Information Security Analyst

Senior Information Security Analyst - Data Security Scanning

We are not accepting C2C or 1099 arrangements.


Location: Charlotte, NC (Hybrid)
Employment Type: Contract

About the Role

We are seeking a Senior Information Security Analyst to join the Cybersecurity organization within the Information Protection Scanning Team . This position will support enterprise-wide data protection initiatives by driving data security scanning, governance activities, risk identification, remediation coordination, and scanning tool optimization.

The ideal candidate will have experience in information security governance, risk and compliance (GRC), identity and access management (IAM), data protection technologies, and security reporting. This role requires strong analytical, communication, and stakeholder management skills with the ability to work across technology, security, and business teams.

Key Responsibilities

Data Security & Scanning Operations

• Support enterprise Data Security Posture Management (DSPM) initiatives through execution of data scanning strategies and remediation activities.
• Gather and document business and technical requirements for enhancements to existing scanning platforms and implementation of new unstructured data scanning solutions.
• Configure, execute, and validate enterprise data scans to identify security, privacy, and compliance risks.
• Analyze scan results and collaborate with stakeholders to validate findings and recommend corrective actions.
• Track remediation efforts and ensure timely disposition of identified security issues.

Governance, Risk & Compliance

• Perform recurring governance and compliance reviews on a weekly, monthly, and quarterly basis.
• Monitor adherence to information security policies, standards, and regulatory requirements.
• Escalate security risks, exceptions, and unresolved findings through established governance processes.
• Prepare executive-level reporting and risk summaries highlighting key findings and trends.

Identity & Access Management

• Review and analyze elevated access permissions and entitlement-related risks.
• Support the design and implementation of entitlement management capabilities integrated with data scanning solutions.
• Identify excessive access risks and recommend access control improvements.

Data Analysis & Reporting

• Retrieve, validate, and analyze security-related data sets for accuracy and completeness.
• Perform data reduction, transformation, and processing activities to generate actionable insights.
• Develop dashboards, reports, and visualizations using business intelligence tools.
• Create automated workflows supporting data ingestion, analysis, and reporting activities.

Collaboration & Program Support

• Partner with Information Protection Engineering teams to validate scan results and optimize scanning tool effectiveness.
• Engage with application owners, data owners, and platform teams to review findings and answer questions regarding scan outcomes.
• Research, triage, and respond to requests submitted through Jira, ServiceNow, and email channels.
• Facilitate meetings, document action items, and ensure follow-through on key deliverables.
• Utilize approved AI tools to support research, analysis, documentation, summarization, and decision-making activities while adhering to organizational AI governance standards.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or a related field, or equivalent demonstrated experience.
• 4+ years of experience in Information Security, Cybersecurity, Risk Management, or related disciplines.
• 2+ years of experience in Governance, Risk, and Compliance (GRC), including policy adherence monitoring, reporting, and escalation management.
• Experience analyzing security risks, vulnerabilities, and remediation efforts.
• Strong written and verbal communication skills with experience engaging technical and business stakeholders.
• Experience gathering requirements, documenting processes, and supporting security initiatives.

Preferred Qualifications

• Strong knowledge of information security governance, risk management, and compliance frameworks.
• Experience with Identity and Access Management (IAM), privileged access reviews, and entitlement management.
• Hands-on experience with data classification, DSPM, and security scanning platforms such as:
  • Microsoft Purview
  • Varonis
  • Securiti.ai
  • Similar data protection technologies
• Experience using Jira, ServiceNow, or other workflow and ticketing platforms.
• Knowledge of ETL processes, data automation, and workflow orchestration.
• Experience with reporting and visualization tools including:
  • Power BI
  • Tableau
  • Similar analytics platforms
• Experience creating process documentation, workflow diagrams, technical documentation, and standard operating procedures.
• Familiarity with Agile delivery methodologies.
• Working knowledge of cloud platforms including AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Ability to manage multiple priorities while influencing stakeholders across various organizational levels.
• Understanding of data privacy, data protection, and responsible AI usage practices.

Preferred Skills

• Data Security Posture Management (DSPM)
• Information Protection
• Unstructured Data Security
• Cybersecurity Governance
• Risk Assessment
• Compliance Monitoring
• Identity & Access Management (IAM)
• Data Classification
• Microsoft Purview
• Varonis
• Securiti.ai
• Power BI
• Tableau
• ServiceNow
• Jira
• ETL and Data Automation
• AWS
• Azure
• Google Cloud Platform (GCP)
• AI-Assisted Security Analysis

Why Join Us?

This role offers the opportunity to work at the intersection of cybersecurity, data protection, governance, and emerging AI-enabled security technologies. You will collaborate with enterprise security teams and business stakeholders to strengthen data protection capabilities while influencing strategic security initiatives across the organization.