Senior IT Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Accountable for evaluating information risk and facilitating the remediation of identified vulnerabilities related to IT security and IT risk throughout the organization.

• Evaluate information risk and assist in addressing identified vulnerabilities within the network, systems, and applications.

• Provide reports on findings and suggest corrective actions.

• Conduct vulnerability assessments as assigned using IT security tools and methodologies.

• Assess the IT security/risk posture within the IT network, systems, and software applications.

• Identify opportunities to mitigate risk and document remediation options for the acceptance or mitigation of risk scenarios.

• Facilitate and monitor the execution of risk remediation tasks and changes related to risk mitigation, and report on findings.

• Oversee IT and vendors regarding the security maintenance of their systems and applications.

• Collaborate with other governance functions such as Operations, IT, HR, Legal, and Compliance.

• Key responsibilities include managing IT security and IT risk (e.g., data systems, network, and/or web) across the organization.

• Respond to inquiries from internal and external audits and examinations.

• Develop policies, procedures, and standards that align with existing and newly established policy and regulatory requirements including SOX, PCI, and/or HIPAA guidelines.

• Facilitate IT security/risk training programs.

• Act as a leader in IT security projects.

• Plan, implement, and enhance security measures and controls.

• Maintain data integrity and monitor security access.

• Manage network, intrusion detection, and prevention systems.

• Recommend and install suitable tools and countermeasures.

• Define, implement, and uphold corporate security policies.

• Coordinate security plans with external vendors.

• Stay informed about emerging security trends and technologies.

• Perform additional tasks as needed or determined.

⛳️ Requirements

• Over 5 years of experience in information security or related IT roles.

• Certified Information Systems Security Professional (CISSP) certification is preferred.

• Associate's Degree in Computer Science or equivalent practical experience.

• Proven expertise in: Security operations and incident response.

• Vulnerability management and threat analysis.

• Network and application security.

• Security architecture and risk assessments.

• Exceptional analytical and problem-solving skills.

• Strong communication abilities for cross-functional collaboration.

• Excellent interpersonal, written, and verbal communication skills, including the capability to convey complex technical issues to non-technical personnel.

• Ability to translate technical risks into business impacts.

• Leadership and mentoring skills.

• Demonstrated ability to work collaboratively in teams and prioritize/manage competing assignments in a time-sensitive environment.

• 1-2 years of experience with Networking, Microsoft Windows Enterprise systems, and security-related systems.

• Familiarity with the NIST cybersecurity framework.

• Understanding of HIPAA compliance requirements.

• Strong troubleshooting skills.

🏝️ Benefits

• Comprehensive health and wellness programs.

• Opportunities for professional development and certification.

• Flexible work schedule and remote work options.

• Competitive salary and performance-based bonuses.

• Collaborative and inclusive work environment.