Security Analyst II

#WeAreONEOK

–

Fortune 500 company. 100+ years in business. Leading midstream service provider. Safety first. Sustainable operations. Environmentally responsible. Employee focused. Job Summary

ONEOK is seeking a Security Analyst focused on Security Compliance. The ideal candidate will ensure the organization's information systems comply with legal and company policies, preventing security breaches and maintaining data integrity. The analyst will implement and monitor security measures, develop procedures, supports internal and external audits, analyze audit results, coordinate remediation efforts, monitor SEC filings, and support ONEOK’s cybersecurity and physical security compliance programs. This includes compliance with relevant security standards, regulations, and internal policies.

Support services provided by the Security Compliance team include audit and inspection support, compliance tracking and communications, control framework development and maintenance, critical facility assessment, legal holds and forensic collections, security governance document management, and SOX compliance. Additionally, the analyst educates colleagues on security compliance.

Job Profile Summary

Responsible for consistent execution and application of security functions within the overall information strategy, management system processes, programs, communications, and activities within the organization. Relies on established procedures and playbooks to perform structured work assignments and leverages own general knowledge to navigate proper course of action when the situation at hand appears to deviate significantly from expected situations.

Essential Functions And Responsibilities

- Consistently executes and operates functions within the information security framework to help maintain confidentiality, integrity, availability, and safety of assets by protecting against unauthorized use, disclosure, modification, or loss. Relies on established procedures and playbooks to perform structured work assignments and leverages own general knowledge to navigate proper course of action when the situation at hand appears to deviate significantly from expected situations

- Performs configuration and light scripting/programming of security systems to implement, automate, and operate security processes. Relies primarily on detailed specifications and instructions in performing configuration and programming and leverages own knowledge to navigate proper course of action when situation at hand appears to deviate from or conflict with those instructions

- Operates and executes processes to control risk through existing playbooks, guidance, policies, and procedures to minimize exposure in accordance with applicable laws and regulations. Relies on established procedures and playbooks to perform structured work assignments and leverages own general knowledge to navigate proper course of action when the situation at hand appears to deviate significantly from expected situations

- Operates and executes processes to identify risks to the security of assets and facilities. Relies on established procedures and playbooks to perform structured work assignments and leverages own general knowledge to navigate proper course of action when the situation at hand appears to deviate significantly from expected situations

- Collaborate with appropriate personnel to refine and improve processes to validate and monitor compliance with internal security policies and applicable laws and regulations

- Responsible for consistent execution of tasks in support of risk assessment programs. Relies on established procedures and playbooks to perform structured work assignments and leverages own general knowledge to navigate proper course of action when the situation at hand appears to deviate significantly from expected situations

- Respond to security incidents in accordance with guidance from security leadership, playbooks, and processes. Relies on established procedures and playbooks to perform structured work assignments and leverages own general knowledge to navigate proper course of action when the situation at hand appears to deviate significantly from expected situations. Promptly reports and appropriately escalates security incidents based on existing guidance and processes

- Responsible for consistent execution of tasks in support of identity and access management programs. Relies on established procedures and playbooks to perform structured work assignments and leverages own general knowledge to navigate proper course of action when the situation at hand appears to deviate significantly from expected situations

- Assists as directed by security leadership in the production and development of security awareness, training, and educational activities

- Assists as directed by security leadership in developing, applying, and monitoring the secure configuration of devices in the environment

Education

- Bachelor's Degree in information technology, accounting, other related field, or an equivalent combination of formal education and the following job related experience

Work Experience

- Experience in security or experience in a directly-foundational role providing necessary background to learn security functions

- Experience operating within a defined framework of procedures and playbooks

- Experience interacting, advising, and communicating effectively

Knowledge, Skills And Abilities

- Knowledge of: IT infrastructure environments, local and wide-area networks and application security needs

- Ability to: manage small to medium information security projects

- Ability to: develop consensus and facilitate decision-making among senior executives

- Ability to: communicate and/or exchange information; conduct oral presentations

Licenses and Certifications

- Certified Secure Software Lifecycle Professional (CSSLP) preferred

- Certified Information Privacy Professional (CIPP) preferred

Strength Factor Rating - Physical Demands/Requirements

- Sedentary Work - Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull, or otherwise move objects, including the human body. Sedentary work involves sitting most of the time, but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met.

Strength Factor Description - Physical Demands/Requirements

- Standing: Remaining on one's feet in an upright position at a work station without moving about (Occasionally)

- Walking: Moving about on foot (Frequently)

- Sitting: Remaining in a seated position (Constantly)

- Lifting: Raising or lowering an object from one level to another (includes upward pulling) (Occasionally)

- Carrying: Transporting an object, usually holding it in the hands or arms, or on the shoulder (Occasionally)

- Pushing: Exerting force upon an object so that the object moves away from the force (Occasionally)

- Pulling: Exerting force upon an object so that the object moves toward the force (includes jerking) (Occasionally)

- Climbing: Ladders, Stairs (Occasionally)

- Balancing: Maintaining body equilibrium to prevent falling (Occasionally)

- Stooping: Bending the body downward and forward by bending the spine at the waist (Occasionally)

- Kneeling: Bending the legs at the knees to come to rest on the knee or knees (Occasionally)

- Crouching: Bending the body downward and forward by bending the legs and spine (Occasionally)

- Crawling: Moving about on the hands and arms in any direction (Occasionally)

- Reaching: Extending hands and arms in any direction (Constantly)

- Handling: Seizing, holding, grasping, turning or otherwise working with the hand or hands (Manual Dexterity) (Constantly)

- Fingering: Picking, pinching or otherwise working with the fingers primarily (Finger Dexterity) (Constantly)

- Feeling: Perceiving such attributes of objects/materials as size, shape, temperature, texture, movement or pulsation by receptors in the skin, particularly those of the finger tips (Constantly)

- Talking: Expressing or exchanging ideas/information by means of the spoken word (Frequently)

- Hearing: Perceiving the nature of sound by the ear (Frequently)

- Tasting/Smelling: (Occasionally)

- Near Vision: Clarity of vision at 20 inches or less (Constantly)

- Far Vision: Clarity of vision at 20 feet for more (Frequently)

- Depth Perception: Three-dimensional vision; ability to judge distances and spatial relationships so as to see objects where and as they actually are (Frequently)

- Vision: Color - The ability to identify and distinguish colors (Constantly)

Working Conditions/Environment

- Employee is subject to inside environmental conditions

Working Conditions

- Well lighted, climate controlled areas (Constantly)

- Frequent repetitive motion (Constantly)

- CRT (Computer Monitor(s)) (Constantly)

Travel

- None required,

Driving

- Based on assigned tasks, employee may be assigned a company vehicle requiring the applicable driver's license

ONEOK is an equal opportunity employer committed to diversity and inclusion. All qualified applicants will receive consideration for employment without regard to race, color, sex, pregnancy, sexual orientation, age, religion, creed, national origin, gender identity, disability, military/veteran status, genetic information or any other categories protected by applicable law.

The job description is not intended to be a complete list of all responsibilities, duties or skills required for the job and is subject to review and change at any time, with or without notice, in accordance with the needs of ONEOK. ONEOK is committed to making our workplace accessible to individuals with disabilities and will provide reasonable accommodations, upon request, for individuals to participate in the application and hiring process. To request an accommodation email HRSolutions@ONEOK.com or call 1-855-663-6547 . Expected Salary Range

$81,000.00 - $121,000.00