SUMMARY: Analyzes information security systems and applications and recommends and develops security measures to protect information against unauthorized modification or loss. Requires a bachelor's degree with at least 5 years of experience in the field. Familiar with a variety of the field's concepts, practices, and procedures. Relies on extensive experience and judgment to plan and accomplish goals. Performs a variety of tasks. A wide degree of creativity and latitude is expected. ESSENTIAL FUNCTIONS • Develops and maintains Information System security policies. • Establishes disaster recovery and business continuity plans. • Audits system access logs. • Performs regular security reviews, risk assessments, and audits both internally and for third party vendors. • Collaborates with software development teams to design secure software systems. • Creates and communicates Information Security training. • Interacts with employees to resolve Information Security items. • Assists with the inventory management of software and hardware. • Promotes responsible usage and care of corporate equipment. QUALIFICATIONS REQUIRED • Effective communicator. • Ability to analyze, organize, prioritize, implement, and control business activities and transactions. • CISSP, CISM and CISA certifications are highly desirable for this role. • A thorough understanding of PCI-DSS, HIPAA and Data Protection legislation. • In depth knowledge and understanding of the ISO 27001 and ITIL frameworks is also beneficial. MINIMUM REQUIRED EDUCATION/TRAINING • Bachelor’s degree and at least 5 years of experience in the field or in a related area.