Senior Information Security Analyst

Position Senior Information Security Analyst Location Parsippany, NJ Job ID / Openings 2044-290-27-B | 1 opening Overview The Senior Information Security Analyst is responsible for the assessment and mitigation of information risk and the remediation of identified vulnerabilities with the corporate network, systems and applications. The role reports findings and recommendations for corrective action, performs vulnerability assessments, evaluates the IT security/risk posture, manages continuous monitoring of all information security risk metrics, and assists in all IT audits, risk assessments and regulatory compliance efforts including DFARS, NIST and CMMC. Key Responsibilities Management of IT security and IT risk across the enterprise. Address questions from internal and external audits and examinations. Develop, execute, and track the performance of security measures to protect information and network infrastructure and computer systems. Design computer security strategy and engineer comprehensive cybersecurity architecture. Develop policies, procedures and standards that meet existing and newly developed policy and regulatory requirements including DFARS View phone number on click.appcast.io, NIST 800-171, and CMMC. Serve as project manager or lead within IT security projects. Mentor and coach Level I Information Security Analysts. Promote awareness of applicable regulatory standards, upstream risks, and industry best practices across the enterprise. Clearly articulate technical issues, solutions and activities to colleagues and clients with associated technical risks. Gather business and technical requirements and assess them against information security policies. Configure, troubleshoot, and maintain security infrastructure software and hardware. Evaluate potential new solutions and provide feedback to IT Management. Train users on software, hardware, applications and create user documentation. Define, monitor, and report on information security controls and metrics. Install software that monitors systems and networks for security breaches and intrusions. Monitor systems for irregular behavior and set up preventive measures. Perform regular risk assessments of the company's systems and report on findings to IT management. Document and assess information security policies against required compliance frameworks such as NIST and DFARS. Create and maintain action plans for achieving information security goals. Drive and manage projects from inception to completion. Attend meetings in person when on-site and via dial-in when working remotely. Qualifications Minimum Required Qualifications Preferably 4–7 years of experience. Bachelor's degree in computer science or equivalent. Must be a U.S. person. Basic understanding of the project management life cycle. Well‑developed practical operating knowledge of common desktop and laptop hardware and application software, including: Windows MS Office Suite Print services and printers Experience with system application, systems management, and data communication, including basic networking in LAN/WAN environments and remote access solutions. Understanding of key information security policy requirements, metrics, and reporting. Strong attention to detail. Good problem‑solving skills with the ability to think creatively. Excellent written and verbal skills, including the ability to clearly articulate technical issues and activities to technical and non-technical staff. Strong interpersonal skills and the ability to adapt in a complex and changing environment. Consistently meet expected production, accuracy, and quality standards as set by management. Team oriented with the ability to work independently. Additional Desired Qualifications Information security certification (CISSP, Security+, CySA+). Technical solution design and planning experience. #J-18808-Ljbffr Marotta Controls