Cybersecurity Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee documentation, request processing, training, and designated projects.

• Assist in the development, implementation, monitoring, and upkeep of security policies, procedures, standards, and guidelines.

• Maintain and document security testing, report findings, and aid in remediation efforts.

• Investigate emerging risks, threats, vulnerabilities, capabilities, and potential solutions.

• Support enterprise cybersecurity incident management and response, which includes monitoring, investigation, follow-up, and root-cause analysis.

• Assess security alerts from internal systems, vendors, and industry sources.

• Facilitate user access reviews and monitor identity and access management.

• Develop, interpret, and oversee IT general controls documentation in collaboration with IT control owners.

• Collaborate with third-party managed security service providers for system testing and monitoring.

• Review threat intelligence and recommend enhancements to security posture.

• Assist internal and external auditors and address audit recommendations.

• Monitor and analyze security events across both on-premises and cloud environments.

• Identify system vulnerabilities and implement risk mitigation strategies.

• Safeguard PCI data and cloud infrastructure.

• Provide support to end users for security-related tickets.

⛳️ Requirements

• Associate’s Degree.

• 2 to 5 years of relevant work experience upon hire.

• Proven knowledge of Microsoft Azure, Microsoft Defender, and Office 365 security controls.

• Familiarity with legal and regulatory requirements such as the Gramm-Leach-Bliley Act, Guidelines for Safeguarding Member Information, and PCI/Data Security Standard.

• Understanding of NIST and ISO industry frameworks.

• Ability to assess IT controls, including PCI DSS, security, and privacy policies and standards.

• Demonstrable knowledge of cybersecurity risks and applicable techniques and tools.

• Strong analytical skills with the ability to connect requirements to relevant security controls.

• Experience in conducting vulnerability testing.

• Capability to plan and implement ongoing testing and monitoring programs.

• Knowledge of IT operational infrastructure, including business continuity practices.

• Ability to manage confidential information and handle detailed workloads.

• Proficiency to work intuitively and independently; audit, analyze, and organize tasks and projects.

• Skill in interacting with personnel at all levels across business units and organizations.

• Ability to understand complex business initiatives.

• Working knowledge of security event management, vulnerability assessment, and intrusion detection monitoring tools, including cloud services.

• Capability to meet specified physical and environmental working conditions.

• Ability to lift objects up to 15 pounds and perform prolonged sitting or standing, as well as repetitive hand/finger motions, typing, verbal communication, hearing, document review, and standard visual tasks.

🏝️ Benefits

• A bonus and/or long-term incentive units may be included as part of the compensation package.

• Medical, financial, and/or additional benefits.

• Fully remote work arrangement.