Senior IT Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Evaluate information risk and facilitate the remediation of identified vulnerabilities across the enterprise's network, systems, and applications.

• Document findings and provide recommendations for corrective actions.

• Conduct vulnerability assessments utilizing IT security tools and methodologies.

• Analyze the IT security and risk posture of networks, systems, and software applications.

• Identify opportunities to mitigate risk and record remediation options concerning risk acceptance or mitigation.

• Facilitate and oversee risk remediation tasks and changes associated with risk mitigation.

• Maintain supervision of IT and vendors regarding the security upkeep of systems and applications.

• Collaborate with Operations, IT, HR, Legal, Compliance, and other governance functions.

• Manage enterprise IT security and IT risk across data systems, networks, and web environments.

• Address inquiries from internal and external audits and assessments.

• Develop policies, procedures, and standards that align with policy and regulatory requirements, including SOX, PCI, and HIPAA guidelines.

• Facilitate the IT security and risk training curriculum.

• Act as a leader within IT security projects.

• Plan, implement, and enhance security measures and controls.

• Maintain data and oversee security access.

• Manage network, intrusion detection, and intrusion prevention systems.

• Suggest and deploy appropriate tools and countermeasures.

• Define, implement, and uphold corporate security policies.

• Coordinate security strategies with external vendors.

• Stay informed about emerging security trends and technologies.

• Perform additional tasks as needed or determined.

⛳️ Requirements

• Over 5 years of experience in information security or related IT roles.

• Certified Information Systems Security Professional (CISSP) certification is preferred.

• An associate degree in Computer Science or equivalent practical experience.

• Demonstrated experience in security operations and incident response.

• Proven experience in vulnerability management and threat analysis.

• Established experience in network and application security.

• Solid experience in security architecture and risk assessments.

• Exceptional analytical and problem-solving skills.

• Strong communication skills for effective cross-functional collaboration.

• Robust interpersonal, written, and verbal communication skills, including the capability to convey complex technical issues to non-technical personnel.

• Ability to translate technical risks into business impacts.

• Leadership and mentoring abilities.

• Capacity to work in teams and prioritize as well as manage competing work assignments in a time-sensitive environment.

• 1–2 years of experience with networking, Microsoft Windows Enterprise systems, and security-related systems.

• Understanding of the NIST cybersecurity framework.

• Familiarity with HIPAA compliance requirements.

• Strong troubleshooting skills.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance.

• Retirement savings plan with employer matching.

• Generous paid time off and holiday schedule.

• Professional development opportunities.

• Flexible work arrangements.