Information Security Analyst

Harvey Nash Inc.; Frankfort (KY); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Harvey Nash is seeking an Information Security Analyst with GRC, audit and compliance support experience in Frankfort, KY. This hybrid role requires 3 days onsite and 2 days remote weekly as part of a long-term indefinite contract.

The candidate should have 4–7 years in information security, familiarity with standards such as NIST 800-53, ISO 27001, SOC 2, HIPAA, PCI-DSS, or GDPR, and experience in coordinating security scans and audits.

Qualifications

• 4–7 years of informa­tion security, GRC, or audit/compliance support experience.
• Familiarity with NIST 800-53, ISO 27001, SOC 2, HIPAA, PCI-DSS, or GDPR.

Responsibilities

• Coordinate with COT to schedule security scans (penetration testing, vulnerability scans, etc.) and review, interpret and respond to findings.
• Experience participating in security audits and assembling evidence packages.

Skills

GRC

Security Audits

NIST 800-53

ISO 27001

SOC 2

HIPAA

PCI-DSS

GDPR

OWASP Top 10

API Security

CI/CD Security

Secrets Management

Agile Processes

Education

Bachelor's degree

Job description

We’re in search of an experienced Information Security Analyst with GRC (Governance, Risk, and Compliance),Audit & Compliance Support experience.

Job Title

Information Security Analyst

Location

Frankfort, KY (Hybrid Job)

Duration

Long-term Indefinite Contract

Status

Hybrid: 3 Days onsite from Frankfort, KY, 2 days remote weekly.

MUST HAVE skills

• 4–7 years of experience in information security, GRC, oraudit/compliance support.
• Familiarity with standards such as NIST 800-53, ISO 27001, SOC 2, HIPAA,PCI-DSS, or GDPR.
• Experience participating in security audits and assembling evidencepackages.
• Coordinate with COT to schedule security scans (Penetration testing,vulnerability scans, etc.) and review, interpret and respond to findings.
• Knowledge and understanding of:
• Open Worldwide Application Security Project(OWASP) Top 10
• API Security (OAuth2, OpenID Connect)
• Container security
• Ability to review CI/CD pipelineconfigurations (i.e. Jenkins, GitHub Actions, Azure DevOps) for securitycontrol compliance
• Ability to review secrets managementpractices (i.e. HashiCorp Vault, AWS Secrets Manager, etc.) for policycompliance.
• Understanding of application layer threats and controls
• Knowledge of and experience with Agileprocesses

Education Requirements

• Bachelor's degree, or equivalent combinationof recent, relevant work experience.

About us

Harvey Nash is a national, full-service talent managementfirm specializing in technology positions. Our company was founded with amission to serve as the talent partner of choice for the information technologyindustry.

Our company vision has led us to incredible growth andsuccess in a relatively short period of time and continues to guide us today.We are committed to operating with the highest possible standards of honesty,integrity, and a passionate commitment to our clients, consultants, andemployees.

We are part of Nash Squared Group, a global professionalservices organization with over forty offices worldwide.

https://www.harveynashusa.com/