Information Security Analyst

ESG•Norwell, MA

47d•Hybrid

About The Position

Work as part of ESG's Global Information Security Team to maintain the confidentiality, integrity, and availability of enterprise assets. The Security Analyst plays a critical role in supporting the organization's cybersecurity posture by monitoring, analyzing, and responding to security incidents and threats. This position requires a strong technical foundation, analytical thinking, and understanding of cyber security threats.

Requirements

Two years' experience as a Security Analyst, or 2 years' experience in a related technical field.
Knowledge of implementing, supporting, and auditing information security control frameworks such as, NIST, PCI DSS, ISO and SOC.
Knowledge of security Incident event management and monitoring
Supporting penetration testing and vulnerability management programs
Security threat monitoring
Strong communication skills with the ability to work collaboratively in a global team.
Detail oriented and ability to focus on granular level compliance and security issues.

Responsibilities

Analyze security alerts to identify and respond to any security events or incidents.
Support investigations, reporting and remediation activities of security events and incidents
Manage, create, and update information security documentation.
Provide support to ensure information security compliance with industry regulations and data privacy laws.
Keep up to date with the latest security trends and technologies and recommend improvements to our security posture.
Research the latest information security threats and vulnerabilities and prepare reports and presentations.
Conducting vulnerability assessments on systems and applications, to identify and mitigate any security vulnerabilities.
Participate in both internal and external audits.
Ability to function in a fast-paced environment and effectively manage multiple tasks simultaneously.
All other related duties as assigned.