company with a strong market presence
• A dynamic, diverse, and multicultural work environment
• Leaders with deep market knowledge and strategic vision
• Continuous learning and development

Requirements Summary: Utilize a wide range of risk-based methodologies to independently perform intermediate to advanced technical analysis of a broad range of interdependent medium to high cybersecurity risks. Analyze and establish security requirements for all company systems/networks; advise how to protect a highly complex information system to ensure the confidentiality, integrity, and availability of systems and data. Independently perform security testing and security risk assessments of high complexity according to best practices to address business challenges while also improving business processes. Independently manage and serve as a SME for all company security and technology platforms; analyze severe security breaches and incidents; participate in architectural discussion for any company technology platform; and document corporate security policies

Responsibilities:

• Identify, assess, document, and articulate all types of data security and data privacy risks in addition to appropriate countermeasures and controls to address data security and data privacy concerns
• Identify opportunities to proactively mitigate moderate to major risks, and manage threat or target analysis of cyber defense information and production of threat information within the enterprise
• Conduct third party data security risk assessments, project security assessments, business risk assessments and security testing for most company systems and potential new systems
• Perform technical and nontechnical risk, and vulnerability assessments of relevant technology focus areas including local and global computing environment, network, infrastructure and applications, etc
• Perform risk analysis when any application or system undergo a major change
• Capture security controls to integrate security within the process, to identify key security objectives, and to maximize software security while minimizing disruption to plans and schedules
• Design processes to ensure legal and regulatory security compliance requirements are met
• Lead process improvement in detecting and responding to cybersecurity incidents and events
• Review, approve and ensure implementation of sophisticated security configurations. Interpret irregular and indeterminate patterns of noncompliance to determine their impact on levels of risk and overall effectiveness of the enterprise's cybersecurity program
• Oversee detective, protective or corrective measures when cybersecurity incidents are discovered
• Participate in audits of cyber programs and projects
• Track audit findings and recommendations to ensure appropriate mitigation actions are taken
• Demonstrate ownership of assigned audit actions or regulator requests by diligently providing responses and evidence within established timeframes
• Build and manage relationships with a wide network of local business and IT front-line and senior stakeholders
• Lead cross-functional projects that incorporate local and global teams
• Demonstrate the value of information technology (IT) security throughout all levels of the organization
• Influence business and IT teams to create innovative and sophisticated solutions to complex problems
• Create, review, and update security policies, procedures, standards and guidelines
• Act as a SME for most company technology platforms and main contact point for IT groups seeking intermediate to advanced security input
• Participate in architectural discussions for all company technology platforms

Benefits This position comes with a competitive compensation and benefits package.

• A competitive salary and performance-based bonuses
• Comprehensive benefits package
• Flexible work arrangements (remote and/or office-based)
• You will also enjoy a dynamic and inclusive work culture within a globally renowned group
• Private Health Insurance
• Paid Time Off
• Training & Development opportunities in partnership with renowned companies