1 day ago
Aliso Viejo, CA, USASenior
Base Salary
$121k - $202k/yr
Responsibilities
- Assess cybersecurity risks, vulnerabilities, security gaps, and threats across technology systems, applications, networks, infrastructure, devices, and information assets.
- Evaluate and improve security controls, configurations, and technical solutions in partnership with technology, infrastructure, application, cloud, development, and business teams.
- Support vulnerability management, security testing, penetration testing, findings analysis, risk prioritization, and coordinated remediation.
- Lead assigned security assessments and compliance-readiness activities, including control-gap analysis, remediation coordination, documentation, and evidence gathering.
- Support security investigations and continuous improvement by analyzing incidents and technical findings, recommending corrective actions, and communicating risks and best practices.
- Assess Microsoft Azure resources and configurations and coordinate security activities for Grainger Frictionless environments.
- Apply ISO 27001, SOC 2, CMMC, PCI DSS, or similar framework requirements to security controls and assessment activities.
Requirements
- At least 7 years of cybersecurity or related IT/cloud security experience, including security improvements and compliance or audit readiness under a recognized framework.
- Bachelor’s degree in a technology-related field or equivalent relevant experience; strong candidates without a degree may be considered.
- Advanced degree in technology or engineering is preferred.
- In-depth knowledge of cybersecurity principles, security controls, risk assessment, vulnerability management, security testing, remediation, and security investigations.
- Ability to evaluate security configurations, technical vulnerabilities, assessment findings, and control gaps and recommend safeguards.
- Knowledge of security policies, standards, recognized compliance frameworks, and assessment documentation.
- Ability to exercise independent judgment, communicate technical findings to technical and nontechnical stakeholders, and collaborate across teams.
- Working knowledge of Microsoft Azure security controls and cloud configurations.
- Knowledge of employee endpoints, field devices, office networks, firewalls, and connected technology environments.
- Ability to interpret vulnerability-scanning and penetration-testing findings and coordinate remediation.
- Customer-facing software, vulnerability scanning, or penetration testing experience is preferred.
Benefits
- Medical, dental, vision, and life insurance begin on day one, with six free licensed-therapist sessions annually.
- Full-time employees receive 18 paid time-off days annually and six company holidays.
- Grainger contributes 6% to a 401(k) plan each pay period without requiring employee contributions.
- Benefits include employee discounts, tuition reimbursement, student loan refinancing, and financial counseling and education tools.
- Maternity support, nursing benefits, and paid parental leave are provided.
- The position is onsite at the Aliso Viejo, California office.
About Grainger
W.W. Grainger is a public B2B distributor of maintenance, repair, and operations (MRO) supplies, safety gear, and facility products for businesses. It sells through a high-touch distribution network and its Endless Assortment e-commerce brands Zoro and MonotaRO, alongside services like inventory management and technical support. Founded in 1927 and headquartered in Lake Forest, Illinois, Grainger serves more than 4.5 million customers and reported $17.2 billion in 2024 revenue.