Sr. Information Security Analyst

• Advise on security, architecture, and solution risks across network, OS, hardware, applications, software, and coding.
• Provide guidance on regulatory and compliance requirements (HIPAA, PCI, SOX, GLBA, state/international privacy laws, etc.).
• Develop security architectures, global security strategies, cloud security frameworks, standards, and business-relevant security KPIs.
• Research vulnerabilities, conduct risk assessments, develop mitigation strategies, and support incident response, forensics, eDiscovery, and litigation efforts.
• Balance business needs with security risk exposure and present recommendations to stakeholders, including executive leadership.
• Mentor security professionals, author security position papers, represent the CISO as needed, and speak at industry events, conferences, and educational forums.

• 10+ years of broad based IT experience.
• Knowledge of security frameworks such as NIST, ISO 27001, or CIS Controls.
• Familiarity with security tools (e.g., firewalls, intrusion detection systems, SIEM).
• Experience with vulnerability management and incident response.
• Strong analytical and problem-solving skills.
• Excellent communication and teamwork abilities.
• Bachelor’s degree in Computer Science, Engineering or related field required; Master’s degree strongly desired.
• CISSP, CISM, other security certification or other recognition such as being published in various periodicals and/or presenting papers at conferences strongly desired.

Nice to Have Skills & Experience

• Experience using Forensic tooling, with strong risk assessment understanding

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.