Senior Security and Compliance Analyst
Insurify · Cambridge, MA · 5 mo ago
HybridLegal$110k–$115k/yrFull-time
About the role
This role is a Senior Security and Compliance Analyst at Insurify, a fast-growing MIT FinTech startup. The ideal candidate will play a crucial part in designing and enforcing security controls to protect systems, data, and infrastructure while ensuring alignment with regulatory and industry standards.
Responsibilities
- Align security practices with external regulations, internal policies, and security frameworks (e.g., NIST CSF, PCI).
- Conduct risk assessments and threat/vulnerability analyses across systems and networks.
- Recommend, implement, and validate security controls and best practices to reduce risk.
- Continuously monitor systems for threats and validate the effectiveness of implemented controls.
- Develop, maintain, and socialize security policies, standards, and procedures.
- Develop incident response planning and manage post-incident reviews.
- Maintain the security and compliance automation platform.
- Monitor evolving threats, regulations, and industry trends to continually enhance the security program.
- Present findings and recommendations to technical and executive stakeholders.
Requirements
- Associate's or bachelor's degree in computer science or a related field.
- 3+ years of relevant experience.
- Expertise with enterprise IT, cloud infrastructure, common threats, and core security tools.
- Working knowledge of frameworks such as NIST CSF and PCI for risk and capability mapping.
- Understanding of data privacy laws and industry-specific regulations.
- Clear, concise communication of complex technical risk to both technical and executive audiences.
Qualifications
- Experience with security tools and technologies.
- Knowledge of security frameworks and standards.
- Ability to communicate effectively with technical and non-technical stakeholders.
Skills
- Enterprise IT and cloud infrastructure expertise.
- Threat and vulnerability analysis.
- Security policy development and maintenance.
- Incident response planning and management.
- Continuous monitoring and threat detection.
- Communication and presentation skills.
Benefits
- Competitive compensation
- Generous stock options
- Health, Dental Coverages
- 401K plan with match
- Unlimited PTO
- Generous company holiday calendar
- Learning & Development Stipends
- Paid Family Leave
- Social impact volunteer time
- Catered lunches in the office
Pay
The base compensation range for this role is $110,000 - $115,000 per year in the United States.
Schedule
This is a hybrid position that requires candidates to be able to come into the Insurify office in Cambridge, MA.