InfoSec Analyst, GRC & Audit - Hybrid

Harvey Nash Inc.; Frankfort (KY); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Harvey Nash is seeking an Information Security Analyst with GRC, audit and compliance support experience in Frankfort, KY. This hybrid role requires 3 days onsite and 2 days remote weekly as part of a long-term indefinite contract.

The candidate should have 4–7 years in information security, familiarity with standards such as NIST 800-53, ISO 27001, SOC 2, HIPAA, PCI-DSS, or GDPR, and experience in coordinating security scans and audits.

Qualifications

• 4–7 years of informa­tion security, GRC, or audit/compliance support experience.
• Familiarity with NIST 800-53, ISO 27001, SOC 2, HIPAA, PCI-DSS, or GDPR.

Responsibilities

• Coordinate with COT to schedule security scans (penetration testing, vulnerability scans, etc.) and review, interpret and respond to findings.
• Experience participating in security audits and assembling evidence packages.

Skills

GRC

Security Audits

NIST 800-53

ISO 27001

SOC 2

HIPAA

PCI-DSS

GDPR

OWASP Top 10

API Security

CI/CD Security

Secrets Management

Agile Processes

Education

Bachelor's degree

Job description

Summary:

We’re in search of an experienced :Information Security Analyst with GRC (Governance, Risk, and Compliance),Audit & Compliance Support experience.

Hereare some of the specific details:

Job Title: : Information Security Analyst

Location: Frankfort, KY (HybridJob)

Duration: Long-term Indefinite Contract

Status: Hybrid: 3 Days onsite from Frankfort, KY, 2 days remote weekly.

MUST HAVE skills

4–7 years of experience in information security, GRC, oraudit/compliance support.

Familiarity with standards such as NIST 800-53, ISO 27001, SOC 2, HIPAA,PCI-DSS, or GDPR.

Experience participating in security audits and assembling evidencepackages.

Coordinate with COT to schedule security scans (Penetration testing,vulnerability scans, etc.) and review, interpret and respond to findings.

Knowledge and understanding of:

Open Worldwide Application Security Project(OWASP) Top 10

API Security (OAuth2, OpenID Connect)

Container security

Ability to review CI/CD pipelineconfigurations (i.e. Jenkins, GitHub Actions, Azure DevOps) for securitycontrol compliance

Ability to review secrets managementpractices (i.e. HashiCorp Vault, AWS Secrets Manager, etc.) for policycompliance.

Understanding of application layer threats and controls

Knowledge of and experience with Agileprocesses

Education Requirements:

Bachelor's degree, or equivalent combinationof recent, relevant work experience.

Let me know if you are interested in this joband/or if you can assist us by referring someone who is interested in this job,since we offer the lucrative referral bonuses.

I am looking forward to speaking with youtoday.

About us:

Harvey Nash is a national, full-service talent managementfirm specializing in technology positions. Our company was founded with amission to serve as the talent partner of choice for the information technologyindustry.

Our company vision has led us to incredible growth andsuccess in a relatively short period of time and continues to guide us today.We are committed to operating with the highest possible standards of honesty,integrity, and a passionate commitment to our clients, consultants, andemployees.

We are part of Nash Squared Group, a global professionalservices organization with over forty offices worldwide.

For more information, please visit us at https://www.harveynashusa.com/