Information Security Analyst

Required Qualifications

• 7+ years of experience in information security, technology risk, cyber resiliency, or infrastructure risk management
• Demonstrated experience performing system‑level or application‑level assessments in complex enterprise environments
• Strong understanding of critical infrastructure concepts, including dependencies, control planes, and recovery considerations
• Experience working within enterprise governance processes and systems of record (ServiceNow or similar)
• Ability to document and communicate complex technical and risk concepts clearly to executive stakeholders
• Comfortable operating in ambiguous, evolving programs with changing priorities

Preferred Qualifications

• Experience with cyber resiliency, operational resilience, or lifecycle management programs
• Familiarity with NIST, CRI, and other high‑level security or resiliency frameworks
• Experience supporting large‑scale assessments, benchmarking efforts, or maturity‑leveling initiatives
• Strong facilitation skills for structured working sessions and cross‑functional reviews
• Background in regulated or highly resilient environments (e.g., financial services)

Skills: risk, information security, infrastructure, security, cyber, resiliency