> Markdown version of [/jobs/ext/1782521-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/1782521-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst

- **Company:** Software Specialists, Inc.
- **Location:** Salem, OR, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** JIRA, Cyber Security, Microsoft Office, Cloud Services, Data Management, Servicenow
- **Published:** July 7, 2026
- **Apply:** https://www.ssipeople.com/jobs/information-security-analyst-97280/#applynow

## About the Role

* 2-5 years minimum experience in tech, cybersecurity, risk management, or a similar role.
 * Experience performing vendor/third-party risk assessments and internal information security risk assessments.
 * Experience assessing systems against security standards and performing control validation or baseline assessments.
 * Experience with ServiceNow, JIRA, and Microsoft Office Suite.
 * Strong communication skills with the ability to explain complex security risks to non-technical audiences.
 * Preferred qualifications include a degree, CRISC, or CISSP; these are not required.

## Description

* Perform third-party risk assessments, review SOC reports and vendor security documentation, and document findings in the risk register.
 * Assess systems and platforms against security standards, validate controls, and support exception handling and compliance testing.
 * Conduct internal risk assessments across key security domains, including cloud services, and communicate findings to technical and non-technical stakeholders.
 * Support metrics, reporting, data stewardship, and documentation in ServiceNow, Box, Jira, and Microsoft Office tools.


## Related Videos

- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)