Location: Chandler, AZ
Salary: $69.00 USD Hourly - $74.00 USD Hourly
Description: Information Security Analyst - Critical Infrastructure Lifecycle ManagementLocation: Chandler, AZ (Hybrid)
Employment Type: 12-month Contract (Potential to Extend)
Conversion Opportunity: Yes
About the RoleWe are seeking an experienced
Information Security Analyst (ISA4) to support the development, execution, and operational maturity of our
Critical Infrastructure & Control Plane Resiliency Program. In this role, you will help identify, assess, and strengthen the resiliency of enterprise-critical systems and dependencies whose failure could disrupt essential services or impact regulatory compliance.
You will collaborate closely with Security Architecture, Cybersecurity Governance, Infrastructure Engineering, and third-party assessment partners to conduct assessments, lead structured resiliency reviews, and support ongoing lifecycle management.
This position requires excellent communication skills, the ability to engage with senior leaders, and a strong executive presence.
What You'll DoCritical Infrastructure Inventory & Governance- Support creation and maintenance of an authoritative inventory of critical infrastructure, including applications, control-plane systems, components, and dependencies.
- Ensure assets are accurately documented, tagged, and governed in systems of record (e.g., ServiceNow/BAM).
- Validate CI scope, definitions, and ownership in alignment with approved frameworks and program direction.
CI Assessment & Resiliency Reviews- Execute assessments using approved cyber-resiliency frameworks and control baselines.
- Participate in and document Structured Resilience Reviews, evaluating:
- System architecture and design
- Control planes and interdependencies
- Observability, recovery readiness, and non-functional requirements
- Identify and communicate gaps, risks, and opportunities to enhance resiliency.
Remediation Planning & Tracking- Consolidate remediation actions from reviews and third-party assessments.
- Assist in prioritizing remediation based on risk, impact, and feasibility.
- Partner with system owners and RAUs to estimate, track, and validate remediation progress.
Lifecycle Management Process Support- Contribute to building a sustainable Critical Infrastructure Lifecycle Management process, including assessment cadence, ownership models, remediation tracking, and system decommissioning criteria.
- Support ServiceNow/SOR enhancements for CI tagging and process automation.
- Assist in transitioning lifecycle responsibilities to operational owning teams.
Program & Stakeholder Engagement- Support strategic execution across CI workstreams.
- Prepare materials for executive updates, roadmaps, and leadership communications.
- Coordinate with internal and independent assessment teams to support benchmarking and continuous improvement.
Required Qualifications- 7+ years in information security, cyber resiliency, infrastructure risk, or technology risk management.
- Strong background in system-level assessments across large, complex enterprise environments.
- Solid understanding of critical infrastructure concepts (e.g., control planes, dependencies, recovery mechanisms).
- Experience with enterprise governance processes and systems of record like ServiceNow.
- Proven ability to clearly document technical and non-technical requirements for senior technical leaders and executives.
- Strong collaboration skills across security, infrastructure, governance, and third-party teams.
- Excellent communication skills and demonstrated professional presence when working with high-level stakeholders.
Preferred Qualifications- Experience in resiliency-by-design, lifecycle management, or large-scale infrastructure programs.
- Familiarity with cyber-resiliency or operational-resilience frameworks.
- Experience facilitating structured workshops, technical review sessions, or assessment forums.
- Previous involvement in application or infrastructure assessments or benchmarking programs.
By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively "Judge") to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.
Contact: This job and many more are available through The Judge Group. Please apply with us today! 
Never miss an opportunity! Create an alert based on the job you applied for.