Information Security Analyst

CAI•Woodbridge Township, NJ

1d•Hybrid

About The Position

We are looking for a motivated Information Security Analyst ready to take us to the next level! If you have experience monitoring and improving information security controls, managing security risks and compliance activities and are looking for your next career move, apply now. We are looking for an Information Security Analyst to monitor and improve information security controls, manage security risks and compliance activities, and support the protection of enterprise systems, applications, and data assets. This position will be a full-time contract and hybrid.

Requirements

Experience with Governance, Risk, and Compliance (GRC) programs and activities
Experience supporting information security operations, policies, and compliance initiatives
Knowledge of information security principles, frameworks, and industry best practices
Experience conducting security assessments, audits, and remediation activities
Experience identifying, tracking, and managing security risks and vulnerabilities
Experience developing and maintaining security policies, standards, and procedures
Experience responding to and supporting information security incident investigations
Strong analytical, troubleshooting, and problem-solving skills
Strong written and verbal communication skills
Experience creating security documentation, reports, and user awareness materials
Ability to work effectively with technical teams, auditors, management, and business stakeholders

Nice To Haves

Industry experience in information security
Knowledge of network security concepts including protocol analysis, anomaly detection, and network troubleshooting
Knowledge of Windows and Linux/Unix server and workstation security best practices
Experience with vulnerability assessment and security scanning tools
Experience assessing databases, web applications, Windows servers, Unix servers, and data networks
Knowledge of information security standards, regulations, and compliance frameworks
Experience supporting security governance and enterprise risk management programs
Relevant security certifications such as Security+, CISSP, CISM, or related credentials

Responsibilities

Monitor information security controls and processes to ensure they are operating effectively and aligned with organizational requirements
Advise stakeholders on information security risks, vulnerabilities, and remediation strategies
Coordinate and execute information security initiatives and projects across the organization
Respond to and assist with the investigation and resolution of security incidents
Develop, publish, and maintain information security policies, procedures, standards, and guidelines
Conduct organization-wide data classification assessments and security audits
Track, manage, and support remediation activities resulting from security assessments and audits
Collaborate with IT management, Internal Audit, and business stakeholders to identify and address security vulnerabilities
Monitor compliance with established security policies, standards, and regulatory requirements
Develop and maintain security awareness programs and provide user education on security best practices
Perform security research and remain current on emerging threats, vulnerabilities, and industry trends
Prepare and maintain security documentation, reports, procedures, alerts, notifications, and related communications
Support governance, risk, and compliance activities across enterprise technology environments