Information Security Analyst

• Maintain a repository of firm security policies and controls
• Maintain mapping of policies and controls to regulatory requirements and industry frameworks
• Assist in the response to security questionnaires by mapping questions to existing documentation and artifacts
• Track development and maintenance of security standards with their respective owners to ensure timely completion
• Work with security control owners to assess coverage and identify gaps based on interviews and documentation review
• Maintain security risk register and track remediation activities
• Conduct security risk reviews of vendors and other third parties, and provide recommendations
• Provide ongoing monitoring of third-party security risk
• As part of the third-party software review process, identify and complete vendor due diligence needs
• Facilitate audits and regulatory reviews by tracking and collecting relevant security artifacts
• Support delivery of security awareness programs and resolve related issues

• A Bachelor's degree in Information Security, Computer Science, Information Technology or a related field, or equivalent experience
• Three years of experience in Information Security and/or Technology Risk Management
• Solid understanding of information security concepts and technologies, including those listed as responsibilities above
• Working knowledge of risk management methodologies, such as OCTAVE or FAIR
• Familiarity with common security frameworks and standards, including NIST Cybersecurity Framework, ISO/IEC 27001:27013, CIS CSC, PCI DSS
• Prior experience in at least one of the following:
• Application development
• System Administration
• Cloud platform management (AWS, GCP, Azure)

• Excellent verbal and written communication skills
• Superior analytical and organizational abilities
• A high degree of self-motivation and initiative
• Ability to exercise sound judgment when solving problems with incomplete information

This role's anticipated base salary range is $130,000 to $150,000 per year based on knowledge and experience.The offered salary is just part of the total compensation package. In addition to a competitive salary, the company offers both a discretionary cash bonus and stock award as well as a wide range of benefits, including health care, tuition reimbursement and much more.

Company Benefits & Perks

• Competitive salary, annual performance-based bonus and stock grant
• Retirement plan 401(k) with a competitive company match
• Excellent health and welfare benefits, including medical, dental, and vision benefits
• Wellness screenings and assessments, health coaches and counseling services through an Employee Assistance Program (EAP)
• Paid time off and a generous parental leave policy
• Daily company lunch allowance provided and a fully stocked kitchen with healthy options for breakfast and snack
• Corporate events, including team outings, dinners, volunteer activities and company sports teams
• Education reimbursement and learning opportunities
• Modern offices with multi-monitor setups