Information Security Engineer / Analyst

Mindlance; Johnston (IA); On-site; USD 80,000 - 120,000; Full time

Job summary

A leading national recruiting company is seeking a qualified professional for an Information Security role focused on security solution design and implementation. The ideal candidate will have 3-7 years of experience in security controls and technologies, as well as familiarity with compliance frameworks. Responsibilities include designing security solutions, managing security controls, and ensuring adherence to regulatory standards. Relevant certifications are desired. This position is based in Johnston, Iowa.

Qualifications

• 3-7 years of experience in Information Security focusing on solution design and implementation.
• Experience defining and managing access security controls.
• Understanding of Information Security technologies and regulatory environments.
• Applicable certifications like CISSP, CISA, CISM, CGEIT, CRISC.

Responsibilities

• Design and implement security solutions for various IT systems.
• Manage controls for access security and IT compliance.
• Document controls according to established frameworks.

Skills

Information Security solution design

Access security management

COBIT 4.1 or 5.0

NIST Cybersecurity Framework

ISO 27k framework

Application security

FFIEC Cyber Security Assessment Tool

Firewall technologies

SIEM

Tools

Jenkins

Job description

Mindlance is a national recruiting company which partners with many of the leading employers in IT, financial services, engineering, semiconductor, clinical and pharmaceutical domains. You can learn more about us at www.mindlance.com.

Job Description

• 3-7 years of experience in Information Security focusing on security solution design, engineering, implementation and assurance.
• 3-5 years of experience defining and managing the implementation of controls to address access security and IT control requirements.
• 3-5 years of experience working with Information Security and IT general controls, including experience defining and documenting controls using COBIT 4.1 or 5.0, the NIST Cybersecurity Framework, the ISO 27k framework, the SANS 20 critical controls or similar experience.
• Deep understanding of Information Security technologies including firewalls, IDS/IPS, Password Vaults, CASBs, SIEM, IT GRC, DLP, etc.
• Understanding of the regulatory environment and experience with regulators.
• Comfort delivering tasks and assignments in an evolving and a maturing environment.
• Application security experience and corresponding technologies (e.g. Jenkins).
• Experience with the FFIEC Cyber Security Assessment Tool.
• Applicable certifications (e.g. CISSP, CISA, CISM, CGEIT, CRISC).

Additional Information

All your information will be kept confidential according to EEO guidelines.