Description:
Position Summary:
The Analyst develops and maintains JetBlue Airways' Compliance Maintenance Program, Security Awareness Program and supports all other IT Security programs and initiatives.
Essential Functions:
* Ensures that the appropriate information security policies, standards, procedures, and best practices are developed, communicated, and followed
* Participates in Project Management activities to support IT Security programs and initiatives
* Works with internal and external Auditors to assess compliance with policies, standards, procedures, and best practices
* Maintains systemic, analytical Compliance programs
* Works with internal and external auditors to assess annual regulatory compliance
* Participates in the development and delivery of a comprehensive information security training program that provides the appropriate training for all crewmembers
* Markets information security to all Crewmembers to achieve a high degree of awareness
* Gathers and reports metrics which fully reveal the state of information security at JetBlue Airways
Interactions:
Supervision Received:
* Receives general instructions on what is to be done, limitations, quality and quantity expected, deadlines, and priority of assignments from Crewleader. Uses initiative in carrying out recurring assignments independently without specific instruction but receives additional specific instructions from Crewleader for new, difficult, or special projects/assignments
Supervisory Duties:
* No supervisory responsibility
Working Conditions:
Equipment:
* Computer and other office equipment
Work Environment:
* Normal office environmentdf-tc
|
Experience/Skills:
Minimum Qualifications:
* Bachelor's Degree in a related discipline with specialized leadership training and/or demonstrated capability through previous experience and education to perform job responsibilities
* Security related certification (e.g. CISSP, CISA)
* Four (4) years Information Security & Compliance experience
* Demonstrated knowledge of industry best practices for project management
* Experience with regulatory/compliance requirements and other regulatory laws (PCI, PII, Privacy Laws, SOX, HIPAA, etc)
* Knowledge of ISO 17799; NIST SP 800:30 and other leading security standards
* Regular attendance and punctuality
* Organizational fit for the JetBlue culture, that is, exhibit the JetBlue values of Safety, Caring, Integrity, Fun and Passion
* Well groomed and able to maintain a professional appearance
* Pass a ten (10) year background check and pre-employment drug test
* Legally eligible to work in the country in which the position is located
* When working or traveling on JetBlue flights, and if time permits, all capable Crewmembers are asked to assist with light cleaning of the aircraft
Knowledge, Skills, and Abilities:
* Understanding of core security principles
* Superior verbal and written communication skills to effectively manage project communications and stakeholder expectations at all levels of the organization
*Experience of regulatory/compliance requirements and other regulatory laws (PCI, PII, Privacy Laws, SOX, HIPAA, etc)
*Demonstrated knowledge of industry best practices for project management
* Familiar in managing Security Awareness Programs
* Familiar with Risk Management Practices
* Knowledge of information security policies, standards, procedures, and best practices
* Excellent interpersonal skills to influence business and IT teams to follow information security policies and procedures
* Team skills - able to work in a team environment as a productive and cordial team player
* Integrity - trustworthy, discrete, and able to handle information in confidence
* Excellent problem solving - determines relevant data, considers multiple perspectives, augments knowledge from other sources, uses alternative approaches to verify, and synthesizes information to determine relationships
* Time management - able to balance effort between multiple assigned tasks, recognizes when to seek help or guidance, and avoids a state of constant re-prioritizing as new tasks arise which prevents one from actually compl
|