INFORMATION SECURITY & INNOVATION SPECIALIST

The Information Security & Innovation Specialist supports Johnstone Supply Grimme Group’s cybersecurity efforts and operational technology initiatives. This is a hands-on, execution-focused role responsible for following established procedures to help maintain the organization's digital security and assist in implementing technology-driven process improvements. Under direct supervision, the specialist performs recurring tasks such as system monitoring, running reports, managing tools for endpoint protection, and assisting with basic automation efforts. This role does not include independent decision-making or strategic planning, but instead focuses on supporting documented initiatives, responding to instructions, and escalating complex issues to senior team members. This position plays a key support role in cybersecurity operations and process efficiency, contributing to the team's ability to maintain secure and productive systems. The “Information Security & Innovation Specialist will join our mission to "Make the tech in the truck more efficient" and embrace our vision to "Enhance lives through solutions."

Core Values:

♥ Honesty – We keep our promises, are truthful, and instill confidence ♥ Excellence – We passionately deliver exceptional experiences ♥ Accountability – We are all accountable and strive for results ♥ Respect – We value others, care about people, and treat them respectfully ♥ Teamwork – We work together to provide solutions internally and externally

Core Competencies:

• Attention to Detail – Follows procedures and documentation closely to avoid errors
• Customer Support – Provides internal service and support to business users and team members
• Dependability – Completes assigned tasks consistently and accurately
• Collaboration – Works cooperatively with IT staff and cross-functional teams
• Adaptability – Adjusts work habits to meet changing tools or procedures

Position Responsibilities:

Information Security

• Follow checklists and procedures to monitor and log security events from SIEM and firewalls
• Assist in running phishing simulations and helping coordinate user awareness campaigns
• Update endpoint protection software and ensure antivirus definitions are current
• Support routine patch management by tracking patch status and applying updates as scheduled
• Document and escalate detected threats or anomalies to senior IT staff
• Help implement security policies by applying pre-approved access controls
• Participate in incident response drills and support investigations as directed

Information Innovation

• Deploy basic automation solutions using Microsoft Power Automate or other low-code platforms by following established guidelines and best practices.
• Support testing and troubleshooting of automated workflows to ensure accuracy, reliability, and optimal performance.
• Collect and analyze data for reports; create and update dashboards using predefined templates and tools.
• Document workflows and maintain change logs to ensure transparency and traceability of system updates.
• Assist in managing user access and identity systems under supervision, ensuring compliance with security protocols.
• Stay informed on emerging tools and technologies as directed by the team, contributing to continuous improvement initiatives.

Technical Skills

• Familiarity with endpoint protection tools (e.g., antivirus, firewall software)
• Basic understanding of security practices and common cyber threats
• Exposure to low-code tools such as Microsoft Power Automate or Copilot Studio
• Introductory scripting skills (e.g., PowerShell, Python) are a plus
• Comfort with Microsoft 365 and common business software