Information Security Engineer

Information Security EngineerDallas, Texas, United StatesYondr is a disruptor. We challenge convention and simplify complexity. A global developer, owner operator and service provider of data centers, we deliver complex data center capacity needs for the world's largest tech companies. Our exponential growth sees us looking for extraordinary people to help accelerate us towards our vision: a tomorrow without constraints.But we can't do this without you.About the RoleOur business is growing and we need an experienced Information Security engineer to join our Global Technology Security team with a proven track record of building/operating in a modern Information Security practice in a global organisation. You will have developed, managed and implemented information security controls and processes. This will involve a range of activities including consultative engagements, project-work, pro-active security testing, vulnerability management, auditing, reporting and investigations.You'll be responsible for conducting risk assessment, policy creation and awareness training while staying up to date with other industry best practices. You'll be hands-on with a variety of security technology and interact with various internal teams to lead and deliver best-in-class solutions in an exciting fast-paced environment. Dynamic, smart people and inspiring, innovative technologies are the norms here.Main ResponsibilitiesDrive the evolution of the company's Information Security standards to maintain best practice and alignment with corporate policies and regulatory requirementsBe hands on in managing and maturing our security technology and processesInvestigate and respond to information and cybersecurity incidentsProvide consultation and/or education as needed and drive the adoption of security as a value add/best practiceWork in partnership with stakeholders, to ensure all projects, changes, IT standards and procedures are compliant with Information Security Standards and PoliciesManage (third party) penetration testing and facilitate any subsequent remediation activitiesAct as a subject matter expert on matters of Information security relating to YondrConduct 3rd party risk assessments to ensure suppliers are aligned with our security standards and fall within our risk tolerancesManage phishing platform, training and related reportingProvide guidance and subject matter expertise on processes, controls, and objectives around audit and information security activities, best practices, and process improvementsConduct vulnerability assessments, risk analyses, and remediation tracking to drive the attack surface management programConduct Identity and Access Management entitlement reviews of key platforms and applicationsEngage in audits, compliance assessments, and regulatory security requirementsMaintain documentation related to security processes, incidents, and compliance requirementsQualifications and ExperienceExperience with regulatory and compliance standards; ISO27001, SOC2, PCI DSS5+ years experience working as an information security professional within a medium to large sized global organisationProven experience implementing, maintaining and leading an effective information security control assurance programmeStrong stakeholder management and communication skills, including technical members of staff and senior non-technical business leadersApplied working knowledge of networking principles and the OSI model to evaluate control effectiveness and support investigation of network-based security incidentsBackground in working with international organizations that provide 24x7x365 operationsMust understand OT, Network and Zero-trust architectureUnderstanding of email security tools, vulnerability management, penetration testing and remediationStrong analytical, troubleshooting, and problem-solving skillsInformation Security, alongside significant knowledge and experience of Cyber securityWorking knowledge of Microsoft Sentinel, Qualys, Microsoft Defender, Knowbe4 are essential.Exposure to Microsoft Purview, MDR services, UBA and IT/OT network environment are desirableExcellent verbal and written communication skillsAbility to manage multiple priorities and work independently or within a team environmentRelevant certifications preferred, such as:CISSPSecurity+CISACEHGSECMicrosoft CertificationsAt Yondr, we want to enhance the diversity, equity, inclusion and belonging of our workforce to reflect the world we live in. Our roles are potential opportunities for everyone; all interested parties, regardless of nationality, race, ethnicity, religion, age, sexual orientation, or gender, are welcome to apply. We ensure all candidates have equitable access and consideration throughout the hiring process.Yondr is committed to fostering a welcoming, safe and inclusive work environment. We provide support through our benefits, which are inclusive of all backgrounds.