Analyst, Information Security (Disaster Recovery)

Innovate in Charlotte Thank you for dedicating your time and talent to Lowe’s.  We want to give you more opportunities to learn and grow, so if you find a position you’re interested in below, we encourage you to apply! The primary purpose of this role is to lead the implementation and ongoing delivery of information security tools and processes. This includes responsibility for creating, executing, and improving processes and procedures with limited direct guidance from more senior level security associates. This role solves complex problems while creating and optimizing processes and often takes a lead role in implementing new services and technologies. This role requires a strong understanding of most tools and processes supported by the team, including many of the key integration points with other parts of technology, works mostly independently, and provides coaching and direction to more junior level associates. When focused on Identity & Access Management (IAM), this role delivers timely, accurate, and controlled system access for the company's global workforce. This includes creating and maintaining processes, tools, controls, and governance mechanisms such as roles, reports, metrics, and issue resolution services. When focused on Security Architecture, this role is dedicated to the evaluation and enhancement of robust security solutions and frameworks. This includes developing and maintaining comprehensive security architectures, ensuring alignment with industry standards and best practices.  When focused on Security Threat & Vulnerability, this role executes processes focused on vulnerability identification or remediation. This includes information security and risk activities such as oversight of vulnerability assessments and remediation programs serving both internal and external stakeholders. When focused on Security Governance, Risk, and Compliance (GRC), this role completes activities that help drive awareness and adherence to information security policies and standards.

Support the planning, coordination, execution, and evaluation of Disaster Recovery (DR) exercises across applications, infrastructure, platforms, and critical technology services, including documenting results, identifying recovery gaps, and tracking remediation activities. Partner with application, infrastructure, platform, and operations teams to develop and maintain actionable recovery plans and runbooks that document recovery procedures, dependencies, recovery requirements, roles, and validation criteria. Support resilience assurance and validation activities by evaluating demonstrated recovery capabilities against established recovery objectives, resiliency standards, and documented business and technology requirements. Build and maintain technology dependency intelligence across applications, infrastructure, platforms, data, and third-party services to improve understanding of upstream and downstream relationships that may affect recovery. Support the development and adoption of automation for dependency discovery and mapping, recovery planning, testing, evidence collection, measurement, and reporting to improve the scale and efficiency of the DR program. Analyze incidents, operational events, recovery exercises, and other sources of reliability intelligence to identify resilience gaps, recurring failure patterns, and opportunities for targeted recovery validation or remediation. Collect, analyze, and report recovery and resilience metrics, including recovery exercise performance, demonstrated recovery times, identified gaps, remediation progress, and other indicators of technology recovery readiness. Partner with technology teams to validate that recovery strategies and documented capabilities remain aligned with changes to application architecture, infrastructure, dependencies, and operational environments. Support continuous improvement of DR and IT Operational Resilience processes, procedures, tooling, testing