Onsite Senior InfoSec Analyst: Risk & Compliance Lead

Cybersecurity Jobs; Rock Valley (IA); On-site; USD 110,000 - 150,000; Full time

Job summary

Telligen is seeking a Senior Information Security Analyst to advise government partners as a security SME. This 100% onsite role in Iowa focuses on governance, risk, and compliance while supporting day-to-day security operations, vulnerability management, and ongoing improvements across security programs.

You will evaluate compliance, help remediate gaps, and contribute to risk assessments as part of a cross-functional security team.

Qualifications

• 2-year degree in Information Technology, Information Security, or related field or equivalent training/experience.
• 5-7 years of IT work experience.
• 3+ years in an information security role with knowledge of security, regulations, and compliance programs.

Responsibilities

• Evaluate and ensure compliance with contractual, regulatory, and state requirements; support remediation.
• Develop and implement security standards and procedures aligned with HIPAA, NIST, FedRAMP, and HITRUST.
• Contribute to risk assessments, incident response, and security authorization activities.
• Develop and maintain System Security Plans (SSPs) and security policies.
• Support vulnerability management and POA&M activities.
• Lead documentation and reporting for security incidents and risk findings.

Skills

Governance & Compliance

Security Operations

Vulnerability Management

Incident Response

Risk Assessment

Education

2-year degree in IT/IS

Equivalent training/experience

Tools

POA&Ms Tracking

SSP Documentation

Regulatory Compliance Tools

Job description

Telligen is seeking a Senior Information Security Analyst to advise government partners as a security SME. This 100% onsite role in Iowa focuses on governance, risk, and compliance while supporting day-to-day security operations, vulnerability management, and ongoing improvements across security programs.

You will evaluate compliance, help remediate gaps, and contribute to risk assessments as part of a cross-functional security team.