Information Security Specialist

Marmon Foodservice Technologies, Inc. As a part of the global industrial organization Marmon Holdings—which is backed by Berkshire Hathaway— you’ll be doing things that matter, leading at every level, and winning a better way. We’re committed to making a positive impact on the world, providing you with diverse learning and working opportunities, and fostering a culture where everyone’s empowered to be their best. Though you may not know us by name, you’ve most likely enjoyed meals and refreshments supported by our industry-leading brand portfolio. For decades, we’ve designed and manufactured foodservice equipment for some of the world’s biggest, most recognized consumer brands. We are driven to innovate with a clear purpose in mind: revolutionizing the future of foodservice. Guided by our commitment to Doing Things That Matter, Leading at Every Level, and Winning a Better Way, we focus on delivering meaningful impact for our customers, our communities, and each other. The Information Security Specialist supports the organization’s security program by helping operate, maintain, and mature security controls across infrastructure, cloud environments, identities, applications, and governance processes. This role works closely with global IT, security, and software engineering teams to ensure security requirements are consistently implemented, monitored, and improved. The ideal candidate has broad security exposure, strong operational discipline, and an interest in improving how security is embedded into day‑to‑day technology operations and new product development. Key Responsibilities Security Operations & Control Execution Support day‑to‑day execution of security controls across endpoints, servers, identities, applications, and cloud platforms Track adherence to security requirements and follow up on gaps with regional teams Maintain accurate records, evidence, and reporting related to security control coverage Ensure security tasks and remediation actions are progressing and documented Cloud & Infrastructure Security Support security operations within Azure and AWS environments, including visibility into workloads and configurations Assist with monitoring security tooling and baseline controls for cloud-hosted systems Help validate security requirements for new cloud resources and services Identify configuration or control gaps and escalate or coordinate remediation Vulnerability Management & Risk Handling Assist with vulnerability tracking, triage, and remediation coordination Help ensure systems that cannot meet security standards have documented and approved risk exceptions Maintain inventories of vulnerabilities, exceptions, and associated remediation or compensating controls Support periodic reviews to ensure risk records remain accurate and current Identity & Access Support Participate in access reviews, entitlement validations, and privilege attestations Track review outcomes and remediation activities Support documentation and evidence related to access management controls Promote least‑privilege and appropriate access practices through consistent execution Application & Product Security Collaboration Work with software engineers and product teams during design and implementation of new systems Assist with security reviews for applications, SaaS tools, and internal services Help validate security considerations such as authentication, authorization, data protection, and logging Support integration of security requirements into development and deployment workflows Security Tools, Automation & Process Improvement Assist in operationalizing security tools that are newly implemented or not yet fully adopted Help define and document workflows, procedures, and ownership for security technologies Identify opportunities to improve existing automations or reduce manual effort Contribute ideas and support efforts to modernize and scale security operations Security Program & Gap Identification Identify gaps, inefficiencies, or inconsistencies across security processes and controls Assist with developing practical, risk‑based plans to address identified gaps Track progress and support implementation of improvement initiatives Help establish metrics and reporting to measure control effectiveness Required Qualifications 3–6 years of experience in information security, IT operations, or risk-related roles Exposure across multiple security areas (security operations, access management, governance, or risk) Basic understanding of application security concepts and how software is built and deployed Strong organizational, documentation, and follow‑up skills Ability to work effectively with distributed teams across regions Preferred Qualifications Experience with endpoint security, vulnerability management, or SIEM tooling Familiarity with security frameworks or control-based programs (SOC 2, ISO, NIST, CIS) Experience working alongside software engineers or platform teams Exposure to security automation, scripting, or workflow tools Exposure and understanding of AI and LLM Curiosity and initiative to identify improvements beyond assigned tasks Core Competencies Operational Excellence: Executes security tasks consistently and accurately Collaboration: Works effectively with IT, engineering, and security stakeholders Risk Awareness: Understands tradeoffs and supports risk‑based decisions Problem Solving: Identifies gaps and contributes to practical solutions Continuous Improvement: Seeks ways to improve processes, tooling, and coverage What Success Looks Like Security requirements are consistently tracked and followed up across environments Cloud and application security needs are addressed early and clearly Vulnerabilities and exceptions are well‑maintained and audit‑ready Access reviews and security attestations are completed on time Security tools and processes contin