Cloud & AI Security Lead — DevSecOps & Compliance

ISO New England Inc.; Holyoke (MA); Hybrid; USD 135,000 - 168,000; Full time

Benefits offered by this job

Hybrid work environment (3 days/week)

Relocation assistance

Tuition reimbursement and professional

Onsite gym

Wellness programs

401(k) and employer contributions

Job summary

ISO New England Inc. is seeking a seasoned Cybersecurity Analyst to advance enterprise security across cloud, AI/ML, and DevSecOps environments in a hybrid U.S. role.

You’ll drive governance, risk, and compliance with NERC CIP, NIST, CIS controls, and SOC requirements while collaborating with IT and business teams to embed security into design and operations. The role requires 5+ years in cybersecurity with cloud platform experience (AWS/Azure) and hands-on security controls, vulnerability

Qualifications

• 5+ years of experience in cybersecurity, security engineering, or AI security roles.
• 3+ years of security experience in AWS and/or Azure cloud platforms.
• Experience designing and implementing enterprise security solutions across cloud, infrastructure, applications, and hybrid environments.
• Hands-on experience with AWS and/or Azure cloud platforms, including IAM, CSPM, CIEM, container security, and cloud security best practices.
• Experience integrating security controls into CI/CD pipelines and DevSecOps environments.
• Knowledge of AI security concepts, including Generative AI, LLM security, AI governance, and AI risk management.
• Experience performing vulnerability management, security assessments, configuration reviews, threat modeling, and cybersecurity risk assessments.
• Knowledge of enterprise security technologies including SIEM, EDR/XDR, CNAPP, DSPM, vulnerability management, identity and access management, encryption, and security monitoring platforms.
• Familiarity with cybersecurity frameworks and regulatory standards including NERC CIP, NIST Cybersecurity Framework, NIST SP 800 Series, ISO 27001, CIS Controls, and applicable regulatory requirements.

Responsibilities

• Develop and implement enterprise cybersecurity strategies aligned with business objectives, regulatory requirements, and industry best practices.
• Ensure compliance with cybersecurity frameworks and regulations including NERC CIP, NIST frameworks, CIS controls, FERC regulations, and SOC1/SOC2 requirements.
• Implement enterprise security controls across cloud, infrastructure, applications, AI/ML environments, and regulated OT systems.
• Conduct cloud security assessments across AWS and Azure environments, including IAM, CSPM, CIEM, container security, and configuration management.
• Integrate security controls throughout CI/CD pipelines and DevSecOps processes, including automated vulnerability scanning, IaC validation, and policy enforcement.
• Assess and secure AI/ML systems, Generative AI applications, and LLM integrations through governance, access controls, data protection, prompt security, and AI threat modeling.
• Perform vulnerability assessments, network security assessments, configuration reviews, compliance validation, risk assessments, and remediation tracking across enterprise and cloud environments.
• Support enterprise security monitoring, logging, threat detection, incident response, and audit evidence collection using SIEM, EDR/XDR, CNAPP, DSPM, vulnerability management, and related security platforms.
• Collaborate with cloud, infrastructure, application development, enterprise architecture, IAM, network, compliance, and business teams to integrate security into system design and operational processes.
• Identify, assess, prioritize, and communicate cybersecurity risks while developing effective mitigation strategies.
• Develop and maintain security policies, standards, governance documentation, compliance reporting, and security best practices.
• Monitor emerging cybersecurity threats, AI security risks, industry trends, and regulatory changes to continuously enhance the organization’s security posture.
• Provide technical mentorship, and cross-functional guidance while promoting cybersecurity awareness, operational excellence, and secure technology adoption.

Skills

Cloud security

DevSecOps

AI security

Vulnerability management

Regulatory compliance

Threat modeling

Cross-functional collaboration

Security governance

Education

Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related field

Advanced degree such as Master’s in Cybersecurity Management, Information Assurance, Artificial Intelligence, or related field

Tools

SIEM

EDR/XDR

CNAPP

DSPM

IAM

Encryption

Job description

ISO New England Inc. is seeking a seasoned Cybersecurity Analyst to advance enterprise security across cloud, AI/ML, and DevSecOps environments in a hybrid U.S. role.

You’ll drive governance, risk, and compliance with NERC CIP, NIST, CIS controls, and SOC requirements while collaborating with IT and business teams to embed security into design and operations. The role requires 5+ years in cybersecurity with cloud platform experience (AWS/Azure) and hands-on security controls, vulnerability