General Summary:
The Security Analyst is responsible for analyzing an enterprise's information security environment and recommending security measures to safeguard its valuable information assets.  This means understanding the business requirements for security and how best to meet those requirements.  The person in this position must possess a detailed knowledge of the business, as well as information security expertise, to develop and implement security plans appropriate to the level of risk the enterprise faces.  One of the critical requirements of the security analyst's position is proficiency in the use of various tools and techniques, including risk, business impact, control and vulnerability assessments, used to identify business needs and determine control requirements.
 
The Security Analyst acts as an advisor to the enterprise's business units, as well as to other risk management functions, such as the enterprise risk management, audit, business continuity management and compliance organizations.  For this reason, an up-to-date understanding of the latest security threats, trends and technologies is a crucial component of the position.
 
The Security Analyst is a member of the Information Security Team and works closely with other members of the team to develop and implement a comprehensive information security program.  This includes defining security policies, processes and standards.  The Security Analyst works with the IT Department to select and deploy technical controls to meet specific security requirements and defines processes and standards to ensure that security configurations are maintained.
 
Principal Duties & Responsibilities:

1. Works with the Family Dollar's business units and with other risk functions to identify security requirements, using methods that may include risk and business impact assessments.


2. Develops strategies and plans to achieve security requirements and address identified risks.


3. Performs control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls and recommends remedial action.


4. Reports to Family Dollar management concerning residual risk, vulnerabilities and other security exposures, including misuse of information assets and noncompliance.


5. Plays an advisory role in application development or acquisition projects, to assess security requirements and controls and ensure the security controls are implemented as planned.


6. Collaborates on critical IT projects to ensure that security issues are addressed throughout the project life cycle.


7. Assists in the development of security architecture and security policies, principles and standards.


8. Works with Family Dollar's IT department and members of the information security team to identify, select and implement technical controls.


9. Develops security processes and procedures and supporting service-level agreements (SLAs) to ensure that security controls are managed and maintained.


10. Assists with the resolution of negative audit findings reported by Family Dollar's internal or externals auditors.


11. Assists security administrators and IT staff in resolution of reported security incidents.


12. Advises security administrators on normal and exception-based processing of security authorization requests.


13. Researches, evaluates, designs, tests, recommends and plans the implementation of new or updated information security technologies.


14. Researches and assesses new threats and security alerts and recommends remedial action.


15. Acts as Subject Matter Expert (SME) for security tools/applications implemented by Family Dollar.


16. Other duties as assigned.

 


Minimum Requirements:
Education:  Bachelors Degree in Computer Science, Business or Information Systems.
Experience:  Minimum three (3) years of IT Security or IT Risk Management experience
Job Related Skills: ISO 17799 / 2700x standards and procedures; Cobit Standards and procedures (GCC); Co Risk framework design i.e. (OCTAVE^® (Operationally Critical Threat, Asset, and Vulnerability Evaluation^SM); Risk, Metrics and Gap Analysis
Technical Skills: Microsoft Office Proficiency in Outlook, Word, and Excel. Infrastructure, web and applications OSI layers.
Certifications:  CISSP, CISM, CISA or similar IT-specific certification is preferred