> Markdown version of [/jobs/ext/2526368-senior-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/2526368-senior-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Information Security Analyst - **Company:** Social Solutions Global, Inc. - **Location:** United States - **Experience:** Expert - **Salary:** $100,000.0 - $120,000.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Systems Security Architecture Professional, Project Management Software, PCI Data Security Standards, Phishing, Software Systems, Privacy Controls - **Published:** August 1, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/17769911?backUrl=%2Fcareer%2F17769911%2FSenior-Information-Security-Analyst ## About the Role * 6+ years' experience performing risk and compliance activities or open to less years with addition of relevant course work/degrees * Experience managing multiple priorities independently and in a team environment to achieve goals. * Excellent organizational, planning and time management skills. * Excellent research and analytical skills. * Excellent verbal and written communication skills. * Ability to exercise good judgement and tact in dealing with Bonterra senior management. * Proficient with technology and ability to learn our software systems, including GRC, ticketing and project management software and workflows. * Proven track record of proactively identifying needs and implementing solutions. * May hold one or more information systems security professional certifications (CRISC, CISA, CISSP, CISM, GSEC, GCFA, GCTI, CCSP, or other relevant Information Security certifications). ## Description The Bonterra Information Security Risk and Compliance department is looking to hire a Senior Information Security Risk Analyst to our team. If you enjoy problem solving, are enthusiastic working in a team format and want to thrive in the ever-changing risk & compliance field while learning new concepts and principles as part of your continuing education, look no further!, * Prepares for and facilitates examinations by qualified security assessors for frameworks such as SOC, ISO 27001, and PCI-DSS. * Works closely with other members of the Information Security, Risk, & Compliance team. * Gathers and synthesizes data; presents conclusions; and offers risk mitigation, remediation and process improvement solutions to management. * Works closely with control owners across the company and internal and external auditors to ensure requests are completed in a timely manner. * Identifies potential business risks, operational and regulatory process deficiencies and improvement opportunities. * Communicates risk findings and recommendations that are clear and actionable to all stakeholders. * Performs technical risk assessments of third party suppliers' security and privacy controls. * Maintains register of relevant suppliers/vendors, controls, and risks for ongoing vendor risk management activities. * Assists in the initial triage of compliance, risk and security requests in the ticket management system to ensure efficiency and prioritization. * Assists in maintaining our overall security awareness, role-based security trainings and phishing simulation programs across the enterprise. * Assists in conducting user activity audits where required. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Rethinking Intelligence: AI, Accessibility, and the Future of Inclusive Work - Artur Ortega](https://www.wearedevelopers.com/videos/1377-rethinking-intelligence-ai-accessibility-and-the-future-of-inclusive-work-artur-ortega) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)