IT Security Specialist

New solutions emerge when thinking isn't hard-wired. Networks are about more than IT Networks. They are about connecting people who make things possible. Close teamwork is key to understanding how IT can help integrate ideas into systems. We put this insight into practice, and it's part of our success.

• Leads projects related to IT security initiatives and steers external providers in the delivery of IT initiatives.
• Analyzes, designs, coordinates and measures security controls for the Americas Region consistent with Group security guidelines and targets.
• Partners with the application development teams to ensure secure development and delivery practices, including security findings management and oversight, utilizing secure source code analysis and protection tools.
• Provides security subject matter expertise and consulting to IT and business partners for tactical and strategic technology initiatives.
• Communicates security practices and leads education efforts within the IT and business scope.
• Leads initiatives to ensure secure development processes are implemented and maintained.
• Identifies and defines computer system security requirements in coordination with DevOps teams.
• Defines and implements computer security architecture and detailed cybersecurity strategies.
• Develops technical solutions and security tools to help mitigate security vulnerabilities and automate repeatable tasks.
• Conducts and supports investigations related to security incidents involving technology (i.e. email, endpoint, applications, and data breaches).
• Consults on IT security and compliance initiatives to ensure Dev Sec Ops practices are well-defined and predictably executed.
• Prepares and documents standard operating procedures and protocols as well as other required documentation.
• Delivers content and expertise in support of products and Agile initiatives. Engages with central and local teams to clarify and reinforce target measurables and impact of risks, vulnerabilities, and effort of remediation.
• Supports operational excellence goals through strong operations knowledge.
• Engages with central and local teams to clarify and reinforce target measurables and impact of risks, vulnerabilities, and effort of remediation.
• Evaluates technology products for integration into the technical landscape.
• Works with team members to build systems and processes that improve efficiency and competitive posture of the company.
• Consults in outlining the technology/process vision in area of responsibility.
• Understands and models VPS (Value Added Production System) Principles and concepts of Standard Work and Problem Solving.
• Adheres to 5S and Safety Standards and Principles.
• Performs other duties as assigned by management.

Qualifications:

• BS/BA degree in Business, IT or Engineering or the equivalent of 4 years of related professional experience managing IT application development, maintenance and support.
• 5 years of demonstrated success in IT.
• 5 years of experience specializing in IT security.
• 3 years of experience in cloud security in AWS & Azure (preferred).
• 3 years of experience in incident response and business continuity planning (preferred).
• 3 years of knowledge of IT governance.
• 3 years working in Agile projects (preferred).

BMW Manufacturing Company is an equal opportunity employer. It is the policy of BMW MC to provide equal employment opportunity (EEO) to all qualified persons regardless of age, race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.