Information Security Analyst

MORS; United States; Remote; USD 90,000 - 120,000; Full time

Job summary

A leading company is seeking an Information Security Analyst to assess client security postures and ensure compliance with security frameworks. The role requires strong communication skills and a solid understanding of audit procedures. This full-time remote position offers a competitive salary and a comprehensive benefits package.

Benefits

Healthcare insurance

401(k) plan with company match

Profit Sharing Plan

Certification / training bonuses

Monthly internet expense reimbursements

Well-being expense reimbursements

Personal days off

Qualifications

• At least two years of recent experience conducting IT audits.
• At least one year of recent PCI compliance experience.

Responsibilities

• Conduct PCI assessments and gap analyses.
• Create detailed reports on client’s control environment.
• Communicate complex technical information effectively.

Skills

Attention to detail

Time management

Proficiency in English

Education

Bachelor's degree in Information Security

Bachelor's degree in Cybersecurity

Bachelor's degree in Information Technology

Bachelor's degree in Computer Science

Tools

MS Word

Excel

PowerPoint

Job description

Compensation Range : $90,000 - $XXX, annual salary based on experience and geographic location

Preferred Education :

4 Year Degree / Bachelor Degree

Additional Information :

Telecommuting is allowed.

Internal Number : QSA-08-

Information Security Analyst

Information Security Analysts have an in-depth understanding of information security with the ability to quickly understand a client’s business environment and security requirements. This knowledge must be coupled with an in-depth understanding of at least one of today's leading information security frameworks: PCI DSS, HIPAA / HITECH, GLBA, or ISO. The Analyst must use this knowledge to audit and assess a client’s security posture as it relates to business drivers and ascertain compliance with established security and privacy requirements. Analysts must present clear findings to the client in written and verbal form.

Compensation Range : $90,000 - $XXX, annual salary based on experience and geographic location

Benefits :

Dara offers a full benefits package. We pay a percentage of employee premiums for healthcare insurance (medical, dental, vision), offer a 401(k) plan with company match, Profit Sharing Plan, certification / training bonuses, monthly internet expense reimbursements, well-being expense reimbursements, personal days off in addition to earned Paid Time Off, and opportunities to earn top-level industry certifications.

Work Authorization, Location and Schedule :

Candidates must be legally authorized to work in the United States and be able to pass a background check. Sponsorship will not be provided. This is a full-time, remote position requiring the ability to work independently to complete projects accurately and on time. Occasional travel to client locations within and outside the United States may be required. Work hours may vary depending on the project.

Required Certifications (must be current and not expired) :

One of the following information security designations: (ISC)2 CISSP, ISACA CISM, or ISO Lead Implementer.

One of the following auditing designations: ISACA CISA, GIAC GSNA, ISO Lead Auditor, ISO Internal Auditor, IRCA ISMS Auditor (or higher), or IIA CIA.

Education Requirements :

Bachelor's degree in Information Security, Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience.

Job Duties :

1. Conduct PCI assessments and gap analyses.
2. Perform auditing techniques and procedures supporting assessment findings.
3. Create detailed, customized reports on client’s control environment and assessment findings.
4. Develop a roadmap of actionable steps to improve security posture and achieve compliance.
5. Communicate complex technical information effectively to various audiences, including executives and technical staff.
6. Interact with clients to schedule and perform activities as per SOWs.
7. Consult with clients to understand assessment findings and remediation options.
8. Assist sales teams with presales and scoping as needed.
9. Develop expertise across industries focusing on information security and privacy requirements.
10. Maintain accurate records in Dara Security’s CRM and work management platforms.

Experience Requirements :

1. At least two years of recent experience conducting internal or external IT audits or leading PCI DSS assessments.
2. At least two years in an information security role.
3. At least one year of recent PCI compliance experience.
4. Proficiency in English for clear written and verbal communication.
5. Solid understanding of audit procedures.
6. Attention to detail and excellent time management skills.
7. Familiarity with networking and security controls, including cloud security, vulnerability management, firewalls, IAM, SIEM, EDR, IDS/IPS, DLP, AV, FIM, WAF, cryptography, and communication protocols.
8. Proficient with MS Word, Excel, and PowerPoint.
9. Ability to work under challenging environments with interruptions.
10. Ability to work independently with minimal supervision.
11. Motivated to learn new technologies and audit techniques.

Preferred Qualifications :

• Current PCI QSA certification.
• Current PCIP certification.