> Markdown version of [/jobs/ext/1792989-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/1792989-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst

- **Company:** Vanderhouwen & Associates, Inc.
- **Location:** Salem, OR, United States (Remote available)
- **Experience:** Expert
- **Salary:** $102,606.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Excel, Data Analysis, JIRA, Cyber Security, Microsoft Office, Microsoft PowerPoint, Information Technology, Servicenow
- **Published:** July 13, 2026
- **Apply:** https://www.vanderhouwen.com/job_posting/senior-information-security-analyst-72774/

## About the Role

Our client is seeking a Senior Information Security Analyst to support enterprise information risk management initiatives by evaluating cybersecurity risks, strengthening security controls, and partnering with stakeholders across the organization. This role is ideal for a collaborative professional with strong analytical skills who can translate complex technical concepts into actionable business insights while helping drive effective risk management practices.

This role is a hybrid model in Beaverton, Oregon. Applicants who can work a hybrid model are preferred but fully remote applicants will be considered., * Minimum of 2-5 years of experience in information security, cybersecurity, technology, risk management, or a related field.

 * Hands-on experience performing third-party or vendor risk assessments and evaluating information security controls.
 * Experience conducting audits, compliance reviews, or security control assessments within an enterprise environment.
 * Proficiency with ServiceNow, Jira, and Microsoft Office Suite, including Excel and PowerPoint.
 * Strong analytical, organizational, and problem-solving skills with the ability to interpret complex technical information.
 * Excellent written and verbal communication skills, with the ability to explain technical concepts to business stakeholders.
 * Experience working collaboratively across multiple teams and managing relationships with diverse stakeholders.
 * Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business, or a related discipline preferred; equivalent professional experience will also be considered.
 * Professional certifications such as CRISC, CISSP, or similar information security credentials are preferred but not required.
 * Experience in enterprise risk management, retail, supply chain, or related industries is a plus.
 * Demonstrated adaptability, intellectual curiosity, a commitment to continuous learning, and the ability to handle sensitive information with professionalism and discretion.

## Description

* Conduct third-party and vendor information security risk assessments to identify, evaluate, and document potential cybersecurity risks.
 * Perform security control reviews, control validation activities, and compliance assessments to help strengthen the organization's overall security posture.
 * Analyze risk assessment findings, recommend remediation strategies, and partner with business and technology teams to address identified issues.
 * Review vendor security documentation, including audit reports and supporting evidence, to evaluate security practices and compliance with organizational standards.
 * Support risk metrics, reporting, and data analysis to provide meaningful insights into cybersecurity risks, trends, and control effectiveness.
 * Maintain accurate assessment documentation and risk records using governance and project management tools such as ServiceNow and Jira.
 * Collaborate with cross-functional stakeholders to support risk management initiatives, improve assessment processes, and ensure consistent execution of security programs.
 * Communicate technical security risks, assessment results, and recommendations to both technical and non-technical audiences in a clear and effective manner.
 * Stay informed on evolving cybersecurity threats, industry standards, and best practices to continuously enhance assessment methodologies and risk management processes.


## Related Videos

- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail)
- [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray)
- [Data Science on Software Data](https://www.wearedevelopers.com/videos/162-data-science-on-software-data)
- [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases)

## Related Articles

- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)