Information Security Analyst

Russell Tobin; Mason (OH); Hybrid; USD 60,000 - 80,000; Full time

Job summary

An established industry player is seeking an Information Security Analyst to enhance its security posture. This role is pivotal in managing vulnerabilities and ensuring compliance with various regulatory standards. The analyst will collaborate with cross-functional teams to track remediation efforts, analyze risks, and deliver insightful reports to leadership. This dynamic position offers the opportunity to work in a hybrid environment, balancing remote work with in-office collaboration. Join a forward-thinking organization that values security and compliance, and contribute to impactful initiatives that safeguard sensitive information.

Benefits

Comprehensive healthcare coverage

401(k) retirement savings

Life & disability insurance

Employee assistance program

Identity theft protection

Legal support

Pet insurance

Employee discounts

Qualifications

• 3+ years of experience in IT Risk or Information Security.
• Familiarity with compliance standards like SOC, ISO, PCI DSS.
• Ability to produce clear reports for stakeholders.

Responsibilities

• Monitor and analyze vulnerability assessment data.
• Support vulnerability management processes across teams.
• Provide regular updates to leadership on remediation efforts.

Skills

IT Risk Management

Information Security Compliance

Vulnerability Management

Project Management

Analytical Skills

Communication Skills

Education

Bachelor's degree in Computer Science

Tools

Nessus Pro

Qualys

Splunk

JIRA

Job description

This range is provided by Russell Tobin. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$35.86/hr - $37.14/hr

Direct message the job poster from Russell Tobin

Pay range: $35.86 – 37.14/hr. on W2 (depending on experience/interview)

Job Type: Contract Role

Shift: Monday to Friday 08:00 AM to 05:00 PM (3 days office, 2 days remote)

Job Description:

The Information Security Analyst will serve a critical role in supporting EyeMed Vision Care information security and compliance requirements and initiatives.

This role is focused on providing oversight, driving, facilitating and coordinating the management of vulnerabilities across the enterprise, rather than performing hands-on technical remediation.

The analyst will work closely with internal teams and stakeholders to ensure timely remediation efforts, providing visibility into risk status through tracking and reporting.

The analyst will also be responsible for compiling and delivering progress updates and reports to leadership and responding to client inquiries related to the organization's vulnerability management and remediation efforts.

Overall, the analyst will contribute to the organization's compliance with audits, attestations, and regulatory obligations such as HIPAA, HITRUST, SSAE-18, and PCI.

Monitor and analyze vulnerability assessment data to identify and communicate technical risks to the organization

Support the identification and impact classification for new vulnerabilities identified in the environment

Execute and support vulnerability assessments, penetration testing and social engineering activities

Provide the Information Security and IT Security team information on the emerging cyber threat landscape, including threat actor tactics, techniques, and procedures

Facilitate vulnerability management processes by tracking and coordinating remediation efforts across multiple teams

Ensure timely closure of security gaps by working with application, infrastructure, and operations teams

Support IS in achieving the vision and strategic objectives of the vulnerability program

Provide regular updates and risk summaries to leadership regarding the status of remediation efforts

Support leadership to identify capability gaps in vulnerability management services

Support responses to client and third-party security inquiries, questionnaires, and audit requests related to vulnerability management

Manage and utilize IS tools such as DLP, Code scanner, external security profile, internal and external scanning tools and scoring platforms etc. to analyze gaps in security controls

Participate in the IT SDLC program to ensure that security is included in project by default and by design

Develop strong working relationships across business, technology units and potentially clients to ensure a high degree of alignment and accountability in remediation, security compliance and client satisfaction.

Collaborate with cross-functional teams to improve security posture and embed security into existing IT and operational workflows

Assist with regulatory and compliance requirements, contributing to security audits, attestations, and certifications

Brief IS leadership on vulnerability assessment results and potential risks

Conduct analysis, aggregate and report on vulnerability data from various scanning tools and platforms

Continue self-development of knowledge, skills and abilities to better support execution of the Information Security (IS) function

Basic Qualifications

Bachelor's degree in computer science, IT or equivalent

3+ years of experience in IT Risk or IS or Compliance

Experience with major standards such as: SOC 1-2, ISO 27001/2, PCI DSS, HITRUST, SANS, NIST

Demonstrated experience in implementing compliance frameworks for financial services organizations with similar information security needs and requirements

Familiarity and understanding of a broad range of IT hardware and software products

Strong project and time management abilities

Excellent presentation, verbal communication, and written skills

Excellent analytical, problem-solving and organizational skills

Experience managing typical enterprise security and intrusion detection systems, especially in a regulated environment

Ability to work in a collaborative environment across business and technology teams

Experience in producing clear and actionable reports for technical and non-technical stakeholders

Preferred Qualifications

Certified Information Systems Security Profession (CISSP), PCI DSS, Certified HIPAA Privacy Security Expert (CHPSE), Certified Information Security manager (CISM), Global Information Assurance Certification (GIAC), or related.

Experience or knowledge with healthcare, health insurance, managed care, or regulated industries

Knowledge of CMS and HIPAA related vendor standards and requirements

Working knowledge of Security SDLC tools

Familiarity or experience with the following tools: o Security Scorecard, BitSight, SSL Labs o Nessus Pro, Qualys o Splunk, JIRA o HCL AppScan, or similar code scanning and vulnerability tools

“Russell Tobin offers eligible employees comprehensive healthcare coverage (medical, dental, and vision plans), supplemental coverage (accident insurance, critical illness insurance and hospital indemnity), a 401(k)-retirement savings, life & disability insurance, an employee assistance program, identity theft protection, legal support, auto and home insurance, pet insurance, and employee discounts with some preferred vendors.”

Seniority level

• Seniority level

  Associate

Employment type

• Employment type

  Contract

Job function

• Job function

  Information Technology

• Industries

  Staffing and Recruiting

Referrals increase your chances of interviewing at Russell Tobin by 2x

Get notified about new Information Security Analyst jobs in Mason, OH.

Information Security Analyst / Administrator

Information Security Analyst - Level 2 - Threat

Security Administrator 2 - ERP, Digital Technology Solutions

Information Security Engineer-Level 2- Cloud

Security Administrator 2 - ERP, Digital Technology Solutions

Security Administrator 2 - ERP, Digital Technology Solutions

Information Security Engineer-Level 2- Cloud

Senior Associate, Cyber Security & Implementation

Information Security Automation Engineer

Manager, Information Security Innovation Accelerator Engineer (Automation and Innovation)

Information Security Analyst 2 - Risk Management, Digital Technology Solutions

Information Security Analyst 2 - Risk Management, Digital Technology Solutions

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.