Hybrid IT Security Analyst 2 (Associate Security Analyst)

Tekberry is seeking an IT Security Analyst 2 (Associate Security Analyst) to support our client within the Information Security Office (ISO). This role focuses on cybersecurity governance, risk, and compliance (GRC) initiatives, helping prepare the organization for evolving security standards and regulatory requirements, particularly NIST 800-171 and Cybersecurity Maturity Model Certification (CMMC) compliance efforts., * Support initiatives designed to improve organizational cybersecurity posture and regulatory readiness

• Assist in preparing for cybersecurity audits and compliance assessments, with a focus on NIST 800-171 and CMMC requirements
• Assess current security practices and identify gaps requiring remediation
• Support implementation of security controls aligned with established frameworks and standards
• Develop and deliver security awareness and training programs
• Collaborate with stakeholders to promote a culture of cybersecurity awareness and responsibility
• Review and update information security policies, procedures, and standards
• Monitor security controls and support ongoing risk management activities
• Prepare and maintain documentation related to security assessments, policies, operational procedures, and compliance activities
• Participate in risk assessments, vulnerability reviews, and control evaluations
• Partner with cross-functional teams including IT, Finance, Human Resources, Legal, and research stakeholders
• Stay informed on emerging cybersecurity threats, technologies, and regulatory requirements
• Support additional initiatives related to the university’s information security program

Do you have experience in Security risk assessment investigation?, Do you have a Bachelor’s degree?, The ideal candidate will have experience in information security, risk management, or compliance, with a strong understanding of security frameworks, audit readiness, and the ability to communicate complex cybersecurity concepts to technical and non-technical audiences., * Bachelor’s degree in Information Security, Computer Science, Information Systems, Cybersecurity, or a related field (or equivalent experience)

• Minimum of 3 years of experience in information security, risk management, compliance, cybersecurity, or a related field
• Knowledge of cybersecurity frameworks and standards, particularly:
• NIST 800-171
• HIPAA
• Experience supporting:
• Security assessments
• Risk assessments
• Audit preparation activities
• Compliance initiatives
• Understanding of security technologies such as:
• Encryption
• Firewalls
• Intrusion Detection Systems (IDS)
• Security Information and Event Management (SIEM) tools
• Strong analytical and problem-solving skills
• Excellent verbal and written communication skills
• Ability to explain technical concepts to audiences with varying technical backgrounds
• Demonstrated ability to work independently and collaboratively in team environments

Preferred Qualifications

• Knowledge of:
• Cybersecurity Maturity Model Certification (CMMC)
• ISO 27001
• PCI DSS
• Professional cybersecurity certifications such as:
• Security+
• CISSP
• CISM
• CRISC
• Experience developing and administering security awareness training programs
• Experience with Learning Management Systems (LMS)
• Experience working in higher education, healthcare, research environments, or other highly regulated industries
• Familiarity with NIST-based security program implementation

Work Environment & Physical Requirements

• Primarily remote role supporting teams operating on Pacific Time
• Occasional travel to Stanford campus or Redwood City offices may be required (typically a few days each quarter)
• Standard office environment with extensive computer use
• Frequent participation in meetings, presentations, and collaborative planning sessions
• Ability to manage multiple priorities in a dynamic and fast-paced environment

We need hard-working, reliable employees. If you’re ready to help strengthen cybersecurity programs and contribute to protecting critical education, healthcare, and research environments, we want to hear from you!