Security Analyst, Information Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Overseeing and upholding all documentation and associated tasks to achieve and sustain information security standards.

• Assists in formulating security architecture by managing security frameworks, policies, principles, and standards.

• Provides guidance on security configuration and operational standards for security systems and applications, which includes policy assessment and compliance tools, network devices, and host-based security systems.

• Engages in incident responses, assessments, audits, and compliance reviews.

• Reviews existing information security policies, standards, and procedures, suggesting necessary amendments for ensuring compliance with information security standards and frameworks.

• Collaborates with a cross-functional team of local and remote subject matter experts (product, service, QA, support, system, and sales engineers, and product managers) to plan, write, and edit technical information while adhering to compliance requirements.

• Manages responses to risk security inquiries and identifies risks within business relationships.

• Oversees content creation, information architecture, and document control processes to ensure adherence to established quality and style standards, including the use of standard templates for ensuring documentation is Presidio-branded, approved, and disseminated.

• Creates and coordinates the development of technical written content and diagrams for contract deliverables and compliance documents.

• Supports current system analysis to identify and recommend necessary technical solutions for the effective implementation of information security controls.

• Aids in securing requests by participating in the change management program through the review and approval process across the enterprise.

• Collaborates with and consults SMEs to generate and validate content for technical documentation in support of auditing initiatives.

• Adheres to templates and content checklist requirements across compliance documents.

• Supports the creation and implementation of security policies, standards, guidelines, and procedures to ensure ongoing maintenance of security.

• Researches, evaluates, designs, recommends, and plans the implementation of information security technologies and processes, analyzing their impact on the existing environment.

• Provides technical expertise for the information security program.

• Collaborates with the Information Security Team.

• Maintains excellent communication with the Director of Information Security regarding all projects and tasks.

• Conducts continuous operational reviews of Information Security Objectives throughout the enterprise.

• Ensures that Presidio complies with security requirements.

• Guarantees adherence to framework requirements for obtaining and retaining certification.

• Manages internal and external audits for relevant security standards.

• Delivers detailed assessment reports following each external audit.

• Participates in the definition and design of the security operations process.

• Collaborates with the Information Security Office Team.

• Provides emergency on-call support as needed.

• Performs additional duties as assigned.

⛳️ Requirements

• Associate's degree (preferably in Computer Science) or equivalent work experience and/or military experience.

• 3-5 years of experience in a similar role.

• Must possess one of the following security certifications: Security +, CSA, CASP, CISA, GIAC-GCNA, AAIA, etc.

• Experience and/or knowledge of information security and privacy standards, including SOC2, ISO 27001, ISO 27701, ISO 42001, PCI DSS, GDPR, and HIPAA.

• Understanding of technical concepts and tools such as FTP, remote access, VPNs, firewalls, web application firewalls, egress filtering, vulnerability scanning, intrusion prevention, antivirus software, or other forms of network security.

• Proficient in project prioritization, problem-solving, issue management, and remediation.

• Strong writing abilities combined with effective presentation and public speaking skills.

• Strong analytical thinking skills, including the ability to summarize information and clearly identify key elements, patterns, results, or relationships.

• Experience in creating, generating, and maintaining data, reports, queries, etc.

• Familiarity with artificial intelligence tools and models.

• Strong skills in presenting findings, conclusions, solutions, and information in a clear and concise manner.

• Extensive experience working with all levels of staff, management, stakeholders, and vendors.

• Capability to manage multiple projects simultaneously.

• Understanding of written sentences and paragraphs in work-related documents.

• Utilization of logic and reasoning to identify the strengths and weaknesses of alternative solutions, conclusions, or approaches to problems.

• Ability to identify complex problems and review information to evaluate options and implement solutions.

🏝️ Benefits

• Competitive salary

• Flexible working hours

• Professional development opportunities

• Health insurance

• 401(k) matching