"Alerted.org

Job Description:

Job Summary:

+ Proven experience **building or significantly maturing** an Information Security Risk program from scratch.

+ Deep knowledge of **risk analysis and management methodologies** , including frameworks such as **NIST RMF** , **ISO 27005** , or **FAIR** .

+ Hands-on experience conducting **quantitative risk analysis** , including **Monte Carlo simulations** to model risk scenarios and outcomes.

+ Demonstrated ability to conduct and facilitate **risk assessments** , threat modeling, and risk treatment planning.

+ Strong understanding of how to assess and manage risk across technologies ( **cloud & on-prem environments, third parties, applications, and infrastructure)** .

Strategic & Operational Capability

+ Ability to **design, implement, and scale** risk management processes, tools, and reporting specifically for Information Security.

+ Comfortable establishing and tracking **Key Risk Indicators (KRIs)** .

+ Experience developing and maintaining an enterprise **risk register** and risk dashboards tailored to information security needs.

Leadership & Communication

+ Strong executive presence; can clearly communicate risk implications to **senior leadership and executive stakeholders** .

+ Skilled in translating **technical risk** into **business impact** .

+ Experience preparing and presenting **risk analysis summaries** and reports for senior leadership, and risk committees.

+ Self-starter who thrives in **ambiguous, fast-paced environments** and can operate with **minimal oversight** .

Job Responsibilities:

+ Assesses and evaluates systems to identify weaknesses and assess risk; performs vulnerabilitytesting.

+ Implements new or upgraded security measures or controls, and documents system or processchanges.

+ Reviews security violation reports or logs, investigates possible security exceptions and coordinateswith internal teams or external agencies as needed, including managed service providers.

+ Develops and executes security controls, defenses and countermeasures to intercept and preventinternal or external attacks or attempts to infiltrate company email, data, e-commerce and web-basedsystems. May advise on security controls for projects.

+ May advise on penetration testing and vulnerability assessments of applications, operating systemsand/or networks. May conduct complex cleanup of legacy environments

+ Researches and evaluates cybersecurity threats and performs root cause analysis.

+ Assists in the creation and implementation of security solutions, which may include conductingvendor assessments to ensure vendor is complying with security contract language and WBAsecurity requirements.

+ May conduct contract reviews for appropriate security language prior to a project/WBA signing

+ May conduct remediation management or governance and/or escalations on vendors or operationsissues requiring a solution

+ May perform as “Level 3” support in the event Managed Service provider is unable to resolve anissue.

+ May review projects to ensure alignment with Security Requirements and/or represent info securityon projects, when necessary. May conduct oversight of a particular area of Managed Service, when necessary

+ Provides information to management as required, including Producing and delivering variousdashboard, metrics and other reports, as required

About Walgreens and WBA

Walgreens (www.walgreens.com) is included in the U.S. Retail Pharmacy and U.S. Healthcare segments of Walgreens Boots Alliance, Inc. (Nasdaq: WBA), an integrated healthcare, pharmacy and retail leader with a 170-year heritage of caring for communities. WBA’s purpose is to create more joyful lives through better health. Operating nearly 9,000 retail locations across America, Puerto Rico and the U.S. Virgin Islands, Walgreens is proud to be a neighborhood health destination serving nearly 10 million customers each day. Walgreens pharmacists play a critical role in the U.S. healthcare system by providing a wide range of pharmacy and healthcare services, including those that drive equitable access to care for the nation’s medically underserved populations. To best meet the needs of customers and patients, Walgreens offers a true omnichannel experience, with fully integrated physical and digital platforms supported by the latest technology to deliver high-quality products and services in communities nationwide.

The actual salary an employee can expect to receive, plus bonus pursuant to the terms of any bonus plan if applicable, will depend on experience, seniority, geographic location, and other factors permitted by law. To review benefits, please visit jobs.walgreens.com/benefits.

"An Equal Opportunity Employer, including disability/veterans".

**Job ID:** 1511259BR

**Title:** Senior Technology Analyst I

**Company Indicator:** Walgreens

Employment Type:

**Job Function:** Information Technology

**Full Store Address:** 104 WILMOT RD,DEERFIELD,IL 60015

**Full District Office Address:** 104 WILMOT RD,DEERFIELD,IL,60015-05121-01104-2

External Basic Qualifications:

+ Bachelor's degree and at least 2 years of experience in IT Security OR High School/ GED and at least 4 years of experience in IT Security

+ Experience working in Security Engineering, Threat Response, Security Operations, IT Operations, ITCompliance and/or IT Governance

+ Willing to travel up to/at least 10% of thetime for business purposes (within state and outof state).

Preferred Qualifications:

+ Experience with **risk quantification tools and platforms** , especially those supporting **Monte Carlo simulation modeling** .

+ Familiarity with security risk tooling, threat intelligence integration, and **data visualization/reporting platforms** (e.g., Power BI, Tableau).

+ Bachelor's degree in IT, IS, Mathematics

+ CISSP or CISA Certification

We will consider employment of qualified applicants with arrest and conviction records.

Shift:

Store: