Security Analyst II (60130)

About the Role

The Security Analyst II will support the risk management, audits, and compliance programs at AAA Northeast. They will lead initiatives carried by the team of Security Analysts, aligning with standards like NIST, PCI-DSS, and the AAA Cyber Security Quality Standard, including vulnerability and threat intelligence management.

Responsibilities

• Manage compliance with various IT standards and regulations by:
  • Tracking compliance with standards
  • Identifying gaps between current controls and requirements, and tracking actions to address them
  • Providing guidance to security engineers and business lines to implement necessary controls
  • Organizing and assisting external auditors with assessments of AAA Northeast’s compliance or security posture
  • Providing dashboards and status updates for management
• Oversee the vulnerability management process by:
  • Managing and assessing the efficiency of the vulnerability management process (including patch management)
  • Collaborating with other teams to implement relevant remediations
  • Assessing efficiency and providing dashboards and status updates for management
• Participate in risk management operations by:
  • Completing third-party vendor due diligence documentation
  • Providing security analysis of risks and threats during projects, and recommending controls to meet security expectations
  • Developing regular and automated controls to ensure the security baseline is met and services do not deviate
  • Recommending specific areas to focus on for audits
• Serve as a key reference for internal partners on security and compliance by:
  • Partnering with IT and business line management to ensure security testing is conducted cooperatively and efficiently
  • Collecting business line needs and specific risks to incorporate into the risk management program

Qualifications

Education

• Associate’s degree in Computer Science, Business Analytics, or a related field (Bachelor’s preferred)

Certifications

• CompTIA Security+, CISSP, or other security certifications are a plus
• CompTIA Security+ certification required within the first year of employment

Experience

• 3+ years of related IT experience, with preference for information security or risk management

Skills

• Ability to travel domestically
• Ability to work occasional off-hours and participate in a 24x7 on-call rotation
• Knowledgeable in vulnerability management and assessment technologies (e.g., vulnerability scanners)
• Ability to assess information security risks and threats, and develop control recommendations
• Strong analytical skills and ability to communicate complex issues clearly
• Knowledge of technology auditing control disciplines, including security and technical specialization (e.g., application development, change management, or operations)
• Effective written and verbal communication skills, with professionalism and clarity
• Ability to work independently, set project goals, and achieve milestones with minimal direction
• Collaborative mindset, working across teams to drive common goals within standardized processes

Benefits

• Career Growth: Ongoing world-class training and proven career paths to develop expertise and advance within AAA Northeast
• Health Coverage: Medical coverage with employer contributions covering up to 93% of the premium cost, plus dental and vision options
• Retirement: 6% company match on 401(k) contributions, fully vested and made every pay period
• Paid Time Off: 3 weeks’ vacation, 12 holidays, 8 sick days, and 48 hours of volunteer time annually
• Additional Perks:
  • Free AAA membership
  • Insurance discounts
  • Travel commission refund
  • Up to $625 in Wellness Incentives
  • Up to $6,000 in tuition reimbursement
• Compensation: Competitive base pay, annual bonus opportunities, and additional monthly/quarterly incentive compensation for certain roles

AAA Northeast values collaboration, transparency, and trust, with a "cameras on" approach during virtual meetings to foster engagement and accountability. The organization is committed to diversity, equity, and inclusion, welcoming employees to bring their whole selves to work.