Sr Infosec Analyst

Conch Technologies Inc; Massachusetts; Hybrid; USD 120,000 - 150,000; Part time

Job summary

Conch Technologies Inc. in Massachusetts is seeking a Sr Infosec Analyst for a hybrid role in Woburn. This 6+ month contract-to-hire position requires deep expertise in information security and risk management.

The ideal candidate will have 6–9 years of experience, a strong background in NIST CSF, ISO 27001 and PCI DSS, and hands-on security assessments, threat modeling, and risk analysis. The role requires collaboration with security, IT, and business teams; proficiency in cloud security,

Qualifications

• 6-9 years of experience in information security, IT risk management, security engineering, or a related discipline.
• Bachelor's degree in Information Security, Computer Science, or a related field; Master's degree or relevant certifications strongly preferred.
• Strong understanding of cybersecurity risk management, governance, and control frameworks such as NIST CSF, ISO 27001, COBIT, FFIEC, and PCI DSS.
• Experience performing security assessments, threat modeling, architectural reviews, and risk analysis.
• Experience with Microsoft Purview and Microsoft Defender preferred.
• Proficiency in cloud security, endpoint protection, and data loss prevention (DLP) technologies.
• Familiarity with SIEM tools, vulnerability management platforms, and incident response processes.
• Experience with governance, risk, and compliance (GRC) platforms such as Archer, ServiceNow IRM, RiskConnect, or similar.
• Familiarity with artificial intelligence tools and their cybersecurity implications, including data protection, threat detection, automation, and third-party risk considerations.
• Strong analytical, communication, and stakeholder engagement skills, with the ability to influence technical teams, business stakeholders, and leadership through clear, risk-based recommendations.

Skills

Risk management

Stakeholder engagement

Analytical thinking

Communication

Education

Bachelor's degree in Information Security/CS

Master's degree or security certifications

Tools

SIEM tools

Vulnerability management

Archer

ServiceNow IRM

RiskConnect

Job description

Hello,

Position: Sr Infosec Analyst

Location: Woburn, MA (Hybrid)

Duration: 6+ Months
C2H (Contract to Hire)

Job Description

• 6-9 years of experience in information security, IT risk management, security engineering, or a related discipline, preferably within a regulated industry.
• Bachelor's degree in Information Security, Computer Science, or a related field; Master's degree or relevant certifications (e.g., CISSP, CISM, CRISC, CISA) strongly preferred.
• Strong understanding of cybersecurity risk management, governance, and control frameworks such as NIST CSF, ISO 27001, COBIT, FFIEC, and PCI DSS.
• Experience performing security assessments, threat modeling, architectural reviews, and risk analysis.
• Experience with Microsoft Purview and Microsoft Defender preferred.
• Proficiency in cloud security, endpoint protection, and data loss prevention (DLP) technologies.
• Familiarity with SIEM tools, vulnerability management platforms, and incident response processes.
• Experience with governance, risk, and compliance (GRC) platforms such as Archer, ServiceNow IRM, RiskConnect, or similar.
• Familiarity with artificial intelligence tools and their cybersecurity implications, including data protection, threat detection, automation, and third-party risk considerations.
• Strong analytical, communication, and stakeholder engagement skills, with the ability to influence technical teams, business stakeholders, and leadership through clear, risk-based recommendations.