ISRP Analyst

Work You'll Do/Responsibilities

• Perform information security reviews of infrastructure products before they are rolled out into production and provide results of this review to the client's Information Security Officers and support them in the remediation of any findings.
• Partner with client engineering teams and third-party vendors to gather the information, evidence, and documentation required to complete security reviews.
• Evaluate product security and compliance through documentation review, architecture assessment, and hands-on testing where applicable.
• Document findings, security breaches, control gaps, and non-compliant items clearly and professionally.
• Analyze remediation options and risk mitigation approaches for identified issues and provide actionable recommendations.
• Support Information Security Officers in tracking, validating, and closing remediation items to completion.
• Embed quality control measures into review processes to support data integrity, consistency, and sustainability across a dynamic IT information security environment.
• Manage customer expectations, escalate issues appropriately and in a timely manner, and operate with general management supervision.
• Support internal and external audits related to the processes and procedures used in the security review function.
• Communicate regularly with Engagement Managers (Directors), project team members, and representatives from various functional and / or technical teams, including escalating any matters that require additional attention and consideration from engagement management.
• Independently and collaboratively lead client engagement workstreams focused on improvement, optimization, and transformation of processes including implementing leading practice workflows, addressing deficits in quality, and driving operational outcomes.

Qualifications

• 6+ years of experience in Information Technology or Information Security roles, with direct exposure to security review, risk assessment, or infrastructure security activities.
• 6+ years of experience applying a security mindset and attacker perspective to identify vulnerabilities, control gaps, and potential risk exposure.
• 5+ years of experience reading, interpreting, and writing technical documentation, including architecture diagrams, control evidence, and security review materials.
• 5+ years of experience learning new technologies and understanding system architecture across infrastructure, platforms, and security layers.
• 5+ years of experience working with cloud technologies and cloud-based infrastructure environments.
• 5+ years of experience across multiple technology domains, such as infrastructure, networks, operating systems, databases, middleware, or security tooling.
• 5+ years of experience in security testing, technical validation, or related assurance activities; hands-on testing experience preferred.
• 5+ years of experience in stakeholder management, customer relationship management, project coordination, and issue escalation with strong communication, analytical, and interpersonal skills.
• Bachelor's degree, preferably in Computer Science, Information Technology, Computer Engineering, or related IT discipline; or equivalent experience.