Information Security Analyst

1Hybrid ? Contiguous US only, must be within one hour of client locations ( NYC,NY/San Francisco, CA/ Richmond, VA/Philadelphia, PA/Kansas City, KS/Minneapolis, MN/ Atlanta, GA/Boston, MA/ Dallas, TX/ Cleveland, OH/Chicago, IL/ St Louis, MO)office, Richmond HIGHLY preferred; hybrid preferred, but if they are remote, they need to be onsite in Richmond, VA for their first week of employment ? client will not pay for this

Responsibilities:

Provides research and analysis of information security data and responds to inquiries; identifies issues of varying complexity in order to develop recommendations to solve problems and issues related to information security. Provides guidance in identifying, evaluating, and developing processes and procedures that are effective, meet requirements and IS standards, and follow IS policy and/or IS risk compliance regulations. Provides reporting and analysis to assist in executing solutions and may provide consultation to clients, colleagues, and management. Participates in cross-functional linked teams to address IS policy/risk or compliance issues. Determines best practices and suggests how to improve current practices and/or monitoring. Experienced-level position requires developing career in field and gaining knowledge of industry practices. Requires moderate level of experience and proficiency in field.

Principal Duties and Responsibilities:

Performs complex analysis of business issues utilizing established methodology and tools within information security areas.

Works with clients and other resources to assess current capabilities, identify customer needs, and recommend business process improvements within information security areas.

Provides some complex support and collaboration in completing analysis, providing ad-hoc reports, information or process mapping, and/or alignment of the business and related resources.

Contributes to and participates in process improvement and solution discussions, and may present outcomes in written and verbal format to senior management.

Develops and designs new business processes and the elaboration and updating of existing business processes within information security areas.

Participates in cross-functional team initiatives and process improvement projects within information security areas.

Performs other related duties as assigned.

Qualifications:

Three to five years of relevant work experience in or around information security experience

Experience with the facilitation of assurance engagements

Direct experience with FISMA/NIST frameworks

Requirements

Must-Have Skills:

1) Experience in Governance, Risk, & Compliance

2) 3-5 years of relevant work experience in or around information security experience

3) Experience with the facilitation of assurance engagements

4) Direct experience with FISMA/NIST frameworks