Vulnerability & Compliance Security Analyst (Hybrid/Remote)

Chandra Technologies, Inc; Madison (WI); Hybrid; USD 90,000 - 120,000; Full time

Job summary

The Department of Homeland Security is seeking a Level III security professional with vulnerability management knowledge, strong documentation and compliance experience, and excellent stakeholder communication skills. The role emphasizes cross-functional collaboration, risk reduction, and delivering security plans and actions across the CARES environment.

The candidate will work with ISS teams to integrate information security into program operations, manage audits and regulatory activities, and

Qualifications

• 5+ years of experience with Vulnerability Management and Security Compliance.
• 5+ years of IT Security Documentation & Auditing (developing security requirements, creating plans of action & milestones, and/or developing proposals and briefs).
• 5+ years of Stakeholder Management and Cross-Functional Communication (Working in collaborative environments and communicating updates with IT and non-IT teams).

Responsibilities

• Integrate security into program operations and partner with organizational leaders to incorporate information security best-practices.
• Provide recommendations on how to improve the information security posture of programs and reduce risk.
• Draft security requirements to be included into charters, scope documents, procurements.
• Document and communicate analysis and escalate risk as needed.
• Coordinate across ISS workstreams and with program stakeholders to ensure security Deliverables.

Skills

Vulnerability Management

Security Compliance

Documentation & Auditing

Stakeholder Management

Cross-Functional Communication

Job description

The Department of Homeland Security is seeking a Level III security professional with vulnerability management knowledge, strong documentation and compliance experience, and excellent stakeholder communication skills. The role emphasizes cross-functional collaboration, risk reduction, and delivering security plans and actions across the CARES environment.

The candidate will work with ISS teams to integrate information security into program operations, manage audits and regulatory activities, and