• Find preferred job with Jobstinger
  • ID
    #49970551
  • Job type
    Permanent
  • Salary
    Depends on Experience
  • Source
    National Engineering Service Corp
  • Date
    2023-05-16
  • Deadline
    2023-07-15
 
Permanent

Vacancy expired!

Senior Security Analyst

New Haven, CT (Hybrid/Remote – East Coast)

Direct Hire USPRO is looking for a Senior Security Analyst with strong Information Security Policy and ProcessThis person will be responsible for performing day-to-day governance, compliance and risk management tasksThis position will include creating and managing information technology and organizational policies and standards in support of legal and regulatory compliance needs as well as general information technology and organizational information security policies and standards that improve the Information Security risk mitigation maturity of the Order.

Core Responsibilities:
  • Assist in developing organizational security policies.
  • Assist in defining information technology security standards
  • Work with various business units to ensure controls are adequate, appropriate, and effective.
  • Support vendor due-diligence process and help to lead and define overall third-party risk management efforts.
  • Perform security and compliance assessments on new and existing systems, processes, technology.
  • Support internal and external audit process for relevant compliance concerns.
  • Execute business impact analysis with guidance from the manager of IT Security Information Security Policy and Process
  • Assist in maintaining the information security risk register
  • Interface with information technology and lines of business to provide guidance and support.
  • Perform periodic gap assessments to validate compliance on an ongoing basis.
  • Stay up to date and informed on developing regulatory concerns and changing IT and information security trends.

Skill Qualifications:
  • Working knowledge of legal and regulatory compliance standards and requirements such as NYDFS
  • Strong understanding of the NIST CSF framework and other associated Information Security standards
  • Ability to think diagnostically and critically in applying Information Security policy and process knowledge to Vendor evaluations
  • Excellent written and oral communication skills.
  • Strong work ethic with attention to detail.
  • Ability to excel in a fast paced and rapidly changing environment.

Preferred:CISM, CRISC, CISA. CISSP or other security management certificationExperience with Compliance360 and ServiceNow GRC platforms

Education and Experience Qualifications:Bachelor's degree in Information Security, Cyber Security, Computer Science, or another related field3-5 years’ experience with legal and regulatory compliance standardsExperience with IT Information Security policy and process

Vacancy expired!

Report job

Related Jobs

Jobstinger