GRC Senior Security Analyst

Kura Sushi USA is a publicly traded U.S. company established in 2008 as a subsidiary of Kura Sushi, Inc. We are an innovative and tech interactive Japanese restaurant chain serving up the ultimate eater-tainment dining experience with a combination of premium ingredients, advanced technology, and affordable prices to create a one-of-a-kind revolving sushi dining experience.

Come join the Kura Krew! We have and exciting opportunity to join our growing team.

This role is a hybrid role. The selected candidate must be able to come to the office in Irvine, CA on in office days and as needed to carry out necessary functions of the role.

will be responsible for safeguarding Kura’s IT (Information Technology) infrastructure by monitoring security systems, conducting vulnerability assessments, and responding to security incidents under the direction of the Integrated GRC Senior Manager. This includes but not limited to monitoring activity throughout the Kura Sushi USA (“Kura”) environments and responding to security alerts in real time;
Analyzing system logs, intrusion detection alerts, and suspicious activity; conducting vulnerability assessments and penetration testing; providing guidance on firewall security configurations, Intrusion Prevention System (IPS)/Intrusion Detection System (IDS), and endpoint protection systems;
Investigating and documenting security incidents, including root cause analysis; developing and enforcing security and data governance via policies, procedures, and compliance standards; collaborating with ACAS and IT teams to strengthen security controls; and provide cybersecurity training and awareness to staff.

• Forensic Analysis:
  Conduct forensic analysis of Security Information Event Management (SIEM), environment telemetry or log events to identify security incidents and vulnerabilities.
• Security Solutions:
  Evaluate, recommend, and implement security solutions to enhance core security capabilities, including access management and network security.
• Incident Response:
  Monitor security networks for breaches, respond to incidents, and conduct thorough investigations to mitigate risks.
• Vulnerability Assessments:
  Perform periodic vulnerability assessments and threat hunting to identify and address potential security weaknesses.
• Collaboration:
  
  Work closely with IT teams to ensure secure system configurations and compliance with security policies.
• Reporting:
  Prepare regular security reports for management, detailing findings and recommendations for improvements.
• Training:
  Conduct security awareness training for staff to promote a culture of security within the organization.
• Other duties as directed by the Integrated GRC Senior Manager and/or the VP of Audit, Compliance and Advisory Services.