Meaningful Work From Day One:

The IT Security Team is responsible for the implementation and administration of information security policies, practices, procedures, and technologies in order to ensure the protection of access, applications, data, networks, platforms, systems, and users. This position will partner with both business and IT personnel to implement security solutions consistent with the Engineering and Architecture strategy.

What You Will Do in This Role:

• Utilizes basic understanding of IT Security functions and processes

• Demonstrates basic knowledge of IT security frameworks like NIST, ISO/IEC 27001 & 27002

• Utilizes basic knowledge of IT security regulations like GDPR, FISMA, PCI, SOX

• Utilizes basic knowledge of Industrial IoT networks and security standards

• Identify security design gaps in existing and proposed architectures and escalate as needed

• Identify and escalate risks associated with business processes, operations, information security programs and technology projects

• Identify and communicate current and emerging security threats

• Assist in design of security architecture elements to mitigate threats as they emerge

• Assist in the design, build and implementation of enterprise-class security systems for a production environment

• Recommend and assist in creating or improving processes/solutions that balance business requirements with information and cyber security requirements

• Stay current on security trends by tracking and understanding emerging security practices and standards

• Be an IT Security advocate for security awareness/training, security controls, security processes and most importantly IT Security perception

• Develop relationships with cross-functional teams and begin to develop mutual respect and trust. As the relationship becomes more mature, begin to test your ability to influence a security mindset without applying too much pressure

• Basic application of Governance and Risk Management security practices

• New tasks, assignments, and projects require limited instructions (Basic Project Management understanding)

• Provide 2nd level support and triage on security related issues

• IT Security Components (Basic Knowledge):

• Application

• Cloud

• Data

• IoT

• Endpoint

• Network

• Operations

• Vulnerability Management

We Are Looking For People Who:

• Bachelor’s or Master's degree within a related area of study. Work experience accepted in lieu of education

• Minimum of 5 years of experience in IT Security or infrastructure

What Makes You Unique:

• Certifications in security related areas preferred (e.g., CompTIA Security+, CEH, CISA, MCSA, etc.)

Locations across the US for a remote work from home set-up

This position is posted with multiple locations, you only need to apply to one of the postings to be considered for all locations and/or the remote work option.

B-F can employ a remote worker in the majority of the states in the US, however if you are located in one of the following states, relocation would be required. VT, RI ,CT ,NJ ,DE ,WI ,MN, ND, SD, NE, KS, OK, LA, MS, NM, AZ, UT, OR, AK, HI

#LI-remote

*Please note that for candidates located in the Louisville, KY area, the Brown-Forman default work style is office hybrid, not fully remote.

Brown-Forman Corporation is committed to equality of opportunity in all aspects of employment. It is the policy of Brown-Forman Corporation to provide full and equal employment opportunities to all employees and potential employees without regard to race, color, religion, national or ethnic origin, veteran status, age, gender, gender identity or expression, sexual orientation, genetic information, physical or mental disability or any other legally protected status.

Business Area: Global Information Technology

City: Louisville

State: Kentucky

Country: USA

Req ID: JR-00006838