Senior Information Security Analyst

Job Summary (Sr Information Security Analyst) Cloud & Enterprise Security Serve as subject matter expert (SME) on security for Azure, AWS, GCP, and on-prem environments. Guide and implement cloud security architecture (IAM, encryption, network controls, data protection, workload hardening). Implement process improvements aligned to security frameworks (NIST, ISO 27001) and business needs. Security Operations & Incident Response Implement and monitor security controls across endpoints, networks, and cloud. Conduct advanced monitoring, log analysis, threat hunting, and forensic investigations. Participate in incident response planning and exercises. Governance, Risk & Compliance (GRC) Draft/revise security policies and procedures to supplement enterprise frameworks and close gaps. Interface with auditors and maintain compliance documentation (HITRUST, PCI, NIST, HIPAA, SOC2). Review contracts and provide security guidance; support project scoping and cost-benefit analyses. Stakeholder Engagement & Communication Act as security liaison; clearly convey business risk related to information security. Develop technical documentation and use visual aids to communicate complex topics. Communicate effectively in high-pressure, high-visibility situations. Continuous Improvement Recommend and implement new security solutions and enhancements. Stay updated on evolving threats and best practices. Technical Expertise Cloud: Hands‑on with GCP, Azure (Defender, Sentinel, Entra ID, etc.); AWS is a plus. DLP: Implement and manage Microsoft Purview DLP; hands‑on with Proofpoint for email security. Platforms: Windows, Linux/Unix, macOS; hardening and patching. Security Tools: Experience with SIEM (MS Sentinel, Elastic), endpoint protection (Defender), firewalls (Palo Alto), vulnerability tools (Qualys), forensics (Symantec, Purview). Identity & MFA: Okta, Microsoft (Entra ID MFA), zero trust controls. Microsoft 365 Security (Exchange Online, SharePoint/OneDrive, Teams, Purview). Qualifications 5+ years in information security or equivalent IT experience with security responsibilities. Strong cloud security and compliance expertise. Experience with vulnerability assessments, project/change management, and technical writing. Preferred certifications: CCSP, AZ‑500, AWS/GCP Security certifications. Automation/scripting skills a plus. This summary covers the core job functions, technical expertise required, and key qualifications for the Sr Information Security Analyst role, as reflected in the provided job description. #J-18808-Ljbffr Steneral Consulting