Security Analyst

Cygnus Professionals Inc; Boston (MA); On-site; USD 80,000 - 100,000; Full time

Job summary

Cygnus Professionals Inc is seeking a Security Analyst based in Boston, Massachusetts. The role entails providing security expertise to ensure compliance with information security standards and enhancing the overall security posture of the organization.

This position requires a Bachelor's degree along with 5-7 years of IT experience and at least 3 years in a security role. Ideal candidates will have knowledge of security norms and familiarity with tools like OpenVAS and Qualys.

Qualifications

• Bachelor's degree in Business with IT audit or Computer Science with business and IT audit experience.
• 5-7 years of overall IT experience.
• 3 years of experience as a Security Analyst.

Responsibilities

• Provide expertise in information security compliance programs.
• Assist during pre‑sales, sales, and post‑sales activities.
• Propose and implement processes to improve security posture.
• Conduct regular security policy reviews.
• Stay updated on changes in security and privacy regulations.

Skills

IT audit or compliance experience

5-7 years of IT experience

3 years of Security Analyst experience

Regulatory standards knowledge (SOC, ISO)

Experience with SharePoint, networks, platforms, and applications

Knowledge of IT audit methodologies

Knowledge of Linux

Familiarity with security scanning tools

CISSP certification preferred

Education

Bachelor's degree in Business or Computer Science

Job description

Role: Security Analyst

Duration: 6-12+ Months Contract

Need Green Card or US Citizen Candidates Only

Required Qualifications

• Bachelor's degree in Business with IT audit or compliance experience, or Computer Science with business and IT audit/compliance experience desired
• 5-7 years of IT experience
• 3 years of Security Analyst experience
• Knowledge of regulatory standards SOC, ISO, privacy shield is a plus
• Experience with technologies such as SharePoint, networks, platforms, and applications
• Knowledge of IT audit methodologies and control frameworks
• Knowledge of Linux is a plus
• Familiarity with security scanning and penetration tools (OpenVAS, Qualys, Acunetix) is a plus; CISSP preferred

Description

We are looking for a highly motivated individual to join our Information Security team. The team is responsible for the overall security of information systems at eFront and their compliance with CIA principles of information security.

Responsibilities

• Provide information security expertise to assist with achievement of information systems compliance programs (SOC2 Type 2, ISO27010)
• Offer information security expertise during pre‑sales, sales, and post‑sales activities at eFront
• Propose and implement corporate business processes that improve overall security posture at eFront
• Perform regular security and privacy policy reviews
• Maintain knowledge of constantly changing security and privacy landscape and propose initiatives related to industry changes
• Work with internal and external stakeholders on security audits and remediation processes
• Monitor internal compliance against information security policies and standards by conducting testing, internal control reviews, and risk assessments
• Maintain awareness of external regulations for new or changed requirements within IT and identify industry standards such as ISO27001, NIST, SSAE16, etc.
• Represent the company’s interest with customers, external and internal auditors, and third‑party service providers
• Facilitate internal and external audits within IT and periodic assessments to address specific risks
• Review IT audit results with various IT functions, provide observations, recommendations, and conclusions, and assist in identifying and communicating control gaps while evaluating management remediation action plans and related reporting

Additional Information

U.S. citizens and those authorized to work independently in the United States are encouraged to apply. We are unable to sponsor at this time.

All information will be kept confidential according to EEO guidelines.