[SJ-JOB] Sr. Security Analyst, El Segundo

---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------


JOB DESCRIPTION
---------------------------------------------------
Position:       Sr. Security Analyst
Location:       El Segundo, California, United States
Type:           Permanent F/T

Closing Date:   2008-07-19

At Mattel, we have a vision to be The World's Premier Toy Brands - Today and Tomorrow. We will achieve this vision because our people are creative and energetic, thriving on innovation and passion for the business. Mattel is committed to supporting and developing employees and their career goals with a host of meaningful advantages and opportunities, including development through our global Leadership Development Center, tuition reimbursement, on-site childcare, and a fitness and recreation center. As the worldwide leader in the design, manufacture and marketing of toys and family products, including Barbie®, Hot Wheels®, American Girl® and Fisher-Price®, Mattel is not only one of the best places to work, it's also a lot of fun. If you're as excited about the future as we are, consider this opportunity.

The IT Security Specialist will implement and manage enterprise-wide technical and manual security controls designed to secure sensitive information assets of the global enterprise and mitigate security risk. The Specialist will engage matrixed project teams for the implementation and operation of the global security control environment. Implementations will include but are not limited to network security, platform security, application security, identity management and access control, mobile computing, threat and vulnerability management and monitoring, as well as process, policies and standards following industry best practice security frameworks.

This position requires strong communication and people skills, requiring collaboration with a large IT teams in domestic and international locations including Mattel Corporate, American Girl, Fisher Price and domestic and international Brands. These IT teams include Business Analyst, Systems Analyst, Managed Services for applications, and Global Infrastructure functions. The position must also engage the support of other business groups such as Legal, Audit, and business information owners.

Responsibilities

' Document, enforce and monitor information security policy, standards and procedures among across technologies, employees, contractors, strategic partners and other third parties.
' Initiate, facilitate and promote activities to foster information security awareness within the organization.
' Serve as an internal information security consultant to the organization monitoring advancements in information security technologies, threats, vulnerabilities and other trends.
' Monitor changes in legislation and other relevant private sector parties for potential impact in information security requirements. 
' Understand Payment Card Industry (PCI) security compliance requirements and the security controls needed for compliance.
' Understand Sarbanes Oxley security controls and compliance.
' Assists in the overall implementation and operation of risk management programs that oversees the identification, quantification, and mitigation of information security risk, threats and vulnerabilities for the corporation.
' Provide technical oversight for all Security projects and processes, and the implementation of new technologies and/or process solutions. 
' Develop and deliver regular reports to management describing the state and status of existing threats, vulnerabilities, mitigations and other information security metrics.
' Assist with the identification and selection of security technologies.
' Implement identity and access management technical and process controls across enterprise-wide applications and business functions.
' Design technical and manual controls for infrastructure security (systems, databases).
' Design technical and manual controls for network security such as LAN/WAN, remote access and voice.
' Design technical and manual controls for application security in the context of a Secure Development Lifecycle.
' Design technical and manual controls for mobile computing security.
' Design technical and manual controls for Intellectual Property protection.
' Support and/or drive incident response processes.


JOB REQUIREMENTS
---------------------------------------------------
 BS in Information Security-related curriculums, or equivalent in Information Security Management. Graduate degree in Information Security or IT fields preferred.
' CISSP, CISM, CISA, or equivalent certifications.
' Minimum 5 years of experience in a global / international environment, preferably as a supervisory capacity.
' Experience with Information Security policy, standards and compliance, based on commonly accepted security practices, with the ability to justify policy strength to real business need or risk. 
' Demonstrable knowledge of information security threats and vulnerabilities 
' Demonstrate knowledge of information security architecture from infrastructure through application layers
' Demonstrable knowledge of security challenges and business implementation of an in-depth security architecture design. 
' Excellent communication skills and interpersonal skills. 
' Extensive experience collaborating and communicating with various business functions outside of IT.
' Experience in Intellectual Property protection controls and methodologies.

Mattel is an Affirmative Action/Equal Opportunity Employer




CONTACT
---------------------------------------------------
Apply at www.Mattel.com

Mattel, Inc.
Mita Crawford
Recruitment Specialist
[email protected]



---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.

http://www.securityfocus.com/jobs