Senior Associate - Information Security Analyst
About I-CAR:
The Inter-Industry Conference on Auto Collision Repair (I-CAR) is a growing, not-for-profit organization, headquartered in Hoffman Estates, Illinois, serving the automotive collision repair industry globally. The organization was established by representatives of the collision repair, automotive, and insurance industries in 1979 and has doubled its revenue over the last six years.
Today, the I-CAR brand is stronger than it has been in 40 years of operation and has gained a worldwide reputation. There is momentum and excitement among its committed workforce, instructors and volunteers to continue to help the organization grow and expand its breadth of reach and scale. I-CAR leadership believes that the future of the organization will be importantly influenced by its continuing innovation and relevance of its products, technical programs and services.
Position Summary: The Senior Associate, Information Security Analysis is a hands-on cybersecurity professional who will play a key role in I-CARās newly formed IT Security team. This role is instrumental in strengthening and maturing the organizationās overall security posture. As part of a growing and highly visible team, the Senior Associate will help design, implement, and support security capabilities that protect I-CARās systems, data, and users. The position works closely with IT and business partners to identify threats, manage vulnerabilities, respond to security incidents, and drive continuous improvement across our security landscape on cybersecurity professional who will play a key role on ICARās newly formed IT Security team. This role is instrumental in strengthening and maturing the organizationās overall security posture. As part of a growing and highly visible team, the Senior Associate will help design, implement, and support security capabilities that protect ICARās systems, data, and users. The position works closely with IT and business partners to identify I-CARās systems, data, and users. The position works closely with IT and business partners to identify I-CARās systems, data, and users. The position works closely with IT and business partners to identify threats, manage vulnerabilities, respond to security incidents, and drive continuous improvement across our security landscape.
Essential Job Functions:
Incident Response & Threat Monitoring
ā¢ Monitor security platforms and logs to identify potential incidents; validate severity, scope, and impact.
ā¢ Investigate, analyze, and escalate incidents; coordinate response actions with cross-functional teams and document outcomes.
ā¢ Contribute to incident response playbooks and post-incident lessons learned.
Vulnerability & Risk Management
ā¢ Partner with infrastructure/application teams to identify, prioritize, and remediate vulnerabilities; track remediation of SLAs and risk exceptions.
ā¢ Provide actionable guidance on compensating controls when immediate remediation is not feasible.
Identity & Access Controls
ā¢ Perform access validation for onboarding/offboarding and ongoing access reviews; identify stale access, discrepancies, and automation failures and drive fixes.
Third-party & Cloud Security
ā¢ Support security evaluation of third-party vendors and cloud providers, including evidence of review and compliance alignment.
Security Awareness Program
ā¢ Operate and improve security awareness initiatives; analyze results and recommend improvements.
Compliance, Evidence, & Reporting
ā¢ Lead evidence gathering and control validation activities; report key security metrics and risks to leadership with clear narratives and recommendations.
Secure Operations Partnership
ā¢ Collaborate with IT Operations to implement and maintain secure configurations, reduce exposure, and ensure security policies are consistently applied.
Required Skills/Abilities/Competencies:
ā¢ 3-5 years of experience in security operations, IT infrastructure, incident response, or related field required.
ā¢ Hands-on experience with security tooling such as SIEM, IDS/IPS, endpoint protection, and cloud security capabilities (AWS, Azure, GCP).
ā¢ Ability to communicate clearly with technical and non-technical stakeholders.
Travel Requirement:
ā¢ Annually for onsite IT department meeting
ā¢ ~4 times per year for key onsite meetings
Education and Experience:
ā¢ Bachelorās degree in Computer Science, Information Security, or related field (or equivalent experience).
ā¢ Certifications (preferred): Security+, CEH, GSEC, or similar
EEO Statement:
I-CAR is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, protected veteran status, or any other characteristic protected under federal, state or local law, where applicable. Those with criminal histories will be considered in a manner consistent with applicable state and local laws.
Apply Now
Apply Now
The Inter-Industry Conference on Auto Collision Repair (I-CAR) is a growing, not-for-profit organization, headquartered in Hoffman Estates, Illinois, serving the automotive collision repair industry globally. The organization was established by representatives of the collision repair, automotive, and insurance industries in 1979 and has doubled its revenue over the last six years.
Today, the I-CAR brand is stronger than it has been in 40 years of operation and has gained a worldwide reputation. There is momentum and excitement among its committed workforce, instructors and volunteers to continue to help the organization grow and expand its breadth of reach and scale. I-CAR leadership believes that the future of the organization will be importantly influenced by its continuing innovation and relevance of its products, technical programs and services.
Position Summary: The Senior Associate, Information Security Analysis is a hands-on cybersecurity professional who will play a key role in I-CARās newly formed IT Security team. This role is instrumental in strengthening and maturing the organizationās overall security posture. As part of a growing and highly visible team, the Senior Associate will help design, implement, and support security capabilities that protect I-CARās systems, data, and users. The position works closely with IT and business partners to identify threats, manage vulnerabilities, respond to security incidents, and drive continuous improvement across our security landscape on cybersecurity professional who will play a key role on ICARās newly formed IT Security team. This role is instrumental in strengthening and maturing the organizationās overall security posture. As part of a growing and highly visible team, the Senior Associate will help design, implement, and support security capabilities that protect ICARās systems, data, and users. The position works closely with IT and business partners to identify I-CARās systems, data, and users. The position works closely with IT and business partners to identify I-CARās systems, data, and users. The position works closely with IT and business partners to identify threats, manage vulnerabilities, respond to security incidents, and drive continuous improvement across our security landscape.
Essential Job Functions:
Incident Response & Threat Monitoring
ā¢ Monitor security platforms and logs to identify potential incidents; validate severity, scope, and impact.
ā¢ Investigate, analyze, and escalate incidents; coordinate response actions with cross-functional teams and document outcomes.
ā¢ Contribute to incident response playbooks and post-incident lessons learned.
Vulnerability & Risk Management
ā¢ Partner with infrastructure/application teams to identify, prioritize, and remediate vulnerabilities; track remediation of SLAs and risk exceptions.
ā¢ Provide actionable guidance on compensating controls when immediate remediation is not feasible.
Identity & Access Controls
ā¢ Perform access validation for onboarding/offboarding and ongoing access reviews; identify stale access, discrepancies, and automation failures and drive fixes.
Third-party & Cloud Security
ā¢ Support security evaluation of third-party vendors and cloud providers, including evidence of review and compliance alignment.
Security Awareness Program
ā¢ Operate and improve security awareness initiatives; analyze results and recommend improvements.
Compliance, Evidence, & Reporting
ā¢ Lead evidence gathering and control validation activities; report key security metrics and risks to leadership with clear narratives and recommendations.
Secure Operations Partnership
ā¢ Collaborate with IT Operations to implement and maintain secure configurations, reduce exposure, and ensure security policies are consistently applied.
Required Skills/Abilities/Competencies:
ā¢ 3-5 years of experience in security operations, IT infrastructure, incident response, or related field required.
ā¢ Hands-on experience with security tooling such as SIEM, IDS/IPS, endpoint protection, and cloud security capabilities (AWS, Azure, GCP).
ā¢ Ability to communicate clearly with technical and non-technical stakeholders.
Travel Requirement:
ā¢ Annually for onsite IT department meeting
ā¢ ~4 times per year for key onsite meetings
Education and Experience:
ā¢ Bachelorās degree in Computer Science, Information Security, or related field (or equivalent experience).
ā¢ Certifications (preferred): Security+, CEH, GSEC, or similar
EEO Statement:
I-CAR is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, protected veteran status, or any other characteristic protected under federal, state or local law, where applicable. Those with criminal histories will be considered in a manner consistent with applicable state and local laws.
Apply Now
Apply Now