Lead Information Security Analyst

Job Description:

• Lead IT governance, risk assessment, and security compliance activities
• Support enterprise risk management and compliance with SOC 2, NIST Cybersecurity Framework, and other regulations and frameworks
• Coordinate the review, development, implementation, and documentation of ISMS policies, processes, procedures, and practices
• Lead and manage GRC functions, including compliance monitoring, audit management, and risk assessment
• Prepare for and manage compliance audits, assessments, and regulatory reviews
• Maintain security documentation, evidence, and audit trails
• Develop, maintain, and enforce information security policies and procedures
• Conduct vendor risk management security assessments, onboarding, and reviews
• Collaborate with cross-functional teams to integrate security and compliance into business processes
• Mentor and support Information Security Analysts
• Monitor security posture, identify threats, and recommend remediation measures
• Conduct vulnerability assessments, penetration testing, and security assessments
• Participate in incident response and conduct post-incident analysis
• Stay current with security trends, vulnerabilities, and emerging compliance requirements

Requirements:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field
• 5-10+ years of audit, compliance, or technical experience
• Excellent knowledge of IT security control trends and auditing and compliance best practices
• Effective written and verbal communication skills to articulate complicated IT controls and compliance issues
• Relevant training and/or industry certifications in auditing, compliance, or IT security
• Ability to manage multiple priorities in a fast-paced, dynamic environment
• Comfortable navigating ambiguity
• Entrepreneurial mindset
• Must reside in one of the registered states: California, Colorado, Connecticut, District of Columbia, Delaware, Florida, Georgia, Illinois, Indiana, Massachusetts, Maryland, Michigan, Minnesota, North Carolina, New Hampshire, New Jersey, Nevada, New York, Ohio, Pennsylvania, Rhode Island, South Carolina, Tennessee, Texas, or Virginia
• Must be authorized to work directly for any employer in the United States without visa sponsorship or transfer

Benefits:

• Be an integral part of a high-growth organization
• Competitive compensation package
• Group medical, dental and vision insurance
• Employer-paid life and disability insurance
• Annual well-being stipend
• Eligible employees may contribute to a 401(k) plan with an advantageous employer contribution model
• Annual incentive bonus plan participation