Job Description

The Cyber Security Analyst (Policy & Risk) is part of the Corporate IT team and is responsible for understanding ITW’s risks and ensuring our mitigation policy and programs are operating effectively. He/she provides guidance on our policies and programs and keeps current on emerging trends and threats through ongoing education and active participation in peer groups.

This role will provide direct expertise to cyber policies surrounding our Corporate systems and may be asked to provide indirect guidance for our ITW manufacturing businesses. These businesses vary from smaller, local divisions with fewer locations to larger, complex global divisions, which requires flexibility in approach to align with the growth and profitability drivers of each business.

The ideal candidate will thrive in a decentralized culture where decisions are largely consensus-based, and strong execution is expected and valued.

SPECIFIC RESPONSIBILITIES:

• Coordinate and oversee third-party assessments and remediation of identified risks
• Assist in conducting security risk assessments and communicating associated gap reports
• Track remediation plans across the Enterprise
• Develop strong working relationships within the IT department to develop and implement controls aligned with ITW’s security policies.
• Engage in maintaining information security metrics and/or dashboard to present to various IT stakeholders
• Familiar with broad and global security standards and regulations such as SOX controls, GDPR, NIST 800-53 and NIST-CSF. Engage in risk assessments of our third parties as part of the Vendor Risk Management Program
• Develop ideas for improving our security posture
• Keep abreast of the latest security issues and technologies

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cyber Security, Business, or a closely related field is required.
• Minimum of 2 years experience in an IT role
• Experience in an information security role or network security administration role is a plus
• Proven record of building collaborative cross-functional relationships
• Good understanding of Information Security Risk Management, Gap Analysis and Remediation Programs
• Familiar with broad and global security standards and regulations such as SOX controls, GDPR, NIST 800-53 and NIST-CSF
• Willing to Travel: Less than 10%

PERSONAL ATTRIBUTES:

• Outstanding verbal, written, and interpersonal communication skills with the ability to interact and build trust across all levels of the organization
• Experience working in a team-oriented, collaborative environment
• Highly self-motivated and directed
• Familiar with developing, and maintaining policies, procedures, standards, and guidelines
• High level of personal integrity, as well as the ability to professionally handle confidential matters and show an appropriate level of judgment and maturity
• Highly organized and respectful of the need to plan amidst multiple priorities

Additional Information

Illinois Tool Works Inc. (“ITW” or “the Company”) is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, gender identity, sexual orientation, religion, national origin, age, disability, protected Veteran status or any other characteristic protected by applicable federal, state, or local laws.

If you are a qualified individual with a disability and are unable or limited in your ability to use or access the online application system process due to your disability, please email corp_accessibility@itw.com to request assistance. No other requests will be acknowledged.

_ITW is an equal opportunity employer. We value our colleagues’ unique perspectives, experiences and ideas and create workplaces where everyone can develop their careers and perform to their full potential. _

_As an equal employment opportunity employer, ITW is committed to equal employment opportunity and fair treatment for employees, beginning with the hiring process and continuing through all aspects of the employment relationship. _

_All qualified applicants will receive consideration for employment without regard to race, color, sex, gender identity, sexual orientation, religion, national origin, age, disability, protected Veteran status or any other characteristic protected by applicable federal, state, or local laws.  _