IT Security and Compliance Analyst I

Position Overview:

Through the use of state-of-the-art data security tools and IT security audit frameworks, this entry-level position plays an important role in the protection of Company data assets. The IT Security and Compliance Analyst I identifies security risks and threats, and coordinates with the IT Technical teams to have them remediated. This position also assists with ensuring IT audit-related tasks are completed, and coordinates both internal and external IT audit functions.

Primary Responsibilities:

With Supervision and guidance:

• Perform periodic audits (as specified by policy and/or audit frameworks) to ensure required policy and regulatory controls are being followed and documented. This includes, but is not limited to internal IT policies, Sarbanes-Oxley (SOX) IT requirements and Payment Card Industry (PCI) requirements.
• Coordinate audit-related tasks to ensure the readiness of managers and their teams for audit testing. This may include coordination with both internal and external auditors.
• Review user access rights (using Access Rights Manager) to identify security risks.
• Review daily, weekly and monthly threat alerts and analyses from the Security Information and Event Manager (SIEM), anti-virus, intrusion protection and other network security tools.
• Perform internal and external vulnerability scans at least monthly and prior to the deployment of new services or systems.
• Coordinate remediation efforts with IT Technical teams to ensure identified threats or vulnerabilities are addressed.
• Prepare monthly status updates for the CIO and Tech Services Team Managers.
• Facilitate annual Disaster Recover Testing by collaborating with the IT Technical teams to develop requirements, objectives, plans, schedules and tasks to complete the test.
• Manage and grow the Cyber Security and Privacy Awareness program.
• Maintain a professional and situational awareness of the global threat environment through the development and use of Cyber Intelligence resources. Identify potential threats and assess the risk to Ollie's environments. Coordinate with the IT Technical teams to mitigate those risks.
• Complete any additional responsibilities as assigned

Qualifications:

• High School diploma or equivalent required.
• Higher education, including two and four year degrees related to Information Technology preferred.
• Minimum of 1-2 years of experience in Information Technology with focus on infrastructure.
• Experience with data and/or cyber security preferred. Responsibilities may require evening and weekend work in response to needs of the business.
• Ability to exercise sound judgment.
• Good problem solving and analytical skills.
• Accuracy and attention to detail.
• Good organizational and time management skills.
• Effective written and verbal communication skills.
• Ability to learn and communicate new information and processes to IT and business associates within the company.
• Outstanding interpersonal and listening skills, including the ability to work with other teams within the company.
• Strong self-starter.

Physical Requirements:

• Ability to remain in a normal seated position regularly.
• Ability to see, hear, and speak regularly.
• Minimal travel to stores and distribution centers.
• Duties frequently involve being seated for extended periods of time and using computers.

Ollie's is an equal opportunity employer. In compliance with Federal and State Equal Opportunity Laws, qualified applicants are considered for all positions applied for without regard to race, color, religion, sex, sexual orientation, gender identification, national origin, age, veteran's status, disability, genetic information or any other legally protected status.

#DCIN