IT Security Specialist

Vistex is a global enterprise software and services company that helps businesses take control of their mission-critical processes. With a multitude of programs covering pricing, trade, royalties and incentives, it can be complicated to see where all the money is flowing, let alone how much difference it makes to the topline and the bottom line. With Vistex, business stakeholders can see the numbers, see what really works, and see what to do next – so they can make sure every dollar spent or earned is really driving growth, and not just additional costs. The world’s leading enterprises across a spectrum of industries rely on Vistex every day to propel their businesses.

The IT Security Specialist independently operates and improves Vistex security processes, including security monitoring, incident management, compliance support, reporting and customer security assurance activities. 

Responsibilities:

• Acts as an IT Security representative and key point of contact for security-related queries, escalating complex or higher-risk matters as appropriate.
• Operates, maintains, and contributes to the development of security procedures and controls to support compliance with ISO 27001 and SOC audit requirements.
• Operates and contributes to the continuous improvement of security processes and procedures in accordance with Vistex information security standards and policies.
• Responds to customer and partner security assessments, questionnaires, and security-related queries, coordinating with relevant stakeholders where required.
• Manages and operates Information Security metrics and reporting processes, identifying trends, issues, and opportunities for improvement and implementing agreed improvements as required.
• As part of the IT Security function, acts as a point of contact and escalation for security incidents, supporting investigation, containment, remediation, and follow-up activities.
• Monitors, investigates, and responds to security alerts and detections across Vistex's security toolset, including SIEM, endpoint protection, web filtering and DNS protection, and Microsoft 365 security services.
• Works closely with Vistex teams and managed service providers to implement security improvements, address vulnerabilities, reduce security risks, and respond to security issues.
• Collaborates with colleagues across regions and functions, working flexibly to support projects and security activities, including out-of-hours incident response when required.
• Proactively identifies and maintains awareness of emerging security threats, vulnerabilities, technologies, and industry developments through relevant security publications, vendor advisories, threat intelligence, and other trusted sources.

The compensation for this position is $80k - $95k annually.  Base pay will vary depending on factors, including but not limited to, a candidate’s location, job-related knowledge, skills and work experience. The compensation package may also include incentive compensation opportunities in the form of discretionary annual bonus.  Vistex provides highly competitive benefits including comprehensive healthcare plan, 401(k) and paid time off, including paid volunteerism days!

About us: Vistex solutions help businesses take control of mission critical processes. With a multitude of programs covering pricing, trade, royalties and incentives, it can be complicated to see where all the money is flowing, let alone how much difference it makes to the topline and the bottom line. Vistex solutions are supported by AI capabilities that help turn complexity into insight and action. With Vistex, business stakeholders can see the numbers, see what really works, and see what to do next – so they can make sure every dollar spent or earned is really driving growth, and not just additional costs.

Qualifications Education Required Associates or better. Preferred Bachelors or better. Experience Required Experience as an IT Security Specialist or similar Security certifications such as CompTIA Security+, ISC2 CC, CISA, ISO27001 etc Demonstrable experience with information security frameworks such as ISO27001, SOC 2, NIST, PCI-DSS etc Relevant Information Security or relevant IT experience Demonstrable practical experience working with information security frameworks and standards, such as ISO 27001, SOC 2, NIST and PCI DSS, including supporting compliance and audit activities. Broad understanding of enterprise IT and infrastructure technologies, including servers, networks, firewalls, databases, applications, cloud platforms and identity services, and the security risks associated with them. Practical experience with security technologies, including vulnerability management, SIEM, IDS/IPS, endpoint security and cloud security tools. Strong understanding and practical application of security principles, including defense-in-depth, least privilege, separation of duties, access control and threat modelling. Strong Microsoft Office skills, with experience producing high-quality security documentation, reports and data analysis using Excel. Strong written and verbal communication (US English), interpersonal and collaborative skills, with the ability to communicate security issues effectively to both technical and non-technical audiences. Demonstrable experience working with security monitoring, incident response and operational security processes, including investigation, escalation, remediation and continuous improvement. Experience analyzing security and infrastructure metrics and trends to identify risks, vulnerabilities and opportunities for improvement. Experience contributing to technology lifecycle, vulnerability remediation and security improvement initiatives, working with infrastructure and application teams. Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.