Contact Reggie Arjungi at ArjungiR@corning.com

corning.com/careers

In this role, the individual will have experience performing assessments of both hardware and software vendors/ manufacturers, for commercial off the shelf and cloud-based solutions. The ideal candidate will have a broad technical background that compliments their ability to effectively identify during the assessment process any deficiencies in physical, technical or administrative controls and provide technical expertise and guidance to drive risk reduction and mitigation efforts while identifying gaps, threats, vulnerabilities and other information security risks to Corning’s global community.

LOCATION

COMPENSATION

BENEFITS

CULTURE

Highly competitive

Industry leading with long term incentives

Highly collaborative

REQUIRED

• At least 3-5 years hands-on work experience in information security.
• Experience in cloud service provider security assessments and evaluations or implementing cloud services.
• Experience collaborating with service providers to ensure deliverables meet expectations  

EDUCATION

Bachelor's degree in Computer Science, IT, Cyber Security or related field, or demonstrates equivalent industry experience.

Contact:

Robyn Miller @ MillerRA@corning.com

• Conduct software assessments of COTS and XaaS services to ensure compliance with Company requirements.
• Review development, testing and implementation of appropriate security plans, products and control techniques.
• Ability to produce architecture artifacts, not limited to solution designs, that combine and integrate multiple technologies, from conceptual models to applied architecture.
• Continuous process improvement: look for ways to gain efficiencies through automation and process restructuring.
• Partner with business units, operations, technology, risk management and other stakeholders to understand the business environment, evolving business priorities, and obtain key data and information.

PREFERRED

• Information security due-diligence reviews of Third-Party Suppliers/ Vendors 
• Computer networking concepts, protocols, network security methodologies.
• Risk management processes (e.g., methods for assessing and mitigating risk).
• Knowledge of cybersecurity and privacy principles used to manage risks related to the use, processing, storage and transmission of information or data (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Familiarity of NIST CSF, NIST 800 series, PCI-DSS, ISO 27001, COBIT, ITIL, SOC reports
• Strong understanding of cloud technologies.
  
• Certifications: CISSP, CISA, CISM, CRISC, or relevant certifications preferred

Domestic & international travel may be required, up to 10%