Information Security Analyst

This is a fully remote position, open to applicants in Alabama, +27 more states.

📋 Description

• Ensure the security and integrity of all Revecore data.

• Evaluate existing security protocols and assess their effectiveness.

• Recommend and implement enhancements to reduce risk.

• Establish security measures for systems within the Revecore environment.

• Collaborate with various teams across the organization on security issues.

• Safeguard Revecore assets and electronic data.

• Partner with the Compliance Officer, Privacy Officer, Security Officer, and CIO to achieve security and privacy objectives.

• Develop, seek approval for, and execute information security initiatives.

• Conduct information security audits and document the findings.

• Ensure audits adhere to the schedule, review outcomes, and escalate any issues or exceptions.

• Deliver IT security and risk training programs for employees.

• Assist in responding to client information security questionnaires and submitting them to the Compliance Committee.

• Engage in client discussions regarding information security.

• Investigate, evaluate, document, and address security breaches and cybersecurity incidents.

• Collaborate with Systems Administrators to pinpoint internal and external vulnerabilities.

• Address identified vulnerabilities.

• Promote and enforce company-wide IT security best practices.

• Research security advancements and propose improvements to management.

• Implement and sustain a robust SIEM architecture.

• Stay updated on IT trends and security standards.

• Act as project manager or lead for IT security initiatives.

• Work closely with the Systems Administration team on departmental projects, goals, and objectives.

• Report directly to the Director of Enterprise Technology Services.

⛳️ Requirements

• Bachelor’s degree in computer science, cybersecurity, or a related field.

• Industry certifications are advantageous, including CISSP, CISM, CISA, GIAC, Certified in Risk and Information Systems Control, and Certified Ethical Hacker.

• Familiarity with Microsoft 365 Security, encompassing Microsoft IAM, Microsoft threat protection, Microsoft Information Protection, and Microsoft 365 security and risk management.

• Understanding of IDS/IPS systems, SIEM tools, and network scanners.

• Knowledge of access control methodologies (RBAC).

• Proficiency in identity and access management.

• Experience in penetration testing of applications and infrastructure.

• Understanding of social engineering techniques.

• Knowledge of vulnerability and risk assessment processes.

• Experience conducting security assessments of network infrastructure, virtual infrastructure, and applications.

• Familiarity with information forensics.

• Strong troubleshooting skills.

• Knowledge of DLP, antivirus, and anti-malware solutions.

• Understanding of TCP/IP, computer networking, routing, and switching.

• Familiarity with cloud computing technologies.

• Experience with Windows, UNIX, and Linux operating systems.

• Exceptional report writing and communication skills.

• Ability to work effectively both independently and as part of a team.

• Willingness to travel as needed.

• Capable of meeting deadlines and managing budgets.

• Quiet, distraction-free home work environment.

• Secure internet connection.

• Home internet speeds exceeding 20 Mbps download and 10 Mbps upload.

• Workspace that accommodates workstation equipment and related materials.

• Must reside in the United States in one of the designated eligible states.

• Eligibility to work in the United States.

• Successful completion of a background check.

🏝️ Benefits

• Remote work arrangement.

• Work-from-home setup requirements provided.

• Affirmative Action/Equal Opportunity Employer.

• Interview recording/transcription consent options.