Senior Information Security Analyst

Marotta Controls; Parsippany-Troy Hills (NJ); On-site; USD 120,000 - 160,000; Full time

Job summary

Marotta Controls in Parsippany, NJ is seeking a Senior Information Security Analyst to assess and mitigate information risk across the corporate network, systems and applications. You will perform vulnerability assessments, monitor risk metrics, and support IT audits and regulatory compliance including NIST, DFARS and CMMC.

You will develop security policies, lead IT security projects, mentor junior analysts, and communicate technical risks to both technical and non-technical stakeholders in a

Qualifications

• 4–7 years of information security experience.
• Bachelor's degree in computer science or equivalent.
• Must be a U.S. person.
• Strong problem-solving and communication skills.
• Experience with Windows and MS Office.
• Understanding of networking basics.
• Familiarity with NIST, DFARS, and CMMC.

Responsibilities

• Lead IT security risk management across the enterprise.
• Perform vulnerability assessments and remediation.
• Develop security policies and standards.
• Coordinate IT audits and regulatory compliance.
• Mentor Level I Analysts.
• Drive security projects from inception to completion.
• Report findings to IT management.

Skills

IT risk management

Vulnerability assessment

Information security

NIST/DFARS/CMMC knowledge

Project management

Communication skills

Networking basics

Windows OS

Team leadership

Policy documentation

Education

Bachelor's degree in computer science or equivalent

Job description

Position

Senior Information Security Analyst

Location

Parsippany, NJ

Job ID / Openings

2044-290-27-B | 1 opening

Overview

The Senior Information Security Analyst is responsible for the assessment and mitigation of information risk and the remediation of identified vulnerabilities with the corporate network, systems and applications. The role reports findings and recommendations for corrective action, performs vulnerability assessments, evaluates the IT security/risk posture, manages continuous monitoring of all information security risk metrics, and assists in all IT audits, risk assessments and regulatory compliance efforts including DFARS, NIST and CMMC.

Key Responsibilities

• Management of IT security and IT risk across the enterprise.
• Address questions from internal and external audits and examinations.
• Develop, execute, and track the performance of security measures to protect information and network infrastructure and computer systems.
• Design computer security strategy and engineer comprehensive cybersecurity architecture.
• Develop policies, procedures and standards that meet existing and newly developed policy and regulatory requirements including DFARS 252.204-7012, NIST 800-171, and CMMC.
• Serve as project manager or lead within IT security projects.
• Mentor and coach Level I Information Security Analysts.
• Promote awareness of applicable regulatory standards, upstream risks, and industry best practices across the enterprise.
• Clearly articulate technical issues, solutions and activities to colleagues and clients with associated technical risks.
• Gather business and technical requirements and assess them against information security policies.
• Configure, troubleshoot, and maintain security infrastructure software and hardware.
• Evaluate potential new solutions and provide feedback to IT Management.
• Train users on software, hardware, applications and create user documentation.
• Define, monitor, and report on information security controls and metrics.
• Install software that monitors systems and networks for security breaches and intrusions.
• Monitor systems for irregular behavior and set up preventive measures.
• Perform regular risk assessments of the company's systems and report on findings to IT management.
• Document and assess information security policies against required compliance frameworks such as NIST and DFARS.
• Create and maintain action plans for achieving information security goals.
• Drive and manage projects from inception to completion.
• Attend meetings in person when on-site and via dial-in when working remotely.

Qualifications

Minimum Required Qualifications

• Preferably 4–7 years of experience.
• Bachelor's degree in computer science or equivalent.
• Must be a U.S. person.
• Basic understanding of the project management life cycle.
• Well‑developed practical operating knowledge of common desktop and laptop hardware and application software, including:
  • Windows
  • MS Office Suite
  • Print services and printers
• Experience with system application, systems management, and data communication, including basic networking in LAN/WAN environments and remote access solutions.
• Understanding of key information security policy requirements, metrics, and reporting.
• Strong attention to detail.
• Good problem‑solving skills with the ability to think creatively.
• Excellent written and verbal skills, including the ability to clearly articulate technical issues and activities to technical and non-technical staff.
• Strong interpersonal skills and the ability to adapt in a complex and changing environment.
• Consistently meet expected production, accuracy, and quality standards as set by management.
• Team oriented with the ability to work independently.

Additional Desired Qualifications

• Information security certification (CISSP, Security+, CySA+).
• Technical solution design and planning experience.