We are looking for an Information Security Analyst to monitor and improve information security controls, manage security risks and compliance activities, and support the protection of enterprise systems, applications, and data assets. This position will be a full-time contract and hybrid.

What You'll Do

• Monitor information security controls and processes to ensure they are operating effectively and aligned with organizational requirements

• Advise stakeholders on information security risks, vulnerabilities, and remediation strategies

• Coordinate and execute information security initiatives and projects across the organization

• Respond to and assist with the investigation and resolution of security incidents

• Develop, publish, and maintain information security policies, procedures, standards, and guidelines

• Conduct organization-wide data classification assessments and security audits

• Track, manage, and support remediation activities resulting from security assessments and audits

• Collaborate with IT management, Internal Audit, and business stakeholders to identify and address security vulnerabilities

• Monitor compliance with established security policies, standards, and regulatory requirements

• Develop and maintain security awareness programs and provide user education on security best practices

• Perform security research and remain current on emerging threats, vulnerabilities, and industry trends

• Prepare and maintain security documentation, reports, procedures, alerts, notifications, and related communications

• Support governance, risk, and compliance activities across enterprise technology environments

What You'll Need

Required:

• Experience with Governance, Risk, and Compliance (GRC) programs and activities

• Experience supporting information security operations, policies, and compliance initiatives

• Knowledge of information security principles, frameworks, and industry best practices

• Experience conducting security assessments, audits, and remediation activities

• Experience identifying, tracking, and managing security risks and vulnerabilities

• Experience developing and maintaining security policies, standards, and procedures

• Experience responding to and supporting information security incident investigations

• Strong analytical, troubleshooting, and problem-solving skills

• Strong written and verbal communication skills

• Experience creating security documentation, reports, and user awareness materials

• Ability to work effectively with technical teams, auditors, management, and business stakeholders

Preferred:

• Industry experience in information security

• Knowledge of network security concepts including protocol analysis, anomaly detection, and network troubleshooting

• Knowledge of Windows and Linux/Unix server and workstation security best practices

• Experience with vulnerability assessment and security scanning tools

• Experience assessing databases, web applications, Windows servers, Unix servers, and data networks

• Knowledge of information security standards, regulations, and compliance frameworks

• Experience supporting security governance and enterprise risk management programs

• Relevant security certifications such as Security+, CISSP, CISM, or related credentials

Physical Demands

• Ability to safely and successfully perform the essential job functions consistent with the ADA and other federal, state and local standards

• Sedentary work that involves sitting or remaining stationary most of the time with occasional need to move around the office to attend meetings, etc.

• Ability to conduct repetitive tasks on a computer, utilizing a mouse, keyboard, and monitor