Configuration Compliance Specialist

TechDigital Group; Charlotte (NC); On-site; USD 90,000 - 120,000; Full time

Job summary

TechDigital Group is seeking a Security configuration compliance analyst to develop, test and implement configuration compliance policies and technical controls in support of the Secure Configuration Program. You will work with technology teams to validate baseline policy controls and remediate non-compliance.

You will also ensure consistently accurate scans and reports are generated and engage on multiple technology products at one time, contributing to risk mitigation across enterprise

Qualifications

• 5+ years of information security or risk management experience.
• Experience configuring and managing enterprise security controls.
• Experience with vulnerability and configuration scanning tools (Symantec, Qualys, Tanium, Tenable).
• Familiar with risk management frameworks and financial industry regulations.
• System administration experience (Unix/Windows).
• Scripting with Python, Bash, PowerShell, or regex.

Responsibilities

• Develop, test and implement configuration compliance policies and controls.
• Validate baseline policy controls with technology teams and remediate non-compliance.
• Ensure consistent scans and reports across multiple technology products.
• Engage with multiple technology products simultaneously.

Skills

Information security

Risk management

Policy compliance

Vulnerability scanning tools

System administration

Scripting (Python/Bash/PowerShell)

Regulatory awareness

Tools

Symantec

Qualys

Tanium

Tenable

Job description

Security configuration compliance analyst.

Develop, test and implement configuration compliance policies and technical controls in support of the Secure Configuration Program. Work with technology teams to validate baseline policy controls and remediate non-compliance. Ensure consistently accurate scans and reports are generated. Engage on multiple technology products at one time.

Required qualifications, capabilities, and skills

• 5+ years of experience in information security, technology risk management or related field.
• Demonstrated ability configuring and managing technical security controls at an enterprise level with a proven record of partnering with line of business partners and implementing effective risk mitigation strategies.
• Experience with vulnerability and configuration compliance scanning tools such as Symantec, Qualys, Tanium, Tenable, etc.
• Familiarity with risk management frameworks and financial industry regulatory requirements.
• Familiarity as a system admin for Unix, Windows, or workstation administration.
• Familiarity with python, bash, powershell and/or regex as well as the ability to develop scripts and run code.