Senior Information Security Engineer

The Senior Information Security Engineer will support an enterprise security program including conducting deep-dive Third-Party Risk Management (TPRM) assessments, developing and delivering security awareness training campaigns, identifying, tracking, and coordinating vulnerability remediations based on threat intelligence feeds, performing litigation support and investigations, establishing policy enforcement processes, and engineering automations to improve time to deliver using Artificial Intelligence (AI) or automation platforms.

The applicant must have prior experience engineering security solutions with successful deployments in complex commercial enterprise environments. The candidate should have prior experience in a security operations or engineering role, with expertise conducting third-party, software, and vendor risk assessments. Additional required skills are, developing and enhancing security policies and standards, and hands‑on knowledge of cloud (SaaS) and hybrid network infrastructure environments, establishing automations to improve accuracy and speed of outcomes, and performing disaster recovery (DR) /Continuity of Operations (COOP) assessments.

The candidate will possess strong and polished communication skills, willingness and ability to present security topics to internal and external customers and thrive in a highly visible and fast-paced role.

• Conduct high-quality and timely third-party/vendor/service provider/software risk assessments, with the ability to meet SLAs and communicate effectively with all stakeholders.
• Contributes to the creation and maturation of information security policies and processes.
• Identifies opportunities to automate manual processes and successfully engineers and delivers on process improvements according to assigned timelines.
• Develops and delivers Disaster Recovery and Continuity of Operations risk assessments to business units successfully establishing resiliency plans for the company.
• Assist with the governance of the enterprise Policy Exception process including stakeholder engagement, driving completion with internal teams, and providing balanced reports that will be visible to senior leaders.
• Create, adapt, and enhance weekly metrics to measure program effectiveness.
• Evaluate security architectures including the ability to identify risks, compensating controls, and mitigation plans.
• Develop custom security awareness and phishing campaigns to elevate employee knowledge of current trends and threats to Sinclair.
• Perform, and maintain litigation and data retention holds using eDiscovery and other actions to support Sinclair Legal requests.
• Ability to multitask, prioritize, and remain organized with simultaneous assignments while remaining flexible and resilient.
• Maintain a high level of professionalism and integrity with the ability to effectively communicate with internal and external stakeholders.
• Ability to think strategically, plan methodically, and execute tactically.
• Take ownership of personal and professional development needed to excel in the role.

• Apply excellent communication skills to efficiently collaborate with company stakeholders and business partners.
• Ability and prior experience delivering live training sessions to diverse audiences.
• Evaluate and recommend new products, maintain knowledge of emerging technologies, and maximize value from existing tool sets to ensure return on investment.
• Demonstrate strong problem‑solving skills by identifying gaps or issues and clearly formulating solutions.
• Ensure compliance with Sinclair policies and standards by communicating requirements to internal stakeholders.
• Proactively respond to information security tickets and requests…