Information Security Engineer

Brookshire Grocery Company (BGC) is a family business based in Tyler, Texas, and currently operates more than 205 stores in four states – Texas, Louisiana, Arkansas, and Oklahoma – with three distribution centers and a corporate office. BGC prides itself on offering its partners one of the most comprehensive benefits packages in the industry which includes medical, prescription drug, vision, dental, paid time off, stock ownership, a 401k retirement plan, incentive plans, employee discounts, educational scholarships, and access to BGC’s 205-acre outdoor recreation area.

Job Summary

Plans, coordinates, designs, and implements enterprise information security solutions to ensure Company assets are secure and adhere to security best practices. Performs research and guides the Information Security team on enhancement suggestions, security standards, and existing or potential measures to eliminate/mitigate risk to the enterprise while improving the effectiveness and efficiency of the team.

Essential Duties and Responsibilities

• Understands, interprets, and applies security standards, frameworks, compliance requirements, and comprehensive architecture principles to recommend solutions that meet regulatory, business continuity, and security scalable needs.
• Provides subject matter expertise on security architecture, authentication, and system security.
• Serves as security lead and subject matter expert (SME) on business projects to gather security requirements needed to design, build, document, support, and knowledge transfer security permissions, roles, rules, and configuration to ensure adherence to company and security standards.
• Works with external vendors to plan and deploy solutions, resolve issues, and implement enhancements.
• Researches, plans, designs, and builds solutions that will advance security, such as multi-factor authentication, passwordless authentication, zero trust networking, cloud security architecture, PKI, authorization tokens, identity governance, and data automation.
• Works to implement technical capabilities with application integrations to enhance security risk posture. These implementations include identity, Privileged Access, and Data Governance solutions.
• Builds new APIs (Application Programming Interfaces), services, and frameworks.
• Analyzes security systems and seeks improvements on a continuous basis.
• Fosters a continuous learning mindset to stay updated on emerging threats and technologies. Reports existing or possible threats to systems and company assets and researches recommendations to eliminate, remediate, or mitigate them.
• Provides leadership and assists in developing security best practices, documenting security standards, and making decisions regarding enterprise security.

Knowledge, Skills and Abilities

• Recognized expert in multiple information security specialty areas with cross-functional experience.
• Mastery knowledge of Microsoft Office applications including Excel, Access, Word, Outlook and PowerPoint.
• Mastery ability to demonstrate strong meeting facilitation, verbal and written communication skills, lead productive discussions and drive consensus working with technical and non-technical stakeholders to communicate complex security concepts.
• Mastery in the preparation of reports and business correspondence.
• Mastery skills in developing to show information in presentation or diagram form.
• Advanced working knowledge of application security provisioning and governance technologies, authentication protocols (i.e. OAuth, SAML), cloud security services, LDAP (Lightweight Directory Access Protocol), and domain structures.
• Advanced knowledge of SAP reporting and transactional applications.
• Advanced knowledge and understanding of relevant regulatory requirements and security frameworks, such as HIPAA, PCI DSS, NIST and ISO.
• Advanced technical aptitude to quickly learn new technologies, systems, methods and processes.
• Advanced ability to analyze complex technical information.
• Advanced ability to research information, establish facts and draw valid conclusions.

Education, Experience, and Qualifications

• Bachelor’s Degree in Computer Science, Information Security, or other technology field.
• Relevant professional Security and Project Management certifications, such as PMP, CISSP, CISM, CEH, GIAC, or other related certifications are highly desirable.
• Minimum of eight years of experience in Information Security with progressive experience in designing and implementing security solutions and a minimum of ten years within Information Technology or an equivalent combination of experience and/or higher education (2X the experience listed above if non-degreed) required.
• Proven experience as an Information Security Engineer or similar role in a corporate environment, preferably within the retail or grocery industry.

Physical Demands

• Continuously required to use close vision, distance vision, depth perception or the ability to focus.
• Frequently required to talk and hear.
• Frequently required to use fine finger movements (ex. sorting and typing).
• Frequently required to sit for long periods of time.
• Occasionally required to use hands for reaching, touching or handling.
• Occasionally required to push, pull, maneuver or lift objects up to 40 lbs.
• Occasionally required to bend, kneel or squat.
• Occasionally required to stand or walk.

Work Context and Environment

• Work is generally performed in an office environment.
• Quiet to moderate noise level.

Brookshire Grocery Company strives to provide a safe, drug free and alcohol-free environment for its partners and guests. The Company is an Equal Opportunity Employer and makes employment decisions without regard to race, color, religion, sex (including pregnancy, gender identity and sexual orientation), national origin, age (40 or older), disability, genetic information or military status and any other trait protected by law.