Purpose

Our Information Security Engineer will be responsible for overseeing information security, cybersecurity, and IT risk management programs based on industry-accepted information security and risk management frameworks in the Americas. This individual will be an integral part of the NEP Information Technology organization reporting directly to the Global Information Security Officer to help improve and communicate the maturity levels of information security, state of cybersecurity, and IT risk practices across the organization. *This is not a senior position*.

Essential Duties/Responsibilities

• Coordinates the continuous development, implementation, and updating of security and privacy policies, standards, guidelines, baselines, processes, and procedures

• Develop and manage the frameworks, processes, tools, and consultancy necessary for IT to properly manage risk and to make risk-based decisions

• Proactively identify risk while developing recommended mitigation/compensating remediation processes, procedures, patches, and upgrades to reduce the security gaps.

• Assist IT managers and staff, with customer and regulatory audits and facilitate management response and remediation efforts when and where applicable.

• Facilitate information systems security management education and training

• Receives security incidents and conducts appropriate level of investigations; prepares written findings, recommendations, and follow-up evaluation; and analyzes patterns and trends.

• Make recommendations for improving controls and practices to reduce risks related to information security.

• Setup, maintenance, and security of Linux operating and Windows systems in support of cybersecurity tools.

• *This is not a senior position*

Position Requirements

• 5+ years of progressive experience in information security/cybersecurity.

• Bachelor’s degree in computer science, Information Systems, or other related areas.

• Possess Certified Information Systems Security Professional (CISSP) or other information systems security certifications.

• Knowledge and experience with networking concepts, protocols, and services.

• Knowledge of vulnerability scanning, and firewall risk analysis tools is desirable.

• Ability to travel, up to 20%.

• General knowledge of information security regulatory requirements and standards such as ISO 27001/2, SANS top 20, and NIST 800-53.

Company Overview

You might not know our name, but you’ve probably seen our work – on stage, on screen or on the field. Our technology solutions and unique Global Production Ecosystem empower content creators and rights holders to tell their stories in breakthrough ways. We’ve supported some of the world’s most watched productions and live events in sports, entertainment, concerts, festivals, film, TV and more. For over 35 years our clients have trusted us to deliver live production, live events, and virtual production solutions for them, anytime, anywhere. Put simply, we bring content to life.

IND123