Senior InfoSec & Compliance Analyst

Marotta Controls; Parsippany-Troy Hills (NJ); On-site; USD 120,000 - 160,000; Full time

Job summary

Marotta Controls in Parsippany, NJ is seeking a Senior Information Security Analyst to assess and mitigate information risk across the corporate network, systems and applications. You will perform vulnerability assessments, monitor risk metrics, and support IT audits and regulatory compliance including NIST, DFARS and CMMC.

You will develop security policies, lead IT security projects, mentor junior analysts, and communicate technical risks to both technical and non-technical stakeholders in a

Qualifications

• 4–7 years of information security experience.
• Bachelor's degree in computer science or equivalent.
• Must be a U.S. person.
• Strong problem-solving and communication skills.
• Experience with Windows and MS Office.
• Understanding of networking basics.
• Familiarity with NIST, DFARS, and CMMC.

Responsibilities

• Lead IT security risk management across the enterprise.
• Perform vulnerability assessments and remediation.
• Develop security policies and standards.
• Coordinate IT audits and regulatory compliance.
• Mentor Level I Analysts.
• Drive security projects from inception to completion.
• Report findings to IT management.

Skills

IT risk management

Vulnerability assessment

Information security

NIST/DFARS/CMMC knowledge

Project management

Communication skills

Networking basics

Windows OS

Team leadership

Policy documentation

Education

Bachelor's degree in computer science or equivalent

Job description

Marotta Controls in Parsippany, NJ is seeking a Senior Information Security Analyst to assess and mitigate information risk across the corporate network, systems and applications. You will perform vulnerability assessments, monitor risk metrics, and support IT audits and regulatory compliance including NIST, DFARS and CMMC.

You will develop security policies, lead IT security projects, mentor junior analysts, and communicate technical risks to both technical and non-technical stakeholders in a