• Assist with the development, implementation, and administration of information security policies, standards, and procedures, adhering to industry best practices • Assist in integrating regulatory compliance requirements (e.g., PCI, GLBA) into the organizational security roadmap • Assist in ensuring that the corporate IT environment is secure and complies with all external audit requirements and federal standards • Coordinate with IT Operations to ensure endpoints and network devices conform to security standards, and that security devices and controls are working as designed • Assist in the identification, evaluation and implementation of industry leading application security tools and techniques • Plan, coordinate, and implement security measures to regulate access to computer data files and prevent unauthorized modification, destruction, or disclosure of information • Perform risk assessments and execute system tests to ensure proper functioning of data processing activities and security measures • Identify potential security risks, and define and document remediation options or mitigating controls • Perform security incident investigations including: chain of custody, containment measures, root cause analysis, and identification of preventive measures • Define and assist in the management of an Incident Response Team that addresses potential or in-progress security events, establishing and adhering to escalation procedures and response times • Perform information systems evidence gathering, to support e-discovery requests and messaging searches • Perform security reviews on requests for new commercial software or material configuration changes to existing software • Perform periodic internal IT security audit functions on IT operational controls, to include system access controls, firewall rule reviews, etc. • Participate in on-call rotation