Senior Information Security Analyst

What you'll do:

Governance, Risk, and Compliance

Reviews cybersecurity rules and regulations and consults with internal customers to determine activities necessary for adherence with requirements

Develops strategies to validate compliance with new and existing rules and regulations

Develops and implements security standards and procedures to safeguard resources ensuring compliance with HIPAA, NIST, FedRAMP and/or HITRUST requirements

Evaluates security risks balancing business drivers, best practices and external drivers

Provides proactive solutions or recommendations through collaboration across business units

Provides training to security team and internal customers on regulations and contractual security requirements.

Security Operations and Vulnerability Management

Recommends and assists with evaluation of security tooling

Supports vulnerability management activities. Validates creation, documentation, and completion of Plans of Action and Milestones (POA&Ms)

Business Continuity Planning/Disaster Recovery (BCP/DR)

Leads and/or partners on computer security incident response efforts including but not limited to preparing executive summaries, recommending mitigation strategies, and tracking remediation efforts

Facilitates BCP/DR planning for assigned systems including coordination of documentation and testing

Documentation and Reporting

Leads the creation and ensures the ongoing maintenance of documentation for multiple systems including but not limited to risk assessments, security plans, and disaster recovery plans

Validates compliance of documentation with government and industry standards

Maintains accurate and up-to-date documentation of incidents, tickets, vulnerabilities, and compliance activities

Prepares reports for management detailing the status of security incidents, audit findings, and risk assessments

Collaboration and Communication

Owns and delivers tasks on projects for the security team and with internal customer projects. Ensures timely completion of deliverables

Represents security on initiatives across Telligen. Works closely with internal customers to ensure implementation of security controls and best practices

Stays current with industry trends, emerging threats, security technologies, and pertinent regulations

Provides guidance and mentorship to other members of the security team

Provides timely responses, uses professional communication, and approaches vulnerability and risk management from the perspective of business enablement

Required Skills and Experience:

• 2-year degree in Information Technology, Information Security, or related field and/or equivalent training and/or experience

Analyst Requirements:

• 2-5 years of work experience in IT with six or more months of experience in an information security role

Senior Analyst Requirements:

• 5-7 years of work experience in IT
• 3 or more years of experience must be in an information security role with demonstrated working knowledge of information security, federal and state rules and regulations, company/business unit operations, compliance policies, procedures, and/or programs in area of assignment. 

Preferred Skills and Experience:

• Bachelor’s degree in Computer Science, MIS, Information Assurance or related field is preferred
Analyst Preferred Experience:
• Security+, SSCP, or CISA 
Senior Analyst Preferred Experience:
Industry standard certification (CISSP, SSCP, GSNA or CISA) is preferred
Experience with NIST, ISO, and HIPAA requirements/guidance is highly desirable.