Lead Security Analyst

**OPENTEXT - THE INFORMATION COMPANY**

As the Information Company, our mission at OpenText is to create software solutions and deliver services that redefine the future of digital. Be part of a winning team that leads the way in Enterprise Information Management.

**The Opportunity**:
The Lead Security Analyst will fully understand a wide array of security processes and concepts. The Lead Security Analyst leads the development and implementation of a critical program that identifies and manages OpenText’s Threat and Vulnerability Management program delivering protection capabilities and solutions to reduce IT security related risks. This role is responsible for working directly across multiple teams, management levels, disciplines, technologist, and business groups.

**You are great at**:

- Owning and delivering a risk-based plan and roadmap for threat and vulnerability management services across global Commercial and Corporate infrastructures
- Partnering with the IT and engineering stakeholders to identify, understand and patch or otherwise mitigate security threats to support business needs
- Delivers expert capabilities and direction for threat and vulnerability management services
- Developing and delivering required threat and vulnerability management reporting capabilities
- Managing third party network security assessments
- Performing in-depth analysis of current threat activity and trends
- Identifying and resolving false positive findings in assessment results
- Providing support for audits and gathering of artifacts for ISO27001, PCI, SOC1 & SOC2, etc.
- Leading and delivering reporting and metrics including Key Risk Indicators (KRI’s) as required.
- Producing vulnerability metrics related to identified vulnerabilities, remediation, and risk reduction
- Documenting process and procedures related to all aspects of a threat and vulnerability management program

**What it takes**:

- 7+ years’ experience in working in IT Security
- 4+ years’ experience in working as a threat & vulnerability management expert
- Expert level familiarity with enterprise vulnerability management tools, such as Qualys, Rapid7 Nexpose or Tenable Nessus
- Scripting knowledge to automate repeatable tasks using vendor APIs
- Willingness to explore using open-source or in-house developed tools for vulnerability management services and reporting
- Demonstrated experience building, enhancing and managing vulnerability management programs
- Experience with cloud platforms and deployment
- Experience with moving on-prem solutions to fully utilize cloud offerings
- Experience providing mentorship to other Security team members
- Expert in the ability to communicate to advanced technical teams as well as brief executive management on technical risks and issues, including assessment of compensating controls
- Experience creating and refining metrics to articulate and measure program performance
- Experience with system hardening and secure configuration frameworks
- Able to work independently and efficiently, as well as with others, to meet deadlines
- Self-motivated and detail-oriented
- When required, on call support
- Able to multi-task, prioritize, and resolve multiple inquiries at once
- Possess excellent writing and communication skills to effectively develop policies, and procedures, reports and documentation
- Required security certification such as Certified Information Systems Security Professional (CISSP). Preferred certifications CISSP, CISM, CRISC, or equivalent
- BS in Computer Science, Cyber Security, Information Assurance, or Information Security preferred
- Experience with FedRAMP compliance requirements a plus
- Experience with Docker containers, and container platforms a plus

Subject to applicable laws and regulations, OpenText’s global vaccination policy requires all employees to be fully vaccinated against COVID-19 to enter an OpenText office. Accommodations may be available for specific roles.