Sr. Analyst Information Security Risk - PVH Corp.

Profile

POSITION SUMMARY: 

The primary purpose of this position is to safeguard information system assets by identifying and resolving real-world Information Security (IS) issues.

PRIMARY RESPONSIBILITIES/ACCOUNTABILITIES OF THE JOB: 

• Execute the Vendor risk framework for risk mitigation across the Americas region.
• Collaborate with business leads to identify business impact based on security risk exposure.
• Maintain and foster relationships with business stakeholders to identify new projects and vendor initiatives for security risk assessments.
• Ability to translate business use cases to security risk and communicate the business impact of identified risk exposure for mitigation.
• Perform risk assessments of new projects, applications, and 3rd party vendors, including Business Impact Analysis, security requirements, and manage residual risk documentation
• Conduct IS assessments of 3rd parties and vendors to assess their risk to PVH.
• Influence business day-to-day decision making based on security leading practices.
• Identify security improvements by assessing current situation, evaluating trends, and anticipating requirements.
• Provide education on technical security topics to the various Business and Information Technology groups within PVH.
• Proactively identify risks by identifying security-related abnormalities and reporting violations.
• Coordinate with IT and business teams on security design reviews and application scanning for individual projects and annual testing initiatives.
• Proactively maintain technical knowledge by attending educational workshops, seminars and reviewing publications.
• Communicate information security best practices and risk exposure to PVH employees, management and leadership.
• Coordinate and collaborate with IS and PVH I.T. leadership regarding technical vulnerabilities that may have the potential to impact enterprise operations.
• Collaborate with the Information Security Senior Director in managing Information Security Policies.
• Maintain process workflows for vendor risk analysis and ensure integration with the risk framework.
• Maintain and proactively communicate on a vendor risk register.
• Core team member of the PVH Security Incident Response Team.
• Complete special projects as assigned by the Information Security Director or Senior Vice President, Internal Audit and Information Security.

QUALIFICATIONS & EXPERIENCE:

Experience:          

• 5-8 years’ experience in an information security or risk management role.
• Experience in the security aspects of multiple platforms, operating systems, software, communications, and network protocols.
• Hands-on experience with commercial and open-source network and application security testing tools.

Education:

• High School graduate
• College degree or technical certifications are considered a plus.    

Skills                          

• Strong communication skills
• Strong presentation skills
• Self-Starter
• Professional and cooperative attitude
• Team player, able to work with other members of the IT and business teams.
• Extensive knowledge of networking terminology and methodologies, including internet protocols and associated risks
• Knowledge of the Payment Card Industry Data Security Standard and the associated compliance requirements for a Level 1 merchant.

Other

• Candidate will be required to submit to background check (pre-employment, criminal, credit history and references)
• Candidate will be required to be sensitive to PVH confidential and proprietary information.

#LI-BC10

#LI-Hybrid

,industry:Retail,title:Sr. Analyst, Information Security Risk - **MEMBERS ONLY**SIGN UP NOW***..,datePosted:2022-06-01T00:00:00.000 0000,@context:****Technology,responsibilities:The primary purpose of this position is to safeguard information system assets by identifying and resolving real-world Information Security (IS) issues. Execute the Vendor risk framework for risk mitigation across the Americas region. Collaborate with business leads to identify business impact based on security risk exposure. Maintain and foster relationships with business stakeholders to identify new projects and vendor initiatives for security risk assessments. Ability to translate business use cases to security risk and communicate the business impact of identified risk exposure for mitigation. Perform risk assessments of new projects, applications, and 3rd party vendors, including Business Impact Analysis, security requirements, and manage residual risk documentation. Conduct IS assessments of 3rd parties and vendors to assess their risk to PVH. Influence business day-to-day decision making based on security leading practices. Identify security improvements by assessing current situation, evaluating trends, and anticipating requirements. Provide education on technical security topics to the various Business and Information Technology groups within PVH. Proactively identify risks by identifying security-related abnormalities and reporting violations. Coordinate with IT and business teams on security design reviews and application scanning for individual projects and annual testing initiatives. Proactively maintain technical knowledge by attending educational workshops, seminars and reviewing publications. Communicate information security best practices and risk exposure to PVH employees, management and leadership. Coordinate and collaborate with IS and PVH I.T. leadership regarding technical vulnerabilities that may have the potential to impact enterprise operations. ,skills:information system, applications, information technology, assessing, documentation, stakeholders, impact, enterprise operations, leadership, security risk, decision making, testing, publications, evaluating, technical knowledge, risk assessments, educational workshops, business impact analysis, information security, reporting, design, vendors, risk mitigation, security, Analyst - Information Security, Consulting - Risk Advisory - Security & Privacy & Risk Penetration Tester, Threat Vulnerability Management Professional - Analyst, Business Information Security Risk Officer, Information Security Engineer & Senior Associate, Information Security Auditor II, Applications & Information Security Architect, Information Security Compliance Analyst, Application Security Analyst, Information Technology Risk Analyst} Sr. Analyst, Information Security Risk - **MEMBERS ONLY**SIGN UP NOW***.. in Bridgewater, New Jersey, United States of America | Information Technology at PVH

Company info

Sign Up Now - WashingtondcCrossing.com