Information Security Analyst (App Security & AI Security)

Company Description For over 100 years, BlueScope continues to build on our reputation of quality brands and products, leading technology and a customer-first spirit. Through our global brands, we are one of the largest manufacturers of building solutions in the world. Our diverse, bright and inspired workforce is committed to bettering the communities we serve through breakthrough thinking and innovations. Your goals, ideas and perspective can help shape our future – we look forward to hearing them! The Information Systems department provides tools and automation to store, organize and manipulate data while making that data easily retrievable. Various hardware and software tools, along with support, combine to enable these functions in a cost effective method that helps to increase efficiency and accuracy. The IT Security Manager ensures the company’s data and systems are sufficiently secure by understanding information security risks while developing and enforcing policies and procedures to mitigate them. Provides the IS security function, including reviewing, planning and implementation, and management of security controls for the organization Creates and maintains the enterprise’s Business Continuity Plan and Disaster Recovery Plan Establishes a security stance through policy, architecture and training processes Oversees the operations of the enterprise’s security solutions Interfaces with peers in the development and network departments as well as with the leaders of the business units to both share the corporate security vision with those individuals and to solicit their involvement in achieving higher levels of enterprise security through information sharing and co-operation Leads the selection of appropriate security solutions, and oversees any vulnerability audits and assessments Manages security exemption processes, particularly where it involves shared risks to the company’s systems and data Key Measures Establishment of a security risk register and maintain, with a plan to address key risks Produce and maintain a security program of work for a rolling 12-month period Create, and maintain the company’s security awareness training program. Create and maintain the company’s security documents (policies, standards, baselines, guidelines and procedures) Create and maintain the company’s Business Continuity Plan and Disaster Recovery Plan Conduct and coordinate testing of procedures and systems every six months Education & Experience Minimum: Bachelor’s degree or 4 years of additional relevant experience in lieu of degree 5 years of experience in information security management or related functions Preferred: Bachelor’s degree in the field of business administration, computer science, finance, or information systems 7+ years of experience in information security management or related functions Information Security Management qualifications such as CISSP, CRISC or CISM Additional Information The preceding job responsibilities and tasks were designed to indicate the general nature and level of work performed by associates in this job. It is not designed to contain or be interpreted as a comprehensive inventory of all job duties and responsibilities required of associates assigned to this job. Associates may be required to perform other duties as assigned. Additional job competencies, individual goals, and performance measurements are set at the department level. The benefits are just as rewarding as the work at BlueScope. To support our goal, we offer a total compensation plan and an outstanding benefits package that includes health insurance, life insurance, short and long term disability, paid time off, and retirement. EEO: Employer/M/F/Disabled/Protected Veteran BlueScope is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status, as a protected veteran, among other things, or status as a qualified individual with disability.