Information Security Analyst

Information Security Analyst Req number: R8351 Employment type: Full time Worksite flexibility: Hybrid Who we are CAI is a global services firm with over 9,000 associates worldwide and a yearly revenue of $1.3 billion+. We have over 40 years of excellence in uniting talent and technology to power the possible for our clients, colleagues, and communities. As a privately held company, we have the freedom and focus to do what is right—whatever it takes. Our tailor-made solutions create lasting results across the public and commercial sectors, and we are trailblazers in bringing neurodiversity to the enterprise. Job Summary We are looking for a motivated Information Security Analyst ready to take us to the next level! If you have experience monitoring and improving information security controls, managing security risks and compliance activities and are looking for your next career move, apply now. Job Description We are looking for an Information Security Analyst to monitor and improve information security controls, manage security risks and compliance activities, and support the protection of enterprise systems, applications, and data assets. This position will be a full-time contract and hybrid. What You'll Do Monitor information security controls and processes to ensure they are operating effectively and aligned with organizational requirements Advise stakeholders on information security risks, vulnerabilities, and remediation strategies Coordinate and execute information security initiatives and projects across the organization Respond to and assist with the investigation and resolution of security incidents Develop, publish, and maintain information security policies, procedures, standards, and guidelines Conduct organization-wide data classification assessments and security audits Track, manage, and support remediation activities resulting from security assessments and audits Collaborate with IT management, Internal Audit, and business stakeholders to identify and address security vulnerabilities Monitor compliance with established security policies, standards, and regulatory requirements Develop and maintain security awareness programs and provide user education on security best practices Perform security research and remain current on emerging threats, vulnerabilities, and industry trends Prepare and maintain security documentation, reports, procedures, alerts, notifications, and related communications Support governance, risk, and compliance activities across enterprise technology environments What You'll Need Required: Experience with Governance, Risk, and Compliance (GRC) programs and activities Experience supporting information security operations, policies, and compliance initiatives Knowledge of information security principles, frameworks, and industry best practices Experience conducting security assessments, audits, and remediation activities Experience identifying, tracking, and managing security risks and vulnerabilities Experience developing and maintaining security policies, standards, and procedures Experience responding to and supporting information security incident investigations Strong analytical, troubleshooting, and problem-solving skills Strong written and verbal communication skills Experience creating security documentation, reports, and user awareness materials Ability to work effectively with technical teams, auditors, management, and business stakeholders Preferred: Industry experience in information security Knowledge of network security concepts including protocol analysis, anomaly detection, and network troubleshooting Knowledge of Windows and Linux/Unix server and workstation security best practices Experience with vulnerability assessment and security scanning tools Experience assessing databases, web applications, Windows servers, Unix servers, and data networks Knowledge of information security standards, regulations, and compliance frameworks Experience supporting security governance and enterprise risk management programs Relevant security certifications such as Security+, CISSP, CISM, or related credentials Physical Demands Ability to safely and successfully perform the essential job functions consistent with the ADA and other federal, state and local standards Sedentary work that involves sitting or remaining stationary most of the time with occasional need to move around the office to attend meetings, etc. Ability to conduct repetitive tasks on a computer, utilizing a mouse, keyboard, and monitor Reasonable accommodation statement If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employment selection process, please direct your inquiries to application.accommodations@cai.io or (888) 824 – 8111. EEO Statement It is the policy of Computer Aid, Inc.(CAI) not to discriminate against any employee or applicant