InfoSec Analyst — Protect Member Data (On-Site, Arlington)

AHRI; Arlington (VA); On-site; USD 105,000 - 130,000; Full time

Benefits offered by this job

Health insurance benefits

Tuition assistance program

Matching 401(k) program

Flexible work schedule

Job summary

AHRI is seeking an Information Security Analyst to safeguard member data, research, and digital platforms. The role monitors threats, ensures regulatory compliance, and supports secure operations for membership systems, event platforms, and advocacy tools.

Essential duties include incident response, vulnerability management, risk assessments, and security tool optimization. A Bachelor's in a related field plus relevant credentials and 2–4 years of experience are required.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or related field from an accredited college/university.
• Industry security credential, such as CompTIA Security+, Microsoft SC 200, or equivalent. CISSP or CISM is preferred but not required.
• Two to four years of hands-on work experience in relevant information security or IT security roles. Experience in nonprofit or association environments preferred.
• Working familiarity with public cloud AZURE, endpoint management systems.
• Knowledge of security frameworks (NIST, ISO 27001).

Responsibilities

• Investigate and respond to incidents impacting member data or online services.
• Perform regular vulnerability scans on association websites, portals, and third-party integrations.
• Conduct risk assessments of association assets, networks and data.
• Help deliver cybersecurity training for staff and member-facing teams.
• Maintain and optimize security tools (SIEM, endpoint protection, firewalls).

Skills

Cybersecurity

Information security

Incident response

Risk assessment

Education

Bachelor’s degree in Cybersecurity, Information Technology, or related field

Tools

Azure

SIEM

Endpoint protection

Firewalls

Job description

AHRI is seeking an Information Security Analyst to safeguard member data, research, and digital platforms. The role monitors threats, ensures regulatory compliance, and supports secure operations for membership systems, event platforms, and advocacy tools.

Essential duties include incident response, vulnerability management, risk assessments, and security tool optimization. A Bachelor's in a related field plus relevant credentials and 2–4 years of experience are required.