Lead Information Security Analyst

This is a fully remote position, open to applicants in California, +20 more states.

📋 Description

• Oversee IT governance, risk evaluation, and security compliance initiatives.

• Assist in enterprise risk management and ensure adherence to SOC 2, NIST Cybersecurity Framework, and additional regulations and frameworks.

• Facilitate the review, creation, implementation, and documentation of ISMS policies, processes, procedures, and practices.

• Lead and direct GRC activities, encompassing compliance monitoring, audit management, and risk evaluation.

• Prepare for and oversee compliance audits, assessments, and regulatory evaluations.

• Maintain security documentation, evidence, and audit records.

• Develop, sustain, and enforce information security policies and procedures.

• Perform vendor risk management security evaluations, onboarding, and reviews.

• Collaborate with cross-functional teams to embed security and compliance into business operations.

• Mentor and assist Information Security Analysts.

• Monitor security posture, identify threats, and suggest remediation actions.

• Conduct vulnerability assessments, penetration testing, and security evaluations.

• Engage in incident response and carry out post-incident analysis.

• Stay informed about security trends, vulnerabilities, and evolving compliance requirements.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related discipline.

• 5-10+ years of experience in audit, compliance, or technical roles.

• Strong understanding of IT security control trends along with auditing and compliance best practices.

• Exceptional written and verbal communication skills to clearly convey complex IT controls and compliance matters.

• Relevant training and/or industry certifications in auditing, compliance, or IT security.

• Ability to juggle multiple priorities in a fast-paced, dynamic setting.

• Comfortable dealing with uncertainty.

• Entrepreneurial mindset.

• Must reside in one of the specified states: California, Colorado, Connecticut, District of Columbia, Delaware, Florida, Georgia, Illinois, Indiana, Massachusetts, Maryland, Michigan, Minnesota, North Carolina, New Hampshire, New Jersey, Nevada, New York, Ohio, Pennsylvania, Rhode Island, South Carolina, Tennessee, Texas, or Virginia.

• Must be authorized to work directly for any employer in the United States without requiring visa sponsorship or transfer.

🏝️ Benefits

• Be a vital part of a rapidly growing organization.

• Competitive compensation package.

• Group medical, dental, and vision insurance.

• Employer-funded life and disability insurance.

• Annual well-being stipend.

• Eligible employees may contribute to a 401(k) plan with a favorable employer contribution model.

• Participation in the annual incentive bonus plan.