Senior Security Policy & Risk Analyst

Novalink Solutions LLC; Alabama; On-site; USD 90,000 - 150,000; Full time

Job summary

Novalink Solutions LLC is seeking an experienced security policy analyst to develop and maintain information security policies and workforce training. The role involves policy interpretation, compliance, and serving as a resource for staff and leaders on security policy implementation.

You will lead projects implementing new security controls, and work with the security team to monitor policy adherence and program effectiveness.

Qualifications

• IT security experience (5+ years) required.
• IT professional experience (8+ years) required.
• Project leadership experience (4+ years) required.
• Experience evaluating/implementing vendor security offerings (4+ years) preferred.
• Strong attention to detail and excellent written/verbal communication.

Responsibilities

• Conduct information security risk assessments and document risk and controls.
• Manage risk related to IT, information security, privacy, and governance, ensuring regulatory compliance.
• Assist with gap analyses and implement frameworks such as ISO 27001, NIST, and CSC.
• Coordinate with GRC to set goals, metrics, and align with the org’s mission.

Skills

IT Security

IT Professional

Project leadership

Vendor security

Attention to detail

Communication skills

CISSP

Job description

Novalink Solutions LLC is seeking an experienced security policy analyst to develop and maintain information security policies and workforce training. The role involves policy interpretation, compliance, and serving as a resource for staff and leaders on security policy implementation.

You will lead projects implementing new security controls, and work with the security team to monitor policy adherence and program effectiveness.