Hybrid Senior InfoSec Analyst — Policy & Response

Cybersecurity Jobs; Little Rock (AR); Hybrid; USD 99,000 - 129,000; Full time

Job summary

Cybersecurity Jobs in Little Rock, AR is seeking a Senior Information Security professional to design and govern enterprise security programs, ensuring confidentiality, integrity, and access across systems.

You will lead policy development, risk management, vulnerability management, incident response, and third-party risk programs, collaborating with partners to meet regulatory standards and improve overall security posture.

Qualifications

• Bachelor’s degree in Business, Computer Science, MIS, or a related field.
• Five years of IT security experience if no degree.
• Minimum five years of IT security experience with complex system technology.
• Advanced knowledge of at least one security framework (HIPAA, HITRUST, ISO/IEC 27001, ITIL, NIST, COBIT, ITL).
• Professional security management certifications such as HITRUST (CCSFP), CISSP, CISM, CISA preferred.

Responsibilities

• Provide guidance and policy expertise for data security, including data classification, storage, transmission, and lifecycle; set baseline configurations and monitor data governance.
• Set security policy and enforcement for standards such as file permissions, encryption, cloud data security, network assets, and endpoint requirements.
• Provide or support network monitoring solutions within SOC/SIEM implementation.
• Perform initial incident response functions and support incident response plans and capabilities using security concepts and best practices.
• Support investigations, including logging and monitoring activities, securely provisioning resources, testing disaster recovery plans, and addressing personnel safety and security concerns.
• Oversee implementation, configuration, maintenance, and changes for network security capabilities and assets.
• Manage account security across account security systems, including privileged access management entitlement review and approvals.
• Conduct usage audits, verify removal and retirement of accounts, approve launcher requests, and provide end user support.
• Create, modify, delete, and retire member accounts, and manage role entitlement processes.
• Maintain Workday integration, and manage access management application/system updates and testing.
• Provide guidance to business partners on information security issues and identified security risks.
• Create, manage, and enforce information security policy and provide oversight of framework compliance.
• Manage enterprise audit remediation and CAP management, and manage the vulnerability management plan.
• Conduct anti-phishing campaigns and manage the information security awareness and training program.
• Manage the third-party risk management program.
• Set security requirements, standards for mobile and web security, and security requirements for IoT devices.
• Provide requested evidence and artifacts for security-related assessments and audits; coordinate and schedule required enterprise security assessments.
• Coordinate quality of outside vendor-provided security assessments, risk assessments, and penetration testing of enterprise assets.
• Oversee static and dynamic scanning of internally developed software and report to support remediation of code vulnerabilities.
• Review SDLC documentation for compliance with company and regulatory standards as applicable.
• Provide technical consultation as required. Other duties may be assigned.

Skills

Data security

Policy expertise

Incident response

Security monitoring

Access management

Vulnerability management

Audits & compliance

Education

Bachelor’s degree

Tools

HITRUST

CISSP

CISM

CISA

HIPAA

ISO/IEC 27001

ITIL

NIST

COBIT

ITL

SOC

SIEM

Workday

SDLC

Job description

Cybersecurity Jobs in Little Rock, AR is seeking a Senior Information Security professional to design and govern enterprise security programs, ensuring confidentiality, integrity, and access across systems.

You will lead policy development, risk management, vulnerability management, incident response, and third-party risk programs, collaborating with partners to meet regulatory standards and improve overall security posture.