[Hiring] Information Security Analyst @Monks

Monks; United States; Remote; USD 60,000 - 80,000; Full time

Job summary

An established industry player is seeking a remote Information Security Analyst to enhance their Information Security Management System. This role involves assessing risks, ensuring compliance with security frameworks, and implementing technical controls. The ideal candidate will have a strong background in information security, risk management, and excellent communication skills. This position offers an exciting opportunity to contribute to the security posture of a forward-thinking organization, where your expertise will help shape the future of information security practices. If you're passionate about protecting information assets and eager to grow in a dynamic environment, this is the perfect role for you.

Qualifications

• 5+ years of experience in Information Security roles.
• Strong knowledge of security on networking and cloud infrastructure.

Responsibilities

• Implement and improve the company's Information Security Management System.
• Evaluate compliance status and identify risks related to information security.

Skills

Information Security

Risk Assessment

Communication Skills

Problem-Solving Skills

Attention to Detail

Education

Bachelor's degree in Computer Science

Bachelor's degree in Computer or Systems Engineering

Tools

ISO 27001/2

SOC2

NIST-800

Job description

Apr 19, 2025 - Monks is hiring a remote Information Security Analyst. Location: Portugal.

Please note that we will never request payment or bank account information at any stage of the recruitment process. As we continue to grow our teams, we urge you to be cautious of fraudulent job postings or recruitment activities that misuse our company name and information. Please protect your personal information during any recruitment process. While Monks may contact potential candidates via LinkedIn, all applications must be submitted through our official website (monks.com/careers).

Job Brief

This position is intended to be involved in the implementation and improvement of administrative and technical controls of the company's Information Security Management System. This person should understand the risk assessment process to detect new threats, contribute in the action plan development and promote the progress of control implementation and evolution. The position will cover compliance activities, third parties risk assessments, management of clients requirements, internal awareness and technical controls evaluation.

Key accountabilities:

• Contribute with the implementation of the global ISMS (based on ISO27001) over the region.
• Evaluate the compliance status of processes and technology implementations and plan actions to align to the security framework.
• Identify risk related to information security in the technical environment, the relationships with third parties or any component of the company's context.
• Understand about technical and administrative controls in the different areas: networking, operations, access management, SSDLC, cloud security, end-point protection, physical security, third party risk assessment, organisation security and legal compliance.
• Act as a point of contact for third parties questions regarding information security.
• Analyse clients requirements regarding information security and evaluate their accuracy. Follow up the actions needed to comply with those requirements.
• Identify security threats and risks over processes, conducts, technology and context which may affect the information confidentiality, integrity or availability.
• Assist in the definition and construction of security measures to lower the risks identified.
• Solve low complex issues independently with minimum supervision and escalate more complex issues to accurate staff.
• Contribute in the development of awareness material and the process of delivery and measurement.
• Perform routine activities to ensure compliance with security frameworks and legislation.
• Investigate on technologies that could improve the security baseline and the compliance (e.g. DLP, end-point protection, network security, security and vulnerabilities assessment).

Minimum Qualifications:

• Bachelor's degree in Computer Science, Computer or Systems Engineering or equivalent.
• Minimum of 5 years of experience in related positions.
• Solid knowledge of security on networking, cloud, infrastructure configuration, end-point protection and SDLC.
• Knowledge of the standards ISO 27001/2, SOC2, NIST-800.

Qualities:

• Good communication and social skills.
• Ability to confidently present findings to those with either a technical or non-technical background.
• Self-directed, resourceful, and a critical thinker with attention-to-detail and proactive problem-solving skills.
• Ability to self-organise and plan activities with commitment towards results.
• Ready to learn new contents both from others or self-learned.
• Looking forward to self-improvement and suggesting improvements to processes or activities.

Preferred Qualifications:

• +3 year of experience in Security Risk Management, Information Security, Security controls or Security/IT Audit.
• Information Security Certification (e.g. CISSP, Comptia Sec, CISM, CRISC, etc).