Remote Information Security Analyst II — Audits & Compliance

Maritz Holdings Inc.; United States; On-site; USD 85,000 - 110,000; Full time

Job summary

Maritz Holdings Inc. is seeking an Information Security Analyst II to join full-time and work remotely. You will manage security audits, develop compliance procedures, and conduct vulnerability assessments to protect our information assets.

The role requires coordinating security assessments, vendor risk analysis, and monitoring IT environments to identify and address violations while promoting security awareness across the user community and multi-disciplinary teams.

Qualifications

• Bachelor's degree in Information Security, Cyber Security, Technology, Information Systems, Computer Science, or a related field
• 4-5 years of experience in network and/or system security
• Familiarity with CIS Critical Security Controls, ISO 27001, NIST 800, PCI-DSS, and AICPA SOC 1 & 2 frameworks
• Experience managing projects across multi-disciplinary teams in complex environments
• Broad knowledge of technical and business-related concepts

Responsibilities

• Coordinates security assessments and performs vendor risk analysis
• Implements Corporate Security Standards and develops security awareness materials for the user community
• Scans and monitors IT environments, identifying and resolving security violations

Skills

Vendor risk analysis

Security policies

Vulnerability assessments

Project management

Cross-functional collaboration

IT security concepts

Education

Bachelor's degree in Information Security, Cyber Security, Technology, Information Systems, Computer Science, or a related field

Job description

Maritz Holdings Inc. is seeking an Information Security Analyst II to join full-time and work remotely. You will manage security audits, develop compliance procedures, and conduct vulnerability assessments to protect our information assets.

The role requires coordinating security assessments, vendor risk analysis, and monitoring IT environments to identify and address violations while promoting security awareness across the user community and multi-disciplinary teams.