Information Security Analyst

We are seeking an experienced Information Security Analyst with strong expertise in cybersecurity risk management, security audits, compliance, internal controls, and security governance.

Required Skills

• Experience performing security risk assessments, audits, control reviews, and compliance assessments.

• Strong knowledge of NIST SP 800-53 Rev. 5, RMF, IRS Publication 1075, HIPAA/HITECH, HITRUST, CJIS, and MARS-E.

• Experience with security and privacy control selection, implementation, assessment, and authorization.

• Strong knowledge of information security policies, risk management, internal controls, and audit practices.

• Experience identifying security gaps, developing findings, recommendations, POA&Ms, and remediation plans.

• Ability to investigate suspicious activity and support security incident reporting.

• Understanding of IT environments including Windows, Unix/Linux, databases, networking, and software development.

• Strong technical documentation, analytical, written, and verbal communication skills.

Roles & Responsibilities

• Conduct security assessments, audits, and risk reviews and document findings and recommendations.

• Prepare audit reports, risk assessments, security plans, incident reports, and POA&Ms.

• Review and maintain security policies, audit plans, risk documentation, and compliance artifacts.

• Evaluate security controls and identify areas of non-compliance and improvement.

• Track remediation activities and report outcomes to management.

• Research cybersecurity regulations, standards, and industry best practices to support compliance.

• Identify cybersecurity and privacy risks across internal and external systems and recommend mitigation strategies.

• Support project teams with security and compliance requirements.

• Collaborate with IT, security, audit, compliance, and business teams.

• Provide security guidance and develop training/user-support materials as required.