Information Security Architect provides guidance, leads, and performs a broad range of complex technical and professional activities to identify, investigate, analyze, and remediate information security risks. This position advises on best practices, effectiveness of security controls, risk management and control gaps, process improvements and solutions through the security governance process. Monitors IT security controls and service continuity to protect enterprise and information assets. This Position collaborates with stakeholders to develop secure business solutions. This position also provides training for colleagues, oversees work, allocates resources and maintains knowledge on emerging technologies and emerging IT security landscape.

- Responsible for identifying various IT risks regarding general computing control environment. Perform High complexity testing of the IT control environment regarding: networks, operating systems, databases, computer operations, data security administration, application security, data center physical security, etc.- Developed audit program and/or audit test steps for IT security controls to ensure control areas provide comprehensive coverage. Also conduct audit related interviews with auditees to familiarize with IT environment and to know existing security controls in place.

The Sr. Information Security Analyst implements and integrates risk management procedures across the enterprise. Responsibilities:- Gathers information for, and develops customer information security assurance questionnaires to assess risk and determine current and future security requirements.- Contributes to the development of the information security requirements of vendor and customer contracts to ensure UPS's information assets are protected, and all terms follow UPS standards and compliance obligations.- Implements information security-related statute requirements to ensure domestic and international compliance.- Enforces information security concepts to enable implementation and to ensure compliance and alignment with information Services (I.S.) strategy.- Communicates and advises on security policies, procedures, practices, and training on the holding, use, and disclosure of UPSs business data to ensure compliance, continuity, and protection of information assets.- Communicates and promotes corporate information security policies, standards, and guidelines to ensure effective enterprise security control requirements. - Investigates security issues and escalates as appropriate to increase customer information assurance, stakeholder confidence, and risk aversion.- Identifies industry best practices, standards, methods, tools, and applications to optimize UPS's business risk management