Information Security Analyst - Remote

Role Summary

The Security Analyst is responsible for specific aspects of the security program including regulatory reporting, metrics/KPIs, training and awareness, security process integration and risk management for our clients. Protects computer assets by establishing and enforcing system access controls; maintaining disaster preparedness.

Requirements

• Document, maintain and analyze compliance with IT controls, standard procedures, and policies
• Demonstrate excellent customer service skills, build credibility and rapport with client technical teams
• Aid in periodic information risk assessments and audits to ensure that information systems are adequately protected to meet security objectives
• Aid in collecting security-related evidence for external audits
• Provide technical expertise during IT security incident response
• Support IT security inquiries from customers
• Aid in the review of vendor IT security programs and controls
• Aid in tracking and maintenance of action plans for the resolution of issues identified during assessments and audits
• Ensure authorized access by investigating improper access; revoking access; reporting violations; monitoring information requests by new programming; recommending improvements
• Establish physical security by developing standards, policies and procedures
• Advise on risk levels and security posture through a risk management framework
• Identify business processes requiring information security integration
• Support the design and execution of security exercises

Qualifications

• An analytical mindset to be able to make sound recommendations on Operational Risk issues
• Technical knowledge of IT security theory, technologies, policies, and practices
• Demonstrated ability to effectively negotiate or mediate issues
• Strong written communication and documentation, and analytical reporting skills
• Working knowledge of GRC platforms
• Experience with information protection, security, risk, and compliance-related matters
• IT audit experience in gathering artifacts
• Persuasive communication skills necessary to collect essential information & answer questions
• Planning and organizational skills necessary to coordinate workload around complex, multiple assignments
• Proven ability in information security principles, latest industry awareness, and current knowledge
• Knowledge of NIST (800-53, CSF) and other information security frameworks
• Knowledge of information security processes and tools
• Able to manage multiple priorities and work well under pressure
• Knowledge of data privacy regulations is a plus

Pay

Salary commensurate with years' of experience, technical expertise and geographic location
Salary range: $95,000 to $130,000

Benefits

• Performance bonuses
• Benefits package that includes 100% paid medical, dental and vision for the employee
• 401(k) with employer match
• Strong company culture
• Flexible PTO policy
• Flexible working arrangements
• Annual company overnight retreat