Information Security & Compliance Support Analyst

Summary Overview

The IT Security Analyst role will assess information risk, track vulnerabilities, and facilitate remediation of vulnerabilities across Corporate IT.

Responsibilities

• Facilitates and manages risk remediation tasks, track risk mitigation
• Maintains risk register, prepares reports and documentation and reports on findings
• Develops recommendations for corrective action
• Performs vulnerability assessments utilizing IT security tools and methodologies
• Performs assessments of the IT security/risk posture within the IT network, systems, and software applications
• Identifies and implements IT security tools in support of recommended strategy
• Identifies opportunities to reduce risk and document remediation options regarding acceptance or mitigation of risk scenarios
• Facilitates and assists in IT audits, IT risk assessments and regulatory compliance activities
• Facilitates and assists in addressing questions from internal and external audits and examinations as requested by Compliance
• Recommends policies, procedures and standards that meet existing and newly developed policy and regulatory requirements
• Serves as project manager/lead for IT security projects working collaboratively with technical and business teams
• Promotes awareness of applicable regulatory standards, upstream risks, and industry best practices
• Conducts analysis of technical approaches to achieve compliance requirements and to improve processes
• Collaborates with the corporate Information Security and Compliance team to ensure IT alignment with corporate standards and policies

Qualifications

• Bachelor's Degree in Computer Science, Computer Engineering, Information Systems – security certifications will be considered in lieu of a degree
• At least 2 years IT security experience with a proven ability to engage with IT, business, and corporate compliance teams
• Experience in managing IT security controls in an organization
• Experience conducting IT compliance assessments
• Knowledge of technical infrastructure, networks, databases, and systems in relation to IT Security and IT Risk
• Project management skills
• Windows workstation and server administration experience
• Knowledge of data risk management frameworks and compliance practices
• Analytical thinking, strong analytical and assessment skills
• Ability to effectively coordinate collaborate and coordinate with technical and business teams
• Effective and creative technical problem-solving and troubleshooting skills
• Effective written and verbal communication skills, ability to prepare reports and documentation and deliver presentations to team leaders and coworkers

Desired/Preferred Qualifications

• Security+, GISF, SSCP or comparable certifications

Benefits

• 401(k) Plan (35% employer match per dollar up to 10% employee contribution)
• Medical Coverage (3 platforms: UnitedHealthcare, Reference Based Pricing includes member advocacy; and Kaiser)
• RX Home Delivery
• HSA with Employer Contribution
• In-vitro Fertility (treatment coverage)
• Dental
• Vision (2 plans: 12-month and 24-month frames allowance)
• FSA Plans (Healthcare, Dependent Care and Limited Purpose)
• Pre-tax Commuter Plans
• Employer-paid Life Insurance
• Employer-paid Short + Term Disability
• Long Term Disability (2 plans: Employer-paid or optional Self-paid)
• Paid Parental Leave (4 weeks at 100%)
• Employee Assistance Plan
• Voluntary Life Insurance for team member, spouse and child
• Voluntary Accidental Death for team member and spouse
• Legal/ID Theft Plans
• TeleHealth
• Wellness via Omada Health (healthy living solution)
• Travel Assistance
• Business Travel Accident Coverage
• Medical for foreign travel coverage
• Employer-paid Pet Telehealth
• Accident Insurance
• Critical Illness Insurance
• Hospital Indemnity Insurance
• Volunteer Time Off
• 10 Holidays
• Summer Sizzle
• On Demand Pay (Daily Pay)

Pay

$60,000 - $80,000

This response is AI-generated, for reference only.