Senior Information Security Analyst

Marotta Controls, Inc.; Parsippany-Troy Hills (NJ); On-site; USD 121,000 - 132,000; Full time

Benefits offered by this job

Quarterly bonus

401(k) with company match

Tuition aid

Paid vacation

Job summary

Marotta Controls, Inc. is seeking a Senior Information Security Analyst in Parsippany, NJ. You will assess risk, remediate vulnerabilities, and coordinate security across networks, systems, and applications.

You will support audits, governance, and regulatory compliance while mentoring junior staff and driving security initiatives to protect critical assets.

Qualifications

• Minimum 4–7 years of experience in information security or related field.
• Bachelor’s degree in computer science or equivalent required.
• Must be a U.S. person with clearances or eligibility as needed.
• Understanding of project lifecycle and IT risk concepts.
• Strong documentation, reporting, and communication skills.

Responsibilities

• Assess information risk and mitigate vulnerabilities in networks, systems and apps.
• Lead security monitoring, audits, and compliance for DFARS, NIST, and CMMC.
• Develop security policies, procedures, and metrics across the enterprise.
• Design security architecture and oversee IT security projects.
• Mentor junior analysts and promote security awareness.

Skills

Written communication

Verbal communication

Interpersonal skills

Teamwork

Attention to detail

Problem solving

Education

Bachelor’s degree in computer science or equivalent

Tools

Windows

MS Office Suite

Remote access solutions

Job description

Senior Information Security Analyst

Location: Parsippany, NJ

Job ID: 2044-290-27-B | # of Openings: 1

Pay Range: $121K - $132K

ESSENTIAL FUNCTIONS

The Senior Information Security Analyst is responsible for assessing and mitigating information risk and remediating identified vulnerabilities within the corporate network, systems, and applications. The analyst reports findings and recommendations for corrective action, performs vulnerability assessments, manages continuous monitoring of all information security risk metrics, assists with IT audits, and oversees regulatory compliance efforts including DFARS, NIST, and CMMC.

Key Responsibilities

• Management of IT security and IT risk across the enterprise.
• Address questions from internal and external audits and examinations.
• Develop, execute, and track performance of security measures to protect information and network infrastructure.
• Design computer security strategy and engineer comprehensive cybersecurity architecture.
• Develop policies, procedures, and standards that meet existing and newly developed regulatory requirements including DFARS 252.204-7012, NIST 800-171, and CMMC.
• Serve as project manager/lead within IT security projects.
• Mentor and coach Level I Information Security Analysts.
• Promote awareness of applicable regulatory standards, upstream risks, and industry best practices across the enterprise.
• Clearly articulate technical issues and solutions to colleagues and clients.
• Gather business and technical requirements and assess them against information security policies.
• Configure, troubleshoot, and maintain security infrastructure software and hardware.
• Evaluate potential new solutions and provide feedback to IT Management.
• Train users on software, hardware, and applications.
• Define, monitor, and report on information security controls and metrics.
• Install security monitoring software.
• Monitor systems for irregular behavior and set up preventive measures.
• Perform regular risk assessments and report findings to IT management.
• Document and assess information security policies against required compliance frameworks.
• Create and maintain action plans to achieve information security goals.
• Drive and manage projects from inception to completion.
• Attend meetings in person or dial-in as needed.
• Perform job duties in an office and manufacturing environment, using standard office equipment.
• Full‑time position with 9 hours Monday–Thursday, 4 hours Friday; overtime and weekend work may be required.
• No travel is expected.

Minimum Required Qualifications

• Preferably 4–7 years of experience.
• Bachelor’s degree in computer science or equivalent.
• Must be a U.S. person.
• Basic understanding of the project management life cycle.
• Practical operating knowledge of common desktop/laptop hardware and software: Windows, MS Office Suite, print services and printers.
• Systems application, systems management, and data communication knowledge including basic networking in LAN/WAN environments and remote access solutions.
• Understanding of key information security policy requirements, metrics, and reporting.
• Strong attention to detail, problem‑solving skills, and ability to think creatively.
• Excellent written and verbal skills.
• Strong interpersonal skills and adaptability in a complex, changing environment.
• Consistent production of expected accuracy, quality, and standards set by management.
• Team oriented with ability to work independently.

Additional Desired Qualifications

• Information security certifications (CISSP, Security+, CySA+).
• Technical solution design and planning experience.
• Knowledge of risk assessment methodologies.
• Knowledge of NIST Cyber Security Framework and associated controls.
• Knowledge of CMMC controls and practices.

Physical Requirements

• Regularly required to see, talk, and hear.
• Frequent reaching, lifting, and handling tasks with hands and arms.
• Regularly required to sit, stand, walk, bend, turn, and move around the facility.
• May lift, push, pull and/or move items weighing up to 25 pounds.

Benefits

We offer a highly competitive compensation package, quarterly bonus, and a full range of benefits: medical, prescription, dental, vision, life and disability insurance; 401(k) with company match; tuition aid; paid vacation, sick, and personal days; paid holidays; and flexible work hours with compressed work week options.

U.S. citizenship or export license may be required based on contract requirements. Proof of citizenship or export license must be provided upon hire and as required for renewal.