IT Security Analyst II - ACF2

Job description

Come to work and be ready to think on your feet, grow your skills, and embrace the many opportunities. Our Distribution Centers are the key to getting new products out to TJ Maxx, Marshalls, HomeGoods, Sierra, Winners, Homesense, and TK Maxx. To keep up with our ever-changing inventory, we stay nimble and adaptable. No day is the same, and that’s just how we like it. Every shift is a new opportunity to Discover Different—and support each other along the way.

Posting Notes: Marlborough  || MA  

 

TJX is looking for an experienced ACF2 Security Analyst to become a contributor on our IAM team.  As a member of the team you will use your expertise and experience to assess risk, identify potential gaps in access and security, design and implement security controls for ACF2 to keep data and access in the mainframe secure.

This position will assist in implementing security controls to ensure the confidentiality, integrity and availability of TJX’s IT assets. This position will be responsible for the administration of ACF2 mainframe services and lifecycle governance processes around ACF2 user authentication and resource access.

Specific responsibilities include:

·  Design and Implement industry-aligned security controls to TJX IAM platforms which balance the complex, global demands of TJX business users with the objectives of securing assets appropriately within the mainframe.
·  Mentor more junior members of the team and extend your technical skills and knowledge through training, workshops and conference attendance
·  In partnership with Architecture and IAM Team peers, help design the roadmap for ACF2 security and contribute to other IAM initiatives including the security of AD, Azure AD, OIDCS and Centrify
·  Work within an Agile team to design and deliver enterprise solutions
·  Create and update technical documentation including design documents, use cases and runbooks
·  Serve as a technical expert for second and third level support groups
·  Collaborate and communicate with Security Architecture, Security Consulting, Enterprise Infrastructure and other internal departments and vendor partners to deliver solutions
·  Support Audit & Compliance reporting on users, access and transaction logs
·  Provide problem solving expertise and assist in troubleshooting of security related issues to restore services in a timely manner to include ACF2 or other mainframe technologies, IAM systems and authentication, authorization and encryption technologies, solutions and best practices
·  Act as a member of the Identity and Access Management team in providing timely and efficient support to assigned operations
·  Follow and apply configuration and security standards and policies within a defined Change Management process
·  Ensure that system improvements and changes follow the corporate change management procedures and are implemented correctly and completely, and monitor all effects of the modifications
·  Design security solutions to support a variety of standard and custom hardware and software to meet TJX business needs
·  Establish/recommend policies and standards for system access and controls
·  Provide after hours and on-call level 2/3 support as part of a rotation

 

Minimum Qualifications:

·  A minimum of 5 years in the administration and support of ACF2 Security.
·  Knowledgeable with z/OS, CICS and IMS as it relates to security access and controls. 
·  Demonstrated expertise in designing and supporting an ACF2 security model for mainframe which keeps data assets secure while allowing complex ecosystems of applications to function on the mainframe.
·  Familiarity with encryption tools and certificates, such as Megacryption & PGP Public/Private Keys
·  Experience in controlling access to resources ESP, ChangeMan (CHMAN) and other ISV software.
·  Passionate cyber security professional, eager to learn and build upon existing skills into new technologies or applications of technologies
·  Bachelor’s degree in Cyber Security, Information Technology or related field or equivalent experience

Additional/Preferred Qualifications

·  High level of perseverance, energy and confidence to act an ACF2 security Subject Matter Expert (SME)
·  Familiarity with ACF2 role-based access governance
·  Certifications: CISSP, CISSM
·  Advanced Degree in Cyber Security, Information Technology or related field
·  Experience with SIEM tools and their integration to mainframe, such as Splunk, LogRhythm or QRadar
·  Experience with Privileged Access Governance tools and concepts, such as CyberArk, Thycotic, BeyondTrust or Centrify

Come Discover Different at TJX—we think you’ll find that it’s so much more than a job. We move a lot of inventory—at all times of the day—and that takes working, learning, and growing together. When you’re a part of our TJX family, you have the full support of a diverse, close-knit team in our Distribution Centers.

As you think about where to work, know that we take care of our people. We offer competitive pay and great benefits. We consider all applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, gender identity and expression, marital or military status. We also provide reasonable accommodations to qualified individuals with disabilities in accordance with the Americans with Disabilities Act and applicable state and local law.

 Posting Notes: Marlborough  || MA

Nearest Major Market: Boston
Job Segment: Corporate Security, Consulting, Mainframe, Compliance, Security, Technology, Legal