Job Details : IT Security Analyst
IT Security Analyst
My client is seeking an IT Security Analyst to join their team for a full time hybrid position.
Here's what you'll do :
- Evolve Security Strategy : Continuously update security policies, controls, and procedures to stay ahead of evolving threats and leverage new technologies, ensuring a robust security posture.
- Navigate Client Security Assessments : Partner with clients on security assessments, analyze their findings, and champion adjustments to strengthen our overall security posture.
- Guarantee Compliance : Meticulously track remediation actions and configurations to guarantee adherence to industry standards (SOC2, NIST 800-53, ISO 27001).
- Manage IT Risk : Collaborate on risk assessments by identifying IT vulnerabilities and driving positive security metrics.
- Champion Proactive Security : Conduct proactive internal audits, identify and address policy gaps, and implement corrective measures to fortify security.
- Support Efficient Audits : Provide comprehensive documentation and insightful perspectives to streamline external audits.
- Empower a Security-Conscious Workforce : Develop and deliver engaging security awareness training, fostering a culture of security awareness among employees.
- Maintain Executive Visibility : Regularly inform senior management about the security landscape, including incidents, response times, and ongoing risk assessments.
- Thwart Security Threats : Investigate and neutralize security threats, effectively counter phishing attempts, and identify root causes to prevent future incidents.
- Stay Ahead of the Curve : Continuously monitor for emerging threats and technological advancements to proactively enhance our security posture.
- Align with Client Security Needs : Work with legal and administration teams to ensure alignment with client security and compliance requirements.
- Cultivate a Security-Minded Culture : Build a culture of information security understanding and adherence across all departments.
We're looking for someone with :
- 3-5 years of experience in IT, data governance, or information security (degree in Information Systems a plus).
- Familiarity with data protection regulations (GDPR, CCPA, etc.).
- Solid understanding of information security principles and practices.
- Excellent written and verbal communication skills.
- Strong analytical and problem-solving abilities.
- Ability to thrive in a collaborative and independent work environment.
- Meticulous attention to detail and exceptional organizational skills.
- Adaptability to a fast-paced environment with shifting priorities.
Bonus points if you have :
- Certifications (CGRC, SSCP, or similar information security certifications).
- Experience developing and delivering security awareness training.
- A passion for staying up-to-date on the latest security threats and trends.
30+ days ago