Information Security Specialist

As a part of the global industrial organization Marmon Holdingswhich is backed by Berkshire Hathawayyoull be doing things that matter leading at every level and winning a better way. Were committed to making a positive impact on the world providing you with diverse learning and working opportunities and fostering a culture where everyones empowered to be their best.

Though you may not know us by name youve most likely enjoyed meals and refreshments supported by our industry-leading brand portfolio. For decades weve designed and manufactured foodservice equipment for some of the worlds biggest most recognized consumer brands.

We are driven to innovate with a clear purpose in mind: revolutionizing the future of foodservice. Guided by our commitment to Doing Things That Matter Leading at Every Level and Winning a Better Way we focus on delivering meaningful impact for our customers our communities and each other.

The Information Security Specialist supports the organizations security program by helping operate maintain and mature security controls across infrastructure cloud environments identities applications and governance processes. This role works closely with global IT security and software engineering teams to ensure security requirements are consistently implemented monitored and improved.

The ideal candidate has broad security exposure strong operational discipline and an interest in improving how security is embedded into daytoday technology operations and new product development.

Key Responsibilities

Security Operations & Control Execution

• Support daytoday execution of security controls across endpoints servers identities applications and cloud platforms

• Track adherence to security requirements and follow up on gaps with regional teams

• Maintain accurate records evidence and reporting related to security control coverage

• Ensure security tasks and remediation actions are progressing and documented

Cloud & Infrastructure Security

• Support security operations within Azure and AWS environments including visibility into workloads and configurations

• Assist with monitoring security tooling and baseline controls for cloud-hosted systems

• Help validate security requirements for new cloud resources and services

• Identify configuration or control gaps and escalate or coordinate remediation

Vulnerability Management & Risk Handling

• Assist with vulnerability tracking triage and remediation coordination

• Help ensure systems that cannot meet security standards have documented and approved risk exceptions

• Maintain inventories of vulnerabilities exceptions and associated remediation or compensating controls

• Support periodic reviews to ensure risk records remain accurate and current

Identity & Access Support

• Participate in access reviews entitlement validations and privilege attestations

• Track review outcomes and remediation activities

• Support documentation and evidence related to access management controls

• Promote leastprivilege and appropriate access practices through consistent execution

Application & Product Security Collaboration

• Work with software engineers and product teams during design and implementation of new systems

• Assist with security reviews for applications SaaS tools and internal services

• Help validate security considerations such as authentication authorization data protection and logging

• Support integration of security requirements into development and deployment workflows

Security Tools Automation & Process Improvement

• Assist in operationalizing security tools that are newly implemented or not yet fully adopted

• Help define and document workflows procedures and ownership for security technologies

• Identify opportunities to improve existing automations or reduce manual effort

• Contribute ideas and support efforts to modernize and scale security operations

Security Program & Gap Identification

• Identify gaps inefficiencies or inconsistencies across security processes and controls

• Assist with developing practical riskbased plans to address identified gaps

• Track progress and support implementation of improvement initiatives

• Help establish metrics and reporting to measure control effectiveness

Required Qualifications

• 36 years of experience in information security IT operations or risk-related roles

• Exposure across multiple security areas (security operations access management governance or risk)

• Basic understanding of application security concepts and how software is built and deployed

• Strong organizational documentation and followup skills

• Ability to work effectively with distributed teams across regions

Preferred Qualifications

• Experience with endpoint security vulnerability management or SIEM tooling

• Familiarity with security frameworks or control-based programs (SOC 2 ISO NIST CIS)

• Experience working alongside software engineers or platform teams

• Exposure to security automation scripting or workflow tools

• Exposure and understanding of AI and LLM

• Curiosity and initiative to identify improvements beyond assigned tasks

Core Competencies

• Operational Excellence: Executes security tasks consistently and accurately

• Collaboration: Works effectively with IT engineering and security stakeholders

• Risk Awareness: Understands tradeoffs and supports riskbased decisions

• Problem Solving: Identifies gaps and contributes to practical solutions

• Continuous Improvement: Seeks ways to improve processes tooling and coverage

What Success Looks Like

• Security requirements are consistently tracked and followed up across environments

• Cloud and application security needs are addressed early and clearly

• Vulnerabilities and exceptions are wellmaintained and auditready

• Access reviews and security attestations are completed on time

• Security tools and processes continue to mature and scale

Benefits

We support your well-being with comprehensive and easy-to-use benefits that youll be eligible to enroll in on your first day of employment. Here are some of the highlights:

• Medical Dental Vision and Prescription Drug insurance plans

• Access to a Health Advocate who is an expert in Marmons health plan and can help you select the best health benefits for you and your family

• Tax advantaged spending accounts for health and dependent care expenses

• Wellness programs and resources including Telehealth Mental Health Fitness and Family Planning

• Generous paid time off for personal use holidays and parental leave

• Company-sponsored life insurance

• 401(k) with fully vested company match; Marmon may also make an additional annual discretionary contribution to your account whether or not you contribute on your own

• Financial and retirement advising

About Marmon Holdings

Marmon Holdings Inc. a Berkshire Hathaway company comprises 11 groups and more than 100 autonomous businesses with total annual revenue of $10 billion. Marmons 28000-plus team members are celebrating the companys 70th anniversary in 2023 and helping write the next chapter of Marmons story.

Pay Range:

We offer a comprehensive benefits package that may include medical dental vision 401k matching and more!

Following receipt of a conditional offer of employment candidates will be required to complete additional job-related screening processes as permitted or required by applicable law.

We are an equal opportunity employer and all applicants will be considered for employment without attention to their membership in any protected class. If you require any reasonable accommodation to complete your application or any part of the recruiting process please email your request to and please be sure to include the title and the location of the position for which you are applying.