Systems Security Analyst

Symetra Financial is a family of companies with nearly a half-century of experience providing retirement plans, employee benefits, annuities and life insurance through independent distributors nationwide. The company has more than $20 billion in assets and is owned by an investor group led by White Mountains Insurance Group Ltd. and Berkshire Hathaway Inc.Summary:
Do you have experience managing user access control privileges?
Are you looking for an opportunity to utilize your customer service and communication skills?
If so, join the Symetra Finanical team!
Responsibilities:
Participate in the design and implementation of centralized user access control administration to internal software applications. Elicit, analyze, validate and document user level system security requirements Assess and project the impact of system security related changes on internal customers Evaluate products, procedures and process improvement solutions to enhance productivity and effectiveness Serve as a subject matter expert for user access controls and application security plans Drive strategic user access control solutions through research and audit activities Develop solutions in line with documented technical and change management guidelines and obtain management support and approval for recommended solutions Provides operational support for application and user access security efforts: o Manages user access control privileges associated with shared computer systems and software applications. o Manages the system privileges of users in response to security requests submitted by either the Service Desk, Human Resources or the business partner o Generates requests to grant computer and/or network access privileges that have been appropriately approved o Regularly obtains reauthorization that the granted privileges are still appropriate for the workers involved o Maintain accurate and up-to-date records that reflect user information, current user privileges and management authorization for these same user privileges within software applications o Preserve all records indicating changes made to access control lists to facilitate audits and other investigations Prepares status reports on application and user security matters. Works closely with business partners and IT staff under the policy guidance of the Information Assurance Analyst and Service Delivery Specialist Establishes and refines procedures and other business processes to detect errors and inconsistencies in application level user privileges Ensures compliance to security policies and procedures by administering and monitoring application level security profiles Reviews application level security violation reports and investigates possible security exceptions Updates and maintains documents regarding compliance to security controls May be involved in the evaluation of products and/or procedures to enhance productivity and effectiveness Provides direct support to the business and IT staff for application systems security related issues Educates users on systems security standards and procedures as they relate to software applications and serves as the subject matter expert for the update of application security plans Provide consultation to IT staff in their efforts to establish and maintain adequate application level audit trails so that sufficient evidence of computerized business activities exists to maintain information integrity Provide consultation to IT staff to ensure that all current and future business applications include adequate user access controls Provide consultation to IT staff in determining application level security solutions for various platforms and initiatives
REQUIREMENTS
EDUCATION AND EXPERIENCE REQUIREMENTS Bachelor’s Degree in Computer Science, Information Systems, or other related field or equivalent work experience. Two to five years of combined IT and security work experience with a broad exposure to infrastructure/network, client/server mainframe and Web environments. Proven experience managing and analyzing user access privileges Knowledge of security issues, techniques and implications across computer platforms. Technical expertise in systems administration and security tools Knowledge of security practices and procedures. KNOWLEDGE, SKILLS, AND ABILITIES REQUIREMENTS Excellent verbal, written and interpersonal communication skills, including strong questioning and listening skills and ability to look beyond obvious answers Ability to identify and resolve conflicts between security and business objectives Ability to see the big picture and think strategically Tolerance for ambiguity and uncertainty Familiarity with information security technology Demonstrated good judgment Ability to work independently as well as in a team environment Consistent ability to multi-task and thrive in a fast-paced environment Proven problem solving and troubleshooting abilities and attention to detail Ability to independently analyze information and make recommendations based on analysis Ability to organize and prioritize multiple tasks and meet deadlines Ability to work in a customer service oriented organization Must be available to share on-call responsibilities Comments: This is a key role in a newly formed team to participate in the design and implementation of centralized user access control administration to internal software applications. This analyst will serve as a subject matter expert for user access controls and application security plans, and will be a visible internal security advocate, charged with gaining support of and compliance with user access control requirements. Serving as a liaison between IT and business users and management, this analyst will elicit, analyze, validate and document user level system security requirements and will assess and project the impact of system security related changes on internal customers. The individual will need to understand the full System Development Lifecycle to participate in project work and gather business requirements using analysis skills. Project work may include participating on a team responsible for the evaluation of products, procedures and process improvement solutions to enhance productivity and effectiveness as well as driving strategic user access control solutions through research and audit activities. The analyst will work with team members and business partners to ensure solutions are in line with documented technical and change management guidelines and obtain management support and approval for recommended solutions. The Systems Security Analyst will manage user access privileges within a wide variety of internal and third party supported software applications. This individual will apply proven communication, analytical, customer service and problem-solving skills to ensure compliance to security policies and procedures by managing internal business application security requests and facilitating the establishment of new accounts, termination processing and modifications to existing network accounts which are managed by ACS, our third party service provider. ~cb~