Mid Level Security Analyst - MN

TieTalent; Minnesota; Remote; USD 80,000 - 120,000; Full time

Job summary

An innovative company is seeking an Information Security Analyst to enhance its security governance and compliance efforts. This remote role involves collaborating with cross-functional teams to ensure adherence to regulatory and client security requirements. The ideal candidate will have over a decade of experience in security engineering, with a strong focus on system and network security, vulnerability testing, and security protocols. By developing and interpreting security policies, leading risk assessments, and delivering training, you will play a crucial role in safeguarding sensitive information and enhancing the organization's security posture. If you're passionate about security and ready to make a significant impact, this opportunity is for you.

Qualifications

• 10+ years of experience in security engineering and system security.
• Strong technical knowledge in security solutions and protocols.

Responsibilities

• Identify security issues and develop mitigation plans.
• Architect and implement security-focused tools and services.
• Conduct vendor and system risk assessments.

Skills

Security Engineering

System and Network Security

Authentication

Security Protocols

Cryptography

Application Security

Vulnerability Testing

Security Solutions

Education

Bachelor's Degree in Computer Science

Job description

Information Security Analyst (Healthcare) - Remote

Summary:

The Risk & Controls Analyst Senior is responsible for executing and developing processes to ensure IT's compliance with regulatory, industry, and client security requirements. This role involves working with cross-functional teams and management to design and execute the operational processes needed to support the Security Governance, Risk, and Compliance program.

Job Responsibilities:

1. Identify security issues and risks, and develop mitigation plans.
2. Architect, design, implement, support, and evaluate security-focused tools and services, including project leadership roles.
3. Develop and interpret security policies and procedures.
4. Participate in security compliance efforts.
5. Develop and deliver training materials and perform security awareness and technology training.
6. Evaluate and recommend new and emerging security products and technologies.

Qualifications:

1. Bachelor's degree in a technical field such as computer science, computer engineering, or related field.
2. 10+ years of experience in security engineering, system and network security, authentication, security protocols, cryptography, and application security.
3. Strong experience and detailed technical knowledge in security solutions.
4. Experience in infrastructure or application-level vulnerability testing and auditing.

Additional Responsibilities:

1. Conduct and lead vendor and system risk assessments.
2. Coordinate responses to client RFPs and assessment requests.
3. Review security language in client and vendor contracts and modify as needed.
4. Review evidence and verify controls are effective and compliant with standards such as HITRUST, SOC 2, HIPAA, and client contracts.
5. Assist in developing and implementing reporting processes and metrics for monitoring risk and controls.
6. Work with IT and auditors to develop and validate audit scope, action plans, and remediation strategies.
7. Perform other duties as assigned.

Contact: [e-mail]