Information Security Engineer, Governance, Risk and Compliance (GRC) - REMOTE | Towson, MD

The applicant should have prior experience engineering security tools with successful deployments in a large and complex enterprise environment. The candidate should have extensive experience with conducting Third-Party Risk backssments, developing, and enhancing security policy and standards, operating, and configuring data security tools, and advanced technical knowledge of cloud (Saa S) and hybrid network infrastructure environments.

The candidate will possess strong and polished communication skills, willingness, and ability to present security topics to internal and external customers and thrive in a highly visible and fast-paced role. Responsibilities: Process & execution Develop

and contribute to the creation and maturation of information security policies, standards, and processes. Ability to think strategically, plan methodically, and execute tactically.

Take ownership of personal and professional development needed to excel in the role. Conduct accurate and timely third-party risk backssments while partnering with internal technical and non-technical teams such as legal, procurement, IT, and Security Operations. backss and integrate industry best practices to ensure proper data security controls are implemented. Successfully operate in a fast-paced growing environment with changing priorities. Create, adapt, and enhance weekly metrics to measure the

efficacy and effectiveness of the security program. Proactively identify security risks in processes, technologies, and take ownership of projects and initiatives.

Ability to multitask, prioritize work, and efficiently deliver simultaneous assignments while remaining flexible and resilient. Willingness to operate in a changing environment while maintaining a high level of professionalism and integrity. Focus on quality of delivery while setting the example for other team members. Collaboration & Partnerships Apply excellent communication skills to efficiently collaborate with company stakeholders and business partners. Evaluate and recommend new products, maintain knowledge of emerging technologies, and maximize value from existing tool sets to ensure return on investment.

Identify, communicate, and mitigate security risks in on-premises or hybrid/multi-cloud deployments. Demonstrate strong problem-solving skills by identifying gaps or issues and formulating solutions. Ensure compliance with Sinclair policies and standards. Promptly respond to information security tickets and other requests. Resolve complex problems across multiple business units. Operating with a strong sense of teamwork and personal accountability. Performance Improvement Identify areas of improvement within the security team to maintain a level of excellence.

Develop and deliver weekly performance metrics to measure programmatic success. Design, document, and implement procedures and techniques for analyzing and evaluating risk. Proactively and effectively look for ways to improve and optimize processes and techniques. Research emerging technologies and provide feedback and options to leadership to effectively solve problems. Champion collaboration amongst teams, quality execution on assignments, and take personal accountability for deliverables.

Thrive within an environment requiring priority adjustments, multi-tasking, and open communication to align business needs with current responsibilities. Qualifications: Bachelor's degree in IT discipline or equivalent work experience. Exceptional verbal and written communication skills with an ability to present complex information to audiences of varying subject knowledge. Minimum of five years working in an Information Security role with two years conducting third-party and vendor risk backssments. Experience and knowledge working with enterprise security GRC and data security tools (e.

g. RSA Archer, Service Now, Zen GRC, Varonis, Big ID, etc. ). At least two years of experience with security control frameworks across a heterogenous multi-cloud environment. Must have ability to successfully operate in a fast-paced work environment with shifting priorities. Hands-on experience conducting risk and/or self backssment activities to identify key risk areas in the business. Solid understanding of Identity Access Management principles including Zero Trust, least privilege, and entitlement reviews. Prior experience configuring enterprise DLP solutions and tuning alert policies (e.

g. MO365, Zscaler inline DLP, Digital Guardian, Proofpoint, etc. ). Prior experience working in multi-cloud environments with experience in Saa S, Paa S, and Iaa S risk analysis. Understanding data categorization and ability to develop control implementations based on data criticality. Industry certification required in one of the following areas: (e. g. CISSP, CISM, CRISC, Security+, CISA, or equivalent). Familiarity with security backssments and compliance requirements frameworks (SOC-2, NIST "800 series" CSF, SOX, etc. ). Knowledge of current data privacy laws (CCPA/CPRA, GDPR).

Prior experience in the broadcast/media entertainment industries preferred. Sinclair Broadcast Group, Inc. is proud to be an Equal Opportunity Employer and Drug Free Workplace! About Us Make your mark in Media with Sinclair Broadcast Group, a diversified media company dedicated to connecting people with content everywhere! We have consistently led the broadcast industry since our inception, and now Sinclair owns the largest regional sports network business and one of the largest television broadcast portfolios in the country. In addition, we have affiliations with all of the major broadcast networks, own Tennis Channel, and several multicast networks including TBD and Comet.

Our content is distributed over-the-air, on multi-video providers, and through our industry-leading digital media platforms. We're at the forefront of Next Gen technology, enabling innovative new ways to engage with broadcast content like never before. We also recently launched a free TV streaming service called STIRR. Our success is the direct result of our extraordinary employees and management team who believe in our vision and are dedicated to ensuring a great future for our employees.

We are advancing the world of Media and want YOU to join our winning team! About the Team The life-blood of our organization is our people. We have a compelling story, a goal-oriented culture, and we take really good care of people. How good? Here is a glimpse: great benefits, open door policy, upward mobility and a strong desire to see you succeed. Ready to be part of a winning team? Let's talk. The base salary compensation range for this role is $110,000 to $125,000. Final compensation for this role will be determined by various factors such as a candidate's relevant work experience, skills, certifications, and geographic location.

Full time positions are eligible for benefits that include participation in a retirement plan, life and disability insurance, health, dental and vision plans, flexible spending accounts, 15 paid vacation days, 2 paid personal days, 9 paid holidays, 40 hours of paid sick leave, parental leave, and employee stock purchase plan