Information Security Analyst

Required Qualifications

• 7+ years of experience in information security, technology risk, cyber resiliency, or infrastructure risk management
• Demonstrated experience performing system-level or application-level assessments in complex enterprise environments
• Strong understanding of critical infrastructure concepts, including dependencies, control planes, and recovery considerations
• Experience working within enterprise governance processes and systems of record (ServiceNow or similar)
• Ability to document and communicate complex technical and risk concepts clearly to executive stakeholders
• Comfortable operating in ambiguous, evolving programs with changing priorities

Preferred Qualifications

• Experience with cyber resiliency, operational resilience, or lifecycle management programs
• Familiarity with NIST, CRI, and other high-level security or resiliency frameworks
• Experience supporting large-scale assessments, benchmarking efforts, or maturity-leveling initiatives
• Strong facilitation skills for structured working sessions and cross-functional reviews
• Background in regulated or highly resilient environments (e.g., financial services)

Skills

• Risk
• Information security
• Infrastructure
• Security
• Cyber
• Resiliency