Senior Technical Security Analyst

• Dulles, VA
• Full-time

Company Description

AOL Advertising is revolutionizing the way online advertising works. We operate on the cutting edge of media, giving clients a diversity of means to reach global audiences that consume AOL content on a daily basis. AOL is uniquely positioned in the marketplace to work with brands to move their stories forward given our focus on original content, sophisticated distribution models and social marketing approaches. Simply put, we tell the story, take it places and get people talking.

Job Description

The Senior Technical Security Analyst position is within AOL’s IT Security group. Our mission is to deliver information security solutions and services that protect AOL’s information assets, computing infrastructure, applications and data. The Sr. Technical Security Analyst will support the Governance, Risk Management and Compliance program within AOL. Primary responsibilities are to perform technical and non-technical risk assessments on AOL systems and calculate the level of existing and residual risk and communicate these to business areas. Additionally the candidate will perform technical and non-technical compliance activities.

Ideally, the candidate will be a self-starter and have an analytical mind that constantly looks for solutions to difficult problems. The candidate must be proficient in experienced in conducting risk assessments in a complex environment. The candidate must have the ability to convey complicated technology and security concepts to management and non-technical business areas. The candidate should have technical knowledge and/or experience in security, networking, systems administration, database administration, architecture and/or other technical domains.

Responsibilities:

Work within the GRC team to perform risk assessments of AOL systems to determine risk level and mitigation strategies

Perform technical and non-technical compliance activities

Develop a technology risk matrix to highlight areas of high risk for AOL applications and systems

Communicate potential control deficiencies and associated risks identified by the risk assessment and compliance process

Develop action plans and/or recommend alternative solutions to resolve risks and exceptions to AOL Policies and Standards

Provide oversight to ensure tracking of remediation plans for timely closure of risk issues

Provide security consulting and advisory services to business units and project teams

Research and maintain a knowledge base regarding information security risks, issues, solutions and potential implications for AOL

Provide Security requirements for development teams as needed prior to application deployment

Review vendor contracts for compliance with AOL Security Policies and Standards

Qualifications

3 - 5 years of hands-on technology risk, security and/or governance experience

Must have in-depth knowledge of common information security topics, policies and standards

Excellent verbal and written communication skills with the ability to understand business requirements

Must be able to develop risk management strategies that align with business goals and objectives and protect the confidentiality, integrity and availability of information systems and data

Project management experience on information security processes and within software development life cycles is desired

Familiarity with measures and metrics used in risk assessment methods and/or vulnerability assessment processes.

Desired

Certification in one of the following areas: CISSP, CISA, CISM, CRISC.

Thorough technical knowledge of the following areas: IT Audits, IT Governance, Risk and Compliance, Information Security and/or Technical Privacy.

Solid organizational skills and strong customer service skills.

Amazon Web Services (AWS) security or compliance knowledge

Additional Information

EEO/AA Women, Minorities, Veterans, Individuals with Disabilities Employer: AOL offers a competitive salary and benefits package, including 401(k) match and performance bonus. All qualified applicants will receive consideration for employment without regard to, and will not be discriminated against based on, race, gender, color, religion, national origin, sexual orientation, gender identity, veteran status, disability or other protected category.