Security Administrator, Senior

Responsibilities:

Create access reports on a scheduled basis, collate, review and manage the retention of all access control lists, authentication and authorization related documentation.  Provide technical support for remote users, encryption key management and vulnerability scan administration, including identification and transfer of priority items to Compliance for remediation management.  Provide information security administration for corporate operating systems, databases and applications as well as respond to requests from business units to resolve access problems and accurately process user access requests, while adhering to corporate Information Security Standards, departmental procedures and Service Level Agreements.  Work with UNIX, SQL, OS400, UDB, and Mainframe Systems Administrators and management to ensure appropriate access is granted for ID and report requests.  Participate in the preparation and distribution of a Security Identity and Access Management Solution adding requirements and documentation into discovery, design and support.  Perform monthly and quarterly audits on critical systems to determine access is appropriate and complies with PCI, SOX, and Company guidelines.  Performs File Level Permission reviews and Segregation of Duties, Restricted Access and Conflicting Function testing.  Build, review and maintain SOP's, policies, procedures and user request forms ensuring accuracy.  Assist in the resolution of security related issues as appropriate to the individual level of technical experience.  Perform additional responsibilities as assigned.

Requirements:

A minimum of 4 years experience with an Information Systems organization with a focus on Security or Desktop Administration, or Customer Service with exposure to network, data, database or application security is required.  Direct experience with information security at the enterprise level is essential.  Good comprehension of Identity and Access Management (IAM) solutions and hands-on active directory account administration (i.e.: user and group maintenance) is mandatory.  Knowledge and experience with: single sign on; Centralized Identity Management, Extranet Access Management, Active Directory solutions and Remote Access, Data Leakage Prevention and Network Access Control.  Must have knowledge of regulatory access requirements.  Must possess proven skills in gathering documenting business and functional security roles and access requirements.  Experience with network, infrastructure, applications including web interfacing, file and device encryption and Endpoint Security is critical.

About BJ's:

BJ's is a dynamic, team-oriented company based in Natick, MA.  BJ's introduced the warehouse club concept to New England in 1984 and has since expanded to become a leading warehouse club operator in the eastern United States.  BJ's is traded on the New York Stock Exchange under the symbol 'BJ.'  BJ's is ranked 291 on Fortune Magazine's 2008 listing of the 500 largest U.S. public corporations.  If you are enthusiastic, results-oriented and eager to build a rewarding career with a company that recognizes outstanding performance, we want to hear from you!

At BJ's, we value diversity in our organization and we are an equal employment opportunity employer.