> Markdown version of [/jobs/ext/4629722-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/4629722-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst

- **Company:** Harvard University
- **Location:** Boston, MA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $87,700.0
- **Contract:** Temporary contract
- **Skills:** Software System Penetration Testing, Cyber Security, Information Systems, Information Leak Prevention, Comptia Pentest+ CE, Software Vulnerability Management, Vulnerability Analysis
- **Published:** November 7, 2026
- **Apply:** https://www.disabledperson.com/jobs/76398998-information-security-analyst

## About the Role

* Minimum of five years' experience post-secondary education or relevant work experience., * Bachelor's degree in information systems, cybersecurity, or a related field.
 * Working knowledge of vulnerability management fundamentals, including CVE and CVSS, risk prioritization, and remediation timelines.
 * Demonstrated ability to obtain results from technical staff who do not report to you, with strong written and verbal communication skills.
 * Hands-on experience with enterprise vulnerability scanning, endpoint protection, or asset inventory tools.
 * Experience with cloud security posture management and common cloud misconfigurations.
 * Experience with vendor or third-party security risk assessments.
 * Experience with data loss prevention alert triage and sensitive data remediation.
 * Experience with endpoint management and agent deployment at scale.
 * Experience with IT service management or GRC ticketing and reporting.
 * Familiarity with HIPAA, NIST SP 800-53, the NIST Cybersecurity Framework, or comparable frameworks.
 * Experience in higher education, an academic medical center, or a research environment, especially with decentralized IT groups.
 * Strong problem-solving skills, attention to detail, and the ability to act as a trusted advisor.

Certificates and Licenses:

 * SecAI+
 * Security+
 * PenTest+
 * CCSK
 * Cloud+

## Description

* Operate recurring vulnerability and compliance reporting, quality-check results, and distribute reports to HMS groups on schedule.
 * Advise system administrators on findings and remediation, and track issues through to verified closure.
 * Run day-to-day execution of the endpoint security compliance effort, ensuring required security agents are deployed and healthy.
 * Monitor cloud security posture, triage misconfigurations, and work with cloud owners to remediate findings.
 * Support vendor risk management, including security reviews and follow-up on identified issues.
 * Triage data loss prevention alerts and coordinate remediation of sensitive data on shared storage.
 * Support security assessments, penetration testing, and the security awareness program.
 * Build dashboards and reports, and use basic scripting to automate recurring tasks.