Information Security Controls Analyst (Associate)

Jobtailor; Pennsylvania; On-site; USD 60,000 - 90,000; Full time

Job summary

Jobtailor is seeking a security-focused analyst to join our team in Pennsylvania. You will review IT processes and control documentation, conduct risk assessments, and provide outsourced information security advisory services.

Responsibilities include assisting in developing internal control policies, training junior staff, delivering client reports, and supporting business development activities. Travel is limited to <10%.

Qualifications

• Bachelor's degree or equivalent in a related field.
• Experience or training in information security controls is preferred.
• Familiarity with PCI, NIST, ISO and CIS frameworks helpful.

Responsibilities

• Provide control analysis for clients by reviewing and analyzing IT process and control documentation.
• Conduct sample testing and information security risk assessments.
• Provide outsourced information security advisory services.
• Participate in BCP/DR/IR Table-Top exercises.
• Support client services including risk assessments, controls-based assessments, and OISA or equivalent consulting services.
• Assist in developing and implementing internal control policies and procedures.
• Provide direction, train, and delegate work to interns as needed.
• Write and deliver timely client reports.
• Conduct client interviews to understand processes and controls and present observations.
• Assist Seniors, Managers, and Directors with client relationships, practice management, and business development activities

Skills

Information Security Risk Assessment

Control Analysis

Network Penetration Testing

Vulnerability Scanning

Sample Testing

Client Reporting

Business Governance Concepts

Education

Bachelor's degree

Degree in Computer Science/Information Technology/Information Assurance

Tools

Microsoft Outlook

Microsoft Word

Microsoft Excel

Microsoft PowerPoint

Job description

Jobtailor is seeking a security-focused analyst to join our team in Pennsylvania. You will review IT processes and control documentation, conduct risk assessments, and provide outsourced information security advisory services.

Responsibilities include assisting in developing internal control policies, training junior staff, delivering client reports, and supporting business development activities. Travel is limited to <10%.