Information Security Analyst

Role & responsibilities

• Coordinate external audits and evidence collection related to SOC2, SOX, NIST Cyber Security Framework and other future frameworks.
• Perform vendor security evaluations of existing and new vendors.
• Manage and monitor the Risk Register.
• Collaborate with Engineering, Legal, and IT in maintaining and updating company security policies.
• Assist in completion of customer assurance activities, such as security questionnaires, RFIs or RFPs.
• Assist with Business Impact Assessments and Business Continuity Planning activities.
• Own our inventory initiatives regarding data storage and processing.
• Become a go to resource for being able to translate how the latest laws and regulations impact our technical teams.

Preferred candidate profile

• 6+ years of experience with security auditing and maintaining information security controls.
• Have 6+ years technical knowledge and understanding of networking, IaaS platforms, monitoring, auditing, alerting infrastructure, scripting.
• Have a working knowledge of SOC2 Trust Services Principles, SOX, GDPR, CCPA, NIST CSF, etc.
• Has already attained or interested in industry qualifications such as GRCP, GISF or CompTIA Security+
• Have a passion for working in cyber security and governance, risk and compliance.
• Are experienced in evidence collection.
• Detail orientated and organised.
• Have experience completing customer security questionnaires in support of enterprise-level accounts.
• Are experienced in evaluating, leading and running business continuity and disaster recovery exercises.
• Working with tight deadlines and adept at multi-tasking.

Seeks initiative and strives for continuous improvement.