Information Security Analyst

Location US-CA-Thousand Oaks | UK-LND-London | US-DC-Washington, D.C.
Posted Date 3 weeks ago(3/1/2018 11:45 AM)
Req #
# Positions
Information Technology (US) - Systems Management


The Information Security Analyst will be responsible for assessing compliance with internal and external security requirements, identifying risks, and communicating the security posture to Technology management and other managers across the business including Legal and HR. The Information Security Analyst will act as the subject matter expert for Security Governance, Risk, and Compliance.

Essential Job Functions & Responsibilities

  • Liaise between our managed security services vendor (Rapid7) and internal IT teams to prioritize and remediate vulnerabilities and risks
  • Monitor threat intelligence feeds and security tools, escalating potential incidents.
  • Coordinate internal and external audits, scans, penetration tests and other security assessments
  • Experience with PCI and GDPR regulations as well as their technical and security compliance
  • Actively perform PCI internal self-assessments, quarterly reviews, ad hoc tests and audits and facilitate assessments performed with a Qualified Scanning Vendor (QSV).
  • Document and maintain PCI compliance
  • Review vulnerability scan results and provide recommendations for remediation to the IT Operations and Development teams.
  • Interface with technical teams, stakeholders, and leadership teams to translate security risk mitigation plans into actionable items.
  • Stay up-to-date with current security issues and regulations in the industry including researching latest findings, industry trends, and vendor-specific issues and resolutions.
  • Perform hands-on gap or risk assessments to identify significant information security risks (including applications, systems, data centers, cloud, infrastructure and vendor security risk assessments) to determine the organizational risk posture
  • Cloud, web and application security planning and design. Must be able to provide the development team advice on best practices and incorporating security into application design. 
  • Monitor and review IT Security controls to identify operational effectiveness
  • Participates in planning for future security requirements and develops and implements policies and procedures related to all facets of information security.
  • Research, test, and recommend information security products based on cost/benefit and risk reduction methodologies.
  • Assist with security awareness and training programs.
  • Understanding of information security frameworks (ISO 27001, CIS Critical Security Controls, NIST) and OWASP.
  • Serve as a liaison with IT and business area partners to identify, understand, document and advise on security requirements, impacts and risks.

Qualifications & Education

  • Candidate shall have at least 5 years of experience working within the security field with progressive skills development performing the responsibilities above.
  • The ability to multi-task and adjust to shifting priorities
  • Must be highly motivated and dependable
  • excellent communication skills with demonstrated ability to write clear, concise business communication for multiple levels (management, technical, user)
  • Requires one or more security certifications such as CISSP, CISM, CISA


Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
Share on your newsfeed