Information Security & Compliance Support Analyst

ConvergeOne • Minneapolis, MN

1d • Onsite

About The Position

The IT Security Analyst role will assess information risk, track vulnerabilities, and facilitate remediation of vulnerabilities across Corporate IT. This role is responsible for facilitating and managing risk remediation tasks, tracking risk mitigation, maintaining the risk register, preparing reports and documentation, and reporting on findings. The analyst will also develop recommendations for corrective action, perform vulnerability assessments using IT security tools and methodologies, and assess the IT security/risk posture within the IT network, systems, and software applications. Additionally, the role involves identifying and implementing IT security tools, identifying opportunities to reduce risk and documenting remediation options, and facilitating IT audits, risk assessments, and regulatory compliance activities. The analyst will also assist in addressing questions from internal and external audits, recommend policies and procedures, serve as a project manager for IT security projects, promote awareness of regulatory standards and best practices, and conduct analysis of technical approaches for compliance and process improvement. Collaboration with the corporate Information Security and Compliance team is essential to ensure IT alignment with corporate standards and policies.

Requirements

• Bachelor's Degree in Computer Science, Computer Engineering, Information Systems – security certifications will be considered in lieu of a degree
• At least 2 years IT security experience with a proven ability to engage with IT, business, and corporate compliance teams
• Experience in managing IT security controls in an organization
• Experience conducting IT compliance assessments
• Knowledge of technical infrastructure, networks, databases, and systems in relation to IT Security and IT Risk
• Project management skills
• Windows workstation and server administration experience
• Knowledge of data risk management frameworks and compliance practices
• Analytical thinking, strong analytical and assessment skills
• Ability to effectively coordinate collaborate and coordinate with technical and business teams
• Effective and creative technical problem-solving and troubleshooting skills
• Effective written and verbal communication skills, ability to prepare reports and documentation and deliver presentations to team leaders and coworkers

Nice To Haves

• Security+, GISF, SSCP or comparable certifications

Responsibilities

• Facilitates and manages risk remediation tasks, track risk mitigation
• Maintains risk register, prepares reports and documentation and reports on findings
• Develops recommendations for corrective action
• Performs vulnerability assessments utilizing IT security tools and methodologies
• Performs assessments of the IT security/risk posture within the IT network, systems, and software applications
• Identifies and implements IT security tools in support of recommended strategy
• Identifies opportunities to reduce risk and document remediation options regarding acceptance or mitigation of risk scenarios
• Facilitates and assists in IT audits, IT risk assessments and regulatory compliance activities
• Facilitates and assists in addressing questions from internal and external audits and examinations as requested by Compliance
• Recommends policies, procedures and standards that meet existing and newly developed policy and regulatory requirements
• Serves as project manager/lead for IT security projects working collaboratively with technical and business teams
• Promotes awareness of applicable regulatory standards, upstream risks, and industry best practices
• Conducts analysis of technical approaches to achieve compliance requirements and to improve processes
• Collaborates with the corporate Information Security and Compliance team to ensure IT alignment with corporate standards and policies

Benefits

• 401(k) Plan (35% employer match per dollar up to 10% employee contribution)
• Medical Coverage (3 platforms: UnitedHealthcare, Reference Based Pricing includes member advocacy; and Kaiser)
• RX Home Delivery
• HSA with Employer Contribution
• In-vitro Fertility (treatment coverage)
• Dental
• Vision (2 plans: 12-month and 24-month frames allowance)
• FSA Plans (Healthcare, Dependent Care and Limited Purpose)
• Pre-tax Commuter Plans
• Employer-paid Life Insurance
• Employer-paid Short Term Disability
• Long Term Disability (2 plans: Employer-paid or optional Self-paid)
• Paid Parental Leave (4 weeks at 100%)
• Employee Assistance Plan
• Voluntary Life Insurance for team member, spouse and child
• Voluntary Accidental Death for team member and spouse
• Legal/ID Theft Plans
• TeleHealth
• Wellness via Omada Health (healthy living solution)
• Travel Assistance
• Business Travel Accident Coverage
• Medical for foreign travel coverage
• Employer-paid Pet Telehealth
• Accident Insurance
• Critical Illness Insurance
• Hospital Indemnity Insurance
• Volunteer Time Off
• 10 Holidays
• Summer Sizzle
• On Demand Pay (Daily Pay)

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level