Sr. Lead Cybersecurity Analyst, Cybersecurity

About This Role

Serving as a trusted advisor to other teams by applying cybersecurity expertise across multiple domains, this role is part of a small family of cybersecurity advisors who aid their colleagues across the company to become more aware of cybersecurity best practices in each user's role and projects while coordinating response to emergent system vulnerabilities. You will exercise initiative and influence while working independently with product, engineering, architecture, privacy, legal, and business teams, advising on cybersecurity requirements for complex systems and initiatives, especially those involving mobile applications, cloud-hosted workloads, APIs, sensitive data, third-party integrations, and modern software delivery practices. The role will also contribute to the continuous improvement of cybersecurity standards, secure development expectations, assessment methods, governance practices, and architecture patterns that help protect Chick-fil-A digital resources and information.

Responsibilities

• Know and independently apply broad comprehensive knowledge of cybersecurity best practices to the completion of highly complex assignments
• Own and manage responsibility for information systems security management as the primary cybersecurity consultant to one or more major DTT sub-departments
• Learn, advise, and collaborate on the security issues of that team’s technical projects, working independently on complex projects with support and mentoring by the team leader as needed
• Provide cybersecurity guidance for mobile application security, secure authentication and authorization, API integrations, secure architectures, data protection, and vulnerability management
• Advise department leadership on cybersecurity posture, develop and execute plans to ensure timely risk mitigation, oversee and coordinate security assessments and penetration testing engagements for the organization
• Provide guidance on data protection concepts such as data classification, sensitive data handling, data minimization, encryption, tokenization, retention, disposal, and privacy-aware system design
• Partner with product teams to ensure secure software development and engineering practices, including CI/CD security, code review, vulnerability scanning, secrets management, and remediation tracking
• Leverage experience to interpret cybersecurity policies, standards, frameworks, and risk findings into practical implementation guidance for product and engineering teams
• Possess a strong ability to cross-reference business and operational requirements against cybersecurity, privacy, architecture, and engineering best practices
• Evaluate technical designs, architecture diagrams, data flows, integration patterns, and operational processes to identify cybersecurity and privacy risks
• Partner with senior cybersecurity team members to coordinate and advise on iterative improvements in security posture to remediate identified security vulnerabilities