Information Security Analyst

We are seeking a Senior Information Security Analyst to join the Cybersecurity organization within the Information Protection Scanning Team. This position will support enterprise-wide data protection initiatives by driving data security scanning, governance activities, risk identification, remediation coordination, and scanning tool optimization., Data Security & Scanning Operations

• Support enterprise Data Security Posture Management (DSPM) initiatives through execution of data scanning strategies and remediation activities.
• Gather and document business and technical requirements for enhancements to existing scanning platforms and implementation of new unstructured data scanning solutions.
• Configure, execute, and validate enterprise data scans to identify security, privacy, and compliance risks.
• Analyze scan results and collaborate with stakeholders to validate findings and recommend corrective actions.
• Track remediation efforts and ensure timely disposition of identified security issues.

Governance, Risk & Compliance

• Perform recurring governance and compliance reviews on a weekly, monthly, and quarterly basis.
• Monitor adherence to information security policies, standards, and regulatory requirements.
• Escalate security risks, exceptions, and unresolved findings through established governance processes.
• Prepare executive-level reporting and risk summaries highlighting key findings and trends.

Identity & Access Management

• Review and analyze elevated access permissions and entitlement-related risks.
• Support the design and implementation of entitlement management capabilities integrated with data scanning solutions.
• Identify excessive access risks and recommend access control improvements.

Data Analysis & Reporting

• Retrieve, validate, and analyze security-related data sets for accuracy and completeness.
• Perform data reduction, transformation, and processing activities to generate actionable insights.
• Develop dashboards, reports, and visualizations using business intelligence tools.
• Create automated workflows supporting data ingestion, analysis, and reporting activities.

Collaboration & Program Support

• Partner with Information Protection Engineering teams to validate scan results and optimize scanning tool effectiveness.
• Engage with application owners, data owners, and platform teams to review findings and answer questions regarding scan outcomes.
• Research, triage, and respond to requests submitted through Jira, ServiceNow, and email channels.
• Facilitate meetings, document action items, and ensure follow-through on key deliverables.
• Utilize approved AI tools to support research, analysis, documentation, summarization, and decision-making activities while adhering to organizational AI governance standards.

The ideal candidate will have experience in information security governance, risk and compliance (GRC), identity and access management (IAM), data protection technologies, and security reporting. This role requires strong analytical, communication, and stakeholder management skills with the ability to work across technology, security, and business teams., * Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Systems, or a related field, or equivalent demonstrated experience.

• 4+ years of experience in Information Security, Cybersecurity, Risk Management, or related disciplines.
• 2+ years of experience in Governance, Risk, and Compliance (GRC), including policy adherence monitoring, reporting, and escalation management.
• Experience analyzing security risks, vulnerabilities, and remediation efforts.
• Strong written and verbal communication skills with experience engaging technical and business stakeholders.
• Experience gathering requirements, documenting processes, and supporting security initiatives., * Strong knowledge of information security governance, risk management, and compliance frameworks.
• Experience with Identity and Access Management (IAM), privileged access reviews, and entitlement management.
• Hands-on experience with data classification, DSPM, and security scanning platforms such as:
• Microsoft Purview
• Varonis
• Securiti.ai
• Similar data protection technologies
• Experience using Jira, ServiceNow, or other workflow and ticketing platforms.
• Knowledge of ETL processes, data automation, and workflow orchestration.
• Experience with reporting and visualization tools including:
• Power BI
• Tableau
• Similar analytics platforms
• Experience creating process documentation, workflow diagrams, technical documentation, and standard operating procedures.
• Familiarity with Agile delivery methodologies.
• Working knowledge of cloud platforms including AWS, Microsoft Azure, and Google Cloud Platform (Google Cloud Platform).
• Ability to manage multiple priorities while influencing stakeholders across various organizational levels.
• Understanding of data privacy, data protection, and responsible AI usage practices.

Preferred Skills

• Data Security Posture Management (DSPM)
• Information Protection
• Unstructured Data Security
• Cybersecurity Governance
• Risk Assessment
• Compliance Monitoring
• Identity & Access Management (IAM)
• Data Classification
• Microsoft Purview
• Varonis
• Securiti.ai
• Power BI
• Tableau
• ServiceNow
• Jira
• ETL and Data Automation
• AWS
• Azure
• Google Cloud Platform (Google Cloud Platform)
• AI-Assisted Security Analysis