Security Risk & Compliance Analyst II

AAA Northeast; Providence (RI); On-site; USD 90,000 - 110,000; Full time

Benefits offered by this job

Health coverage

401(k) match

Paid time off

Job summary

AAA Northeast is seeking a Security Analyst II to support risk management, audits, and compliance programs, aligning with standards such as NIST and PCI-DSS, including vulnerability and threat intelligence management. This role partners with IT and business lines to implement controls, conduct third-party due diligence, and provide dashboards and status updates to management.

The position requires 3+ years in IT security and relevant certifications; travel is required and on-call duty is

Qualifications

• 3+ years related IT experience, preference for information security or risk management.
• Associates in Computer Science, Business Analytics, or other related field.
• Bachelor's preferred
• CompTIA Security+, CISSP, or other security certifications are a plus
• The position is required to get at least its CompTIA Security+ during the first year of employment

Responsibilities

• Manage compliance with various IT standards and regulations by: Tracking compliance with the standards; Identifying gaps between our current controls and the requirements and tracking the action; Providing guidance to the security engineers and the business lines to implement the necessary controls; Organizing and assisting external auditors with their assessment of the AAA Northeast compliance or security posture; Providing dashboards and status updates for the management
• Oversee the vulnerability management process by: Managing and assessing the efficiency of the vulnerability management process (including patch management); Collaborating with other teams to implement the relevant remediations; Assessing the efficiency; Providing dashboards and status updates for the management
• Participate in the risk management operations by: Completing necessary third-party vendor due diligence documentation; Providing security analysis of the risks and threats during projects and recommendations on the security controls needed to meet AAA Northeast security expectations and requirements; Developing regular and automated controls of the infrastructure to ensure that the security baseline is met and that services do not deviate from it; Recommending specific areas to focus on and audit
• Become a key reference for our internal partners when it comes to security and compliance by: Partnering with all levels of IT and Business Line management to ensure that security testing is conducted in a cooperative, timely and efficient manner; Collecting business lines needs and specific risks to take into account in our risk management program

Skills

Domestic travel

On-call rotation

Education

Associates in Computer Science, Business Analytics, or related field

Bachelor's preferred

Tools

Vulnerability scanners

Job description

AAA Northeast is seeking a Security Analyst II to support risk management, audits, and compliance programs, aligning with standards such as NIST and PCI-DSS, including vulnerability and threat intelligence management. This role partners with IT and business lines to implement controls, conduct third-party due diligence, and provide dashboards and status updates to management.

The position requires 3+ years in IT security and relevant certifications; travel is required and on-call duty is