Information Security Analyst

Cybersecurity Jobs; Miami (FL); Sur place; USD 80 000 - 90 000; Plein temps

Avantages offerts par ce poste

Health & welfare

401(k)

Tuition assistance

Incentive pay

Résumé du poste

Hellmann Worldwide Logistics is seeking a Security Analyst to support information security governance, risk, compliance, and operations across the Americas from Miami. You will develop and enforce regional security standards, lead GRC activities, and drive remediation with Nessus, SAST, DAST, and CI/CD.

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related field.
• Minimum 2 years of technical experience in Information Security or related IT security discipline.
• Experience with GRC frameworks including risk management, auditing, and compliance.

Responsabilités

• Develop, review, and enforce regional Information Security Standards (policies) for the Americas.
• Lead Governance, Risk, and Compliance (GRC) activities including risk management, compliance reviews, and control validation.
• Identify, quantify, monitor, and report information security risks using risk quantification controls in Jira.
• Review security contracts and agreements for implications and escalate concerns as needed.
• Support ISO 27001 and related framework activities, including governance reviews and control validation.
• Publish and maintain security policies and procedures in SharePoint.
• Translate global security policies into regional SOPs aligned with local laws.
• Monitor regional and local laws and regulations affecting information security.
• Coordinate vulnerability management, security scanning, and remediation tracking with Nessus, SAST, and DAST.
• Support penetration testing and red/blue/purple team activities and remediation.
• Monitor security system health and report KPIs and project status.
• Coordinate security safeguards in line with global standards and security teams.
• Validate security tooling outputs and support production release security.
• Investigate, document, and report security incidents with impact analysis.
• Support DRP and BCM framework maintenance.
• Act as backup for secure-pipeline security coverage in DevSecOps.
• Participate in production release readiness reviews for security requirements.
• Support CI/CD security integration with development and ServiceDesk Ops teams.
• Support SAST/DAST scanning and vulnerability remediation across SDLC.
• Bridge Global Security Governance with regional/local teams to align with global standards.

Connaissances

GRC knowledge

Risk management

Regulatory understanding

Security governance

Formation

Bachelor’s degree in CS/IT/Cybersecurity

Outils

Jira

SharePoint

ISO 27001

Nessus

SAST

DAST

CI/CD

GDPR

CIS

NIST

EDR/NDR

Kali Linux

Python

Bash

Kanban

Description du poste

Support information security governance, risk, compliance, and security operations for Hellmann Worldwide Logistics across the Americas (AMCS).

Responsibilities

• Help develop, review, and enforce regional Information Security Standards (policies) for the Americas.
• Lead Governance, Risk, and Compliance (GRC) activities, including risk management, compliance reviews, and control validation.
• Identify, quantify, monitor, and report information security risks, and perform impact analysis using risk quantification controls in Jira.
• Perform security reviews of contracts and agreements, identify security-related legal implications and risks, and elevate concerns as needed.
• Support ISO 27001 and related framework activities, including framework assessments, governance reviews, and control validation.
• Review, update, and maintain regional security policies and supporting documentation to ensure policies remain current before expiration.
• Publish and maintain security policies and procedures in SharePoint.
• Translate global security policies into regional Standard Operating Procedures (SOPs) aligned with regional and local laws and regulations.
• Monitor regional and local laws and regulations that affect information security.
• Coordinate vulnerability management, security scanning, and remediation tracking using tools such as Nessus, SAST, and DAST.
• Support penetration testing and red team / blue team / purple team activities, and drive remediation identified by global and regional security teams.
• Monitor security system health (for example: patch management, antivirus, endpoint protection) and report KPIs and project status.
• Initiate and monitor implementation of security safeguards in line with global standards and aligned to the global cybersecurity team.
• Validate security tooling outputs and support security control validation for production releases.
• Investigate, document, and report security incidents, including impact analysis and coordinated response support.
• Support maintenance of the Disaster Recovery Plan (DRP) and Business Continuity Management (BCM) framework.
• Act as backup to the DevSecOps / secure-delivery Security Analyst for secure-pipeline and production-release security coverage.
• Participate in production release readiness reviews to validate security requirements prior to release.
• Support integration of security controls into CI/CD pipelines and collaborate with development and ServiceDesk Ops teams on secure code deployment.
• Support SAST/DAST scanning and vulnerability remediation across the software delivery lifecycle.
• Serve as a bridge between Global Security Governance, the Global CISO organization, Regional IT, and Country IT teams to align activities with global standards.
• Support global security projects, share best practices, and transfer knowledge across global, regional, and local levels.
• Be a first-level interface for security-related customer inquiries and support Sales with security RFI/RFQ responses, customer security surveys, questionnaires, and audits.
• Collaborate with Network, Server, local and country IT teams, regional IT leadership, and global security teams.
• Initiate and coordinate security awareness and training activities focused on risks, attack patterns, and secure practices.
• Provide security guidance to regional and local teams, influence decisions, and elevate security risks appropriately.
• Perform other job-related assignments and fulfill responsibilities as required.

Requirements

• Bachelor’s degree (B.S.) in Computer Science, Information Technology, Cybersecurity, or related field; or an equivalent combination of education and experience.
• Minimum 2 years of technical experience in Information Security or a related IT security discipline.
• Preferred experience with GRC frameworks including risk management, auditing, and compliance.
• Professional understanding of security standards, vulnerability management, and IT infrastructure.
• English required.
• Ability to read, analyze, and interpret complex documents and respond effectively to sensitive inquiries from managers, staff, and customers.

Technical Tools & Knowledge

• Technologies: Jira, SharePoint, ISO 27001, Nessus, SAST, DAST, CI/CD, GDPR, CIS, NIST, EDR/NDR, firewalls, Microsoft Intune, Entra ID, Kali Linux, Python, Bash, Kanban.
• Certifications (welcome): CISSP or other Information Security certifications (not required).
• Knowledge of IT regulations (for example, GDPR), ISO standards (for example, ISO 27001), CIS, and NIST.
• Familiarity with vulnerability scanners (for example, Nessus), EDR/NDR, firewalls, Microsoft Intune, and Entra ID.
• Familiarity with SAST/DAST tooling and CI/CD security concepts is a plus.
• Basic programming/scripting skills (for example, Python, Bash) for automating security tasks is a plus.
• Experience with Kali Linux, Kanban, and Jira is a plus.

Preferred Skills & Attributes

• Strong sense of ownership and follow-through with proactive communication.
• Strong communication skills, including translating technical risk into business language for non-technical stakeholders.
• Strong analytical and organizational skills with attention to detail.
• Process-oriented mindset and ability to work effectively under pressure.
• Positive attitude, humility, teamwork, and willingness to learn and mentor others.
• Ability to adapt and engage in continuous learning to stay current with security practices and tools.

Language Skills

• English required.
• Spanish recommended and considered an asset for this regional role.

Benefits

• Base compensation range: $80,000.00 to $90,000.00 (annual).
• Competitive health and welfare programs.
• 401(k) retirement savings plan.
• Opportunities for tuition assistance.
• Incentive compensation for eligible positions.
• Salary determination considers skills, experience, job location, internal pay equity, and job architecture.
• Hellmann Worldwide Logistics regularly reviews pay ranges against industry standards to ensure fairness.

Location & Work Style

• Miami, FL (onsite).
• Travel may be required.