Information Technology Security Engineer

Position Summary:

The Information Technology Security Engineer strengthens Goodwill-Easter Seals Minnesota's ability to protect the data, systems, and people who power the GESMM mission. This role blends technical expertise with governance and policy development to ensure organizational security practices are effective, compliant, and continuously improving. Working closely with IT leadership, cross-organizational partners, and vendors, the Specialist will lead the organization to ensure GESMN security programs stay up to date, enhance organizational readiness for cybersecurity frameworks, and ensure continued compliance with PCI and HIPAA requirements.

Day in the life: In a typical day, the Information Technology Security Engineer can expect to...

• Auditing and Governance: Leads auditing and governance efforts to ensure compliance, strengthen security policies, and support continuous improvement across Goodwill-Easter Seals Minnesota's information security program.
• Incident Response and Risk Management: Oversees incident response and risk assessments to support threat mitigation, vendor coordination, and business continuity planning.
• Security Awareness and Training: Promotes a culture of security through training programs, phishing simulations, and employee engagement initiatives.
• Technical Configuration and Oversight: Manages security configurations and vulnerability remediation to align IT initiatives with risk management and data protection standards.

Job Pay & Perks:

• Pay range: $95,735-$134,285 yearly
• This is a flexible-hybrid role whose essential functions allow the employee to primarily work from a personal home office but also require the employee to work at a physical GESMN or partner facility as business needs require, sometimes with great urgency and little notice.
  
• Goodwill-Easter Seals Minnesota (GESMN) prioritizes work-life balance. We offer competitive pay, flexible hours, generous paid time off (PTO) program, competitive medical, dental and vision plans, employer-paid life insurance, 401(k) plan with employer match, and an employee discount!

About You:

Required Knowledge & Skills:

• Strong understanding of cybersecurity principles, frameworks, and controls (e.g., CIS, NIST, ISO 27001).
• Working knowledge of Microsoft 365 Security, Azure Information Protection, Fortinet, and endpoint protection platforms (EDR/XDR).
• Familiarity with compliance requirements for PCI DSS, HIPAA, and other relevant data protection regulations.
• Ability to translate technical risk into clear, actionable guidance for both technical and non-technical stakeholders.
• Experience with vulnerability management processes, incident documentation, and security audit practices.
• Strong analytical and problem-solving skills with attention to accuracy and detail.
• Effective written and verbal communication skills, including concise report writing and presentation.
• Ability to work collaboratively across departments and with external vendors in a complex, mission-driven environment.
• Commitment to ethical data stewardship and the protection of organizational and client information.

Prior Experience & Education:

• Minimum of 5 years of professional experience in information security, with a blend of technical and governance responsibilities required.
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field preferred.
• Experience supporting or leading compliance efforts aligned with PCI, HIPAA, or similar standards preferred.
• Prior experience in nonprofit or multi-site enterprise environments is a plus.
• Relevant industry certifications (e.g., CompTIA Security+, CISSP, CISM, Microsoft Security) preferred.

About Us:

Goodwill-Easter Seals Minnesota is a 501(c)3 nonprofit that has been creating career possibilities together with partners since 1919. Many people know Goodwill stores, but don't know store proceeds support nearly 20 programs for job seekers to access resources and find careers that lead to advancement. Read more about us here.

Goodwill-Easter Seals Minnesota (GESMN) is an Equal Opportunity Employer. GESMN will not discriminate against any employee or applicant based upon a person's race, color, creed, religion, national origin, sex, marital status, disability, status with regard to public assistance, age, sexual or affectional orientation, gender identity, familial status, ancestry, local human rights commission activity, citizenship, genetic information, protected veteran or military status, or any other categories protected by law.