Config Compliance Specialist

TechDigital Group; Charlotte (NC); On-site; USD 90,000 - 120,000; Full time

Job summary

TechDigital Group is seeking a Security configuration compliance analyst to develop, test, and implement configuration compliance policies and technical controls in support of the Secure Configuration Program.

The role involves collaborating with technology teams to validate baseline policy controls, remediate non-compliance, and ensure accurate scans and reports across multiple technology products.

Qualifications

• 5+ years of experience in information security, technology risk management or related field.
• Experience configuring and managing technical security controls at an enterprise level with risk mitigation.
• Experience with vulnerability and configuration compliance scanning tools (Symantec, Qualys, Tanium, Tenable).
• Familiarity with risk management frameworks and financial industry regulatory requirements.
• Familiarity as a system admin for Unix/Windows/workstations.
• Familiarity with Python, Bash, PowerShell and/or regex; ability to develop scripts.

Responsibilities

• Develop, test and implement configuration compliance policies and technical controls in support of the Secure Configuration Program.
• Work with technology teams to validate baseline policy controls and remediate non-compliance.
• Ensure consistently accurate scans and reports are generated. Engage on multiple technology products at one time.

Skills

Information security

Risk management

Policy development

Cross-team collaboration

Tools

Symantec

Qualys

Tanium

Tenable

Job description

Security configuration compliance analyst.

Develop, test and implement configuration compliance policies and technical controls in support of the Secure Configuration Program.

Work with technology teams to validate baseline policy controls and remediate non-compliance. Ensure consistently accurate scans and reports are generated. Engage on multiple technology products at one time.

Required qualifications, capabilities, and skills

• 5+ years of experience in information security, technology risk management or related field.
• Demonstrated ability configuring and managing technical security controls at an enterprise level with a proven record of partnering with line of business partners and implementing effective risk mitigation strategies.
• Experience with vulnerability and configuration compliance scanning tools such as Symantec, Qualys, Tanium, Tenable, etc.
• Familiarity with risk management frameworks and financial industry regulatory requirements.
• Familiarity as a system admin for Unix, Windows, or workstation administration.
• Familiarity with python, bash, powershell and/or regex as well as the ability to develop scripts and run code.