Lead Information Security Administrator at Arch Coal, Inc. (CISSP)
Greater St. Louis Area
Lead Information Security Administrator at Arch Coal, Inc. (CISSP)
Greater St. Louis Area
1. Develop and administer the corporate security program; including recommending, authoring and implementing security policies and procedures. Evaluate, recommend and implement security products and solutions. Responsible for managing a team of three information security professionals. Responsible for regulatory requirements as it pertains to information security (i.e. HIPAA, Sarbanes-Oxley).
2. Develop, implement, and manage security awareness and training for all system users.
3. Provide advice and assistance to various departmental personnel in identifying security requirements for the automated systems, including security considerations in application development, implementation, operation and maintenance.
4. Responsible for assisting in overall Business Risk Mitigation from an Information Systems perspective. Perform risk assessments and identify potential security risks related to data systems, infrastructure components, applications and any other Information asset.
5. Work with Internal Audit and external resources to assess information security.
6. Communicate security issues and concerns to corporate management staff.
7. Manage & implement corporate firewalls (Checkpoint), Intrusion Prevention systems, SIEM, AV, URL filtering, Proxies, WLAN security, Vulnerability Mgmt, VPN, etc.
8. Monitor and inspect network activity for unexpected behavior; including monitoring all forms of security logs, alert tools, and other data collection mechanisms.
9. Review web activity reports concerning users and external resources, regarding suspicious and unexpected behavior.
11. Investigate, report, and escalate security incidents and take appropriate actions.
12. Keep current on security issues and threats – participate in relevant professional organizations and services.
CISSP (Certified Information Systems Security Professional)
CCSA (CheckPoint Certified Security Administrator)
MCP (Microsoft Certified Professional)