Minneapolis, MN, USA
2 days ago
Information Security Analyst

CWTis one of the world's leading digital travel management companies and as a Business-to-Business-for-Employees (B2B4E) travel management platform, companies and governments rely on us to keep their people connected – anywhere, anytime, anyhow – and across six continents, we provide their employees with innovative technology and an efficient, safe and secure travel experience.

OurProduct and Technologydivision was formed to lead on our CWT 3.0 digital transformation strategy. With a team of highly skilled and experienced individuals, they deliver and manage efficient, quality, and innovative travel technology solutions and technology services for CWT and its customers worldwide.

Position Overview

The Information Security Analyst will report to the Director of Information Security supporting our Military and Government markets. The position will manage and support the Defense and Government environments and support the CWT Global Information Security group. We are looking for a candidate who has strong technical skills, can work independently, takes direction well, and has a comprehensive understanding of the US Federal Government environment, and has worked or supported in an Information Security Audit and or Compliance role.

Position Description

Reporting to the Information Security Director, will manage security initiatives in the organization

· Provide support to the organizational (CWT ) information security governance program that includes leadership, organizational structures, and processes

· Support governance, risk and compliance development to align industry security frameworks (FISMA, and PCI)

· Advising System Owners of risks to the Information systems and obtaining assistance from CWTSatoTravel management, if necessary, in assessing risk

· Assisting Information systems in completing and maintaining the appropriate security documentation including the system security plan

· Support system Authorization and Assessment (AA) and creating and maintaining AA documentation

· Support Application, Database, Network, and Yearly Pen Test for various support environments

· Develops and updates the system security plan, as well as managing and controlling changes to the system and assessing the security impact of those changes

· Promoting CWT information security awareness

· Identifying, reporting and responding to security incidents

· Reviewing Security Advisory Alerts on vulnerabilities

· Evaluating known vulnerabilities to ascertain if additional safeguards are needed; ensuring systems are patched, and security hardened

· Complying with training requirements for individuals with significant security responsibilities

· Manage POAMs for assigned systems in accordance with FISMA and General Services Administration CIO IT Security-09-44, “Plan of Action and Milestones (POAM).

· Reviewing system role assignments to validate compliance with principles of least privilege

Delivers on key metrics set for the information security program are consistently achievedServe as a liaison between business and technology organizations to ensure that information security related business requirements for protecting sensitive data are clearly defined, communicated, and well understood, and considered as part of operational prioritization and planningThe role offers exciting opportunities, including the potential to develop your talent and skills with many different Information security technologies and certifications

#LI-Hybrid

Qualifications

Required Qualifications

U.S. Citizen/US Soil or have resided in the U.S. 3 out of the past 5 yearsBachelor's or Master’s degrees or equivalent related work experienceKnowledge of various emerging technologies and adoption of security compliance initiatives to secure dataExcellent Communication SkillsAbility to thrive in a fast-paced environment5-8 years of industry specific experience Knowledge in Information Security Management, Assessment and Authorization (AA) Highly adaptable to new technologies and their application to business requirementsSelf-motivated; able to set short and long term goals to meet operational needsStrong personal skills for managing staff, working with clients, and professionalsKnowledgeable of supporting NIST programs, Risk and Security AssessmentsIdentify, Mitigation, and Remediation Analysis of Security vulnerabilities

Preferred Qualifications

Knowledge of NIST 800-53 and 800-171 FrameworkKnowledge of industry security management practicesKnowledge of security-related government regulatory requirements, emerging trends, and issues

Personal Attributes

Proven ability and initiative to learn and research new concepts, ideas, and technologies quicklyAdvanced analytical, conceptual, and problem-solving abilitiesAbility to work in a team-oriented, collaborative global work environmentHighest personal and professional integrity and strong work ethicsAbility to articulate vision of transformation efforts and a sense of missionDemonstrated ability to manage adversity and challenging situations

Relationship Management

Ability to manage senior relationships across all CWT organizationsAbility to develop cooperative and constructive working relationshipsAbility to handle complaints, settle disputes, and resolve conflicts, and negotiate with othersCollaborative team player orientation towards work relationships, strong culture awareness

CWT is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, disability, age, or veteran status.  

CWT also offers opportunities to all job seekers, including job seekers with disabilities.  If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to TalentAcquisitonAmericas@mycwt.com.  In your email, please include a description of the specific accommodation you are requesting and a description of the position for which you are applying.

Qualifications

Required Qualifications

U.S. Citizen/US Soil or have resided in the U.S. 3 out of the past 5 yearsBachelor's or Master’s degrees or equivalent related work experienceKnowledge of various emerging technologies and adoption of security compliance initiatives to secure dataExcellent Communication SkillsAbility to thrive in a fast-paced environment5-8 years of industry specific experience Knowledge in Information Security Management, Assessment and Authorization (AA) Highly adaptable to new technologies and their application to business requirementsSelf-motivated; able to set short and long term goals to meet operational needsStrong personal skills for managing staff, working with clients, and professionalsKnowledgeable of supporting NIST programs, Risk and Security AssessmentsIdentify, Mitigation, and Remediation Analysis of Security vulnerabilities

Preferred Qualifications

Knowledge of NIST 800-53 and 800-171 FrameworkKnowledge of industry security management practicesKnowledge of security-related government regulatory requirements, emerging trends, and issues

Personal Attributes

Proven ability and initiative to learn and research new concepts, ideas, and technologies quicklyAdvanced analytical, conceptual, and problem-solving abilitiesAbility to work in a team-oriented, collaborative global work environmentHighest personal and professional integrity and strong work ethicsAbility to articulate vision of transformation efforts and a sense of missionDemonstrated ability to manage adversity and challenging situations

Relationship Management

Ability to manage senior relationships across all CWT organizationsAbility to develop cooperative and constructive working relationshipsAbility to handle complaints, settle disputes, and resolve conflicts, and negotiate with othersCollaborative team player orientation towards work relationships, strong culture awareness

CWT is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, disability, age, or veteran status.  

CWT also offers opportunities to all job seekers, including job seekers with disabilities.  If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to TalentAcquisitonAmericas@mycwt.com.  In your email, please include a description of the specific accommodation you are requesting and a description of the position for which you are applying.

Confirm your E-mail: Send Email