Job Description

The Cyber Security Risk Analyst II is responsible for ensuring information security best practices relating to issues such as: collaborate in the development of IT standards and policy for systems; conducting/coordinating information security risk assessment and analysis; establishing reasonable information security guidelines; assisting with monitoring and management of systems security vulnerabilities; conducting/coordinating information security audits (Assessment and Authorization processes) and oversight of the exception process, conduct information security reviews of third parties in the supply chain, assist in providing responses to questions from other departments and third parties about the Company’s security posture and controls.

What You Will Do:

Perform risk analysis and intelligence information analysis to determine likely threats.
Conduct information security risk assessments
Conduct information security audits, including security controls assessments, Assessment and Authorization process, and oversee exception process. Audits and assessments will be against various information security standards, including NIST and ISO standards.
Prepare and deliver presentations to management teams and user groups.
Conduct information security reviews of third parties in the supply chain.
Provide responses to questions from other departments and third parties regarding the company’s information security posture and controls.
Assist in the design and support of internal cyber security education and awareness activities.
Assist in the risk assessment and management of security vulnerabilities.
Establishing reasonable security guidelines and measures to protect data and systems.

What You Will Need:

Education and Experience

Bachelor’s Degree in Information Security or related field of study, or equivalent work experience.
Minimum of seven (7) years of previous related work experience in IT operations and information security risk management
IT Security Industry certification (SANS, ISC2, etc.)

Knowledge, Skills, And Abilities

Compliant with Federal International Traffic and Arms Regulations (ITAR) requirements.
Experience in Best Practices, Standards, and requirements from DFARS and NIST.
Prior experience working in a global organization.
Prior experience required in the Information Technology field of IT Security and/or Operation and IT Risk management.
Clarity and conciseness in oral and written communications; demonstrated capability to produce effective presentations for delivery to both technical and non-technical audiences.
Strong interpersonal skills to achieve process changes and departmental goals within a matrix organization; ability to communicate and work well with others at all levels of the corporation.
Understanding of basic network concepts such as TCP/IP, subnetting, firewalls, and other network administration protocols.
Understanding of typical IT systems operations, configurations, and management.
Experience working with vulnerability and risk management processes.
Experience using a GRC Tool.
Knowledgeable of the C&A or A&A process.
Ability to develop a working knowledge of ABS Rules, Guides, statutory regulations, and related instructions, as well as the ABS Employee Safety Policy.

Reporting Relationships:

Reports to Manager or Executive level position

Notice:

This position requires access to information that is subject to control by the Export Administration Regulations and/or the International Traffic in Arms Regulations. Any offer of employment shall be contingent upon the Company’s verification that the candidate is a “U.S. Person” or upon the receipt of all necessary export licenses or authorizations that may be required by U.S. export control laws. “U.S. Persons” are defined as U.S. citizens, U.S. lawful permanent residents (i.e., “green card” holders), or any individual granted protected status under the Immigration and Nationality Act (8 U.S.C.

1324b(a)(3)), including asylees and refugees. In the event a candidate refuses or cannot otherwise provide the necessary information for the Company to determine whether such licenses may be required, or for the Company to obtain any required licenses, the Company shall maintain the exclusive right to discontinue the application process and/or withdraw any contingent offer that has been made.

About Us

We set out more than 160 years ago to promote the security of life and property at sea and preserve the natural environment. Today, we remain true to our mission and continue to support organizations facing a rapidly evolving seascape of challenging regulations and new technologies. Through it all, we are anchored by a vision and mission that help our clients find clarity in uncertain times.

ABS is a global leader in marine and offshore classification and other innovative safety, quality, and environmental services. We’re at the forefront of supporting the global energy transition at sea, the application of remote and autonomous marine systems, cutting-edge technical solutions, and many more exciting advancements. Our commitment to safety, reliability, and efficiency is ever-present, guiding our clients to safer and more efficient operations.

About Our Benefits

ABS Bureau proudly offers a variety of industry-leading benefits designed to enhance the life and well-being of our employees and their families. These benefits include, but are not limited to, medical insurance (PPO and HD), dental and vision insurance, Health Savings Account (HSA), Flexible Savings Account (FSA), life insurance, accidental death and dismemberment insurance, disability leave programs, parental leave program, paid holidays, and paid vacation time. The Company provides an Employee Assistance Plan (EAP) that offers support in personal wellness, including work-life services. ABS Bureau also offers a 401K plan with a generous company match, subject to plan requirements.

Equal Opportunity

ABS Bureau is committed to the equal employment opportunity of its employees and prohibits discrimination against any employee or qualified applicant based on race, color, creed, religion, national origin, sex, gender identity, age, disability, marital status, sexual orientation, citizenship status or veteran status, or other non-work-related characteristics that may be protected under the law of the Federal Government or specific state employment laws.

Notice

ABS and Affiliated Companies (ABS) will not pay a fee to any third-party agency without a valid ABS Master Service Agreement (MSA) authorized and signed by Human Resources. Any resume, CV, application, or other forms of candidate submission provided to any employee of ABS without a valid MSA on file will be considered property of ABS, and no fee will be paid.

Other

This job description is not intended, and should not be construed, to be an all-inclusive list of responsibilities, skills, efforts or working conditions associated with the job of the incumbent. It is intended to be an accurate reflection of the principal job elements essential for making a fair decision regarding the pay structure of the job. #ogjs

American Bureau of Shipping (ABS) jobs

Risk Analyst II, Cybersecurity