IT​/Tech, Cybersecurity, Information Security

Position: 81.9046
Description

Publix Super Markets, Inc., the largest employee-owned company in the U.S., is driven by a dynamic technology team of 2,300+ professionals delivering innovative solutions to 1,400+ stores and 200,000+ associates across 8 states.

From IT security and platform engineering to architecture, software development, and infrastructure, we offer career opportunities at every level-internships through technical leadership.

Join a company consistently ranked among Fortune's "100 Best Companies to Work For" and help us build more than great subs-build the future of technology at Publix.

As a Senior Cybersecurity (Governance) Analyst, you will leverage a broad understanding of IT, regulatory, and cybersecurity domains to assess the security posture of various aspects of Publix and determine the adequacy of current controls. This opportunity will allow you to further expand and apply your skills to solve critical business and data protection related challenges as part of a team, driving governance initiatives, validation of compliance to multiple regulations, and adherence to standards and security best practices.

Location:

Hybrid (Lakeland, FL)

Work Model:
Enjoy the best of both worlds-collaborate in person and innovate remotely.

Why Join Us?

* Hybrid Flexibility:
Work remotely when you need focus time and join us onsite for high-impact collaboration and brainstorming sessions.

* Operational Efficiency:
Ensure technology solutions support efficient workflows and enable automation to improve operational effectiveness.

* Empowered Culture:
We value autonomy, creativity, and continuous learning-your ideas shape the future of technology in our organization.

Your Impact

* Conduct reviews to identify and mitigate potential security weaknesses and ensure that all relevant security features applicable to a system are implemented and functional.

* Coordinate with process owners and managers in the development or updating of IT services and processes.

* Assist with regulatory related projects such as secure configuration management.

* Analyze new and existing systems to determine the appropriate data classification and relevant security controls.

* Serve as a liaison and foster strategic working relationships with technical architects, engineering teams, and businesses to inform them of IT controls or requirements as well as ensure security standards are being met.

* Provide security and compliance consultation on new projects pertaining to PCI DSS, cloud security, data privacy, HIPAA, SOX, etc.

#LI-JB1

Additional Information

Your application may have additional steps that you will need to complete in order to remain eligible for consideration. Please be sure to monitor your email, including your spam folder, on a daily basis for critical, time-sensitive emails that could require action within 24-48 hours.

Please do not use your Publix email address when applying. Once your application has been successfully submitted you will receive a confirmation email.

* Relocation/Household Good Shipment Allowance will NOT be provided.
* Required Qualifications

* Bachelor's degree in management information systems, computer science, information security, or other analytical disciplines or equivalent experience

* 4+ years of combined experience in Information Security, Compliance, Technology Audit, or a related field

* 4+ years of experience in leading and conducting cyber assessments

* 4+ years of internal auditing or internal governance support

* 2+ years of experience with security control frameworks such as ISO 27001, COBIT, NIST, PCI DSS, HITRUST, SOX, HIPAA, etc.

* 1+ year of Artificial Intelligence governance, risk management, or security

* Successful completion of one or more certifications issued by ISACA or ISC2

Preferred Qualifications

* 6+ years of combined experience in Information Security, Compliance, Technology Audit, or a related field

* Operating system and cloud security experience

* Experience evaluating the security infrastructure for large enterprise merchants or service providers

* General understanding of networking and firewall concepts

* Working knowledge of audit methodologies, security assessment tools, and monitoring methodologies