Analyst, Information Security (Disaster Recovery)

About the role

This role leads the implementation and ongoing delivery of information security tools and processes, creating, executing, and improving them with limited direct guidance. It involves solving complex problems, optimizing processes, and often taking a lead role in implementing new services and technologies. The position requires a strong understanding of most tools and processes supported by the team, including key integration points with other parts of technology. The role works mostly independently and provides coaching to junior associates.

Depending on focus area, responsibilities include:

• Identity & Access Management (IAM): Delivering timely, accurate, and controlled system access for the global workforce, including creating and maintaining processes, tools, controls, and governance mechanisms such as roles, reports, metrics, and issue resolution.
• Security Architecture: Evaluating and enhancing robust security solutions and frameworks, developing and maintaining comprehensive security architectures aligned with industry standards and best practices.
• Security Threat & Vulnerability: Executing processes focused on vulnerability identification or remediation, including oversight of vulnerability assessments and remediation programs for internal and external stakeholders.
• Security Governance, Risk, and Compliance (GRC): Completing activities that drive awareness and adherence to information security policies and standards.

Responsibilities

• Support the planning, coordination, execution, and evaluation of Disaster Recovery (DR) exercises across applications, infrastructure, platforms, and critical technology services, including documenting results, identifying recovery gaps, and tracking remediation activities.
• Partner with application, infrastructure, platform, and operations teams to develop and maintain actionable recovery plans and runbooks that document recovery procedures, dependencies, recovery requirements, roles, and validation criteria.
• Support resilience assurance and validation activities by evaluating demonstrated recovery capabilities against established recovery objectives, resiliency standards, and documented business and technology requirements.
• Build and maintain technology dependency intelligence across applications, infrastructure, platforms, data, and third-party services to improve understanding of upstream and downstream relationships that may affect recovery.
• Support the development and adoption of automation for dependency discovery and mapping, recovery planning, testing, evidence collection, measurement, and reporting to improve the scale and efficiency of the DR program.
• Analyze incidents, operational events, recovery exercises, and other sources of reliability intelligence to identify resilience gaps, recurring failure patterns, and opportunities for targeted recovery validation or remediation.
• Collect, analyze, and report recovery and resilience metrics, including recovery exercise performance, demonstrated recovery times, identified gaps, remediation progress, and other indicators of technology recovery readiness.
• Partner with technology teams to validate that recovery strategies and documented capabilities remain aligned with changes to application architecture, infrastructure, dependencies, and operational environments.
• Support continuous improvement of DR and IT Operational Resilience processes, procedures, tooling, testing methodologies, and recovery standards based on exercise results, operational events, technology changes, and lessons learned.
• Develop working knowledge across applications, infrastructure, cloud, networking, platforms, and other technology domains to understand how interconnected technology services support critical business capabilities and influence end-to-end recoverability.

Requirements

• Bachelor’s degree in computer science, computer information systems (CIS), engineering, business administration, cybersecurity, or related field, or equivalent years of experience in lieu of education.
• Experience supporting technology operations, production environments, incident management, reliability engineering, application support, infrastructure operations, or related technology functions.
• Experience working across application, infrastructure, platform, cloud, networking, or other technology teams to understand system dependencies and operational requirements.
• Experience using data, metrics, tooling, or automation to support technology operations, testing, reporting, dependency analysis, or continuous improvement activities.
• 2 years of experience in an IT domain (infrastructure, information security, other technology operations or management).

Qualifications

• Experience coordinating or participating in technology recovery exercises, operational testing, incident response, problem management, or other technology readiness and validation activities.
• Experience analyzing technology incidents, operational issues, or test results to identify gaps, document findings, and support corrective or remediation activities.
• Experience developing or maintaining technical documentation such as recovery plans, operational procedures, runbooks, dependency maps, test plans, or similar technology artifacts.
• IT experience in the retail industry.
• Experience conducting information security risk assessments of vendors and vendor software (specific to Security Governance, Risk & Compliance role).
• CISSP Certified Information Systems Security Professional.

About Lowe’s

Lowe’s Companies, Inc. (NYSE: LOW) is a FORTUNE® 100 home improvement company with total fiscal 2025 sales of more than $86 billion. Lowe’s employs approximately 300,000 associates and operates over 1,750 home improvement stores, 540 branches, and 120 distribution centers. Based in Mooresville, N.C., Lowe’s supports the communities it serves through programs focused on creating safe, affordable housing, improving community spaces, helping to develop the next generation of skilled trade experts, and providing disaster relief to communities in need.

Pay

Pay Range: $75,300.00 - $143,100.00 annually. Starting rate of pay may vary based on factors including, but not limited to, position offered, location, education, training, and/or experience.

Benefits

For information regarding our benefit programs and eligibility, please visit https://talent.lowes.com/us/en/benefits.