Junior Security Analyst

NTT DATA Services•Little Rock, AR

1d•$70,000 - $115,000•Remote

About The Position

The Junior Security Analyst, working closely with other analysts, will be a key contributor in providing cyber security advisory services. These services include: evaluating the effectiveness of security programs, assessing risks, and vulnerabilities, identifying control gaps, reviewing vendor reports for consistency and accuracy, managing remediation efforts. The candidate may also conduct independent security and privacy assessments or contribute to security independent verification and validation (IV&V) activities and report/present findings to senior state staff.

Requirements

Minimum five years’ combined experience working with: IT Audits and Assessments
Vulnerability management and/or assessing firewalls and networks, including VPN, DLP, IDS/IPS
HIPAA, CMS MARS-E, NIST, ARC-AMPE Security and Privacy control framework
IT governance, risk, compliance (GRC), auditing, drafting security plans and conducting risk assessments
Hold one or more privacy or security certifications such as IAPP, CHPC, CIPP, CISA, CISM, CISSP
Undergraduate degree or 4 years’ additional relevant experience

Nice To Haves

Master’s degree in computer science management information systems, or related fields
Experience working with State DHS Privacy and/or Security
Comprehensive understanding of security and privacy controls
Exceptional analytical, communication, and collaboration skills
Thorough understanding of NIST, MARS-E, CMS Certification Frameworks
Ability to understand and translate technical jargon
Advanced client and vendor relationship management

Responsibilities

Analysis and comprehension of client’s overall security program and posture
Assessing technical compliance of systems against specified frameworks/requirements
Contributing to the discovery, assessment, analysis, and management of network, and application vulnerabilities and remediation efforts
Identifying and documenting detailed remediation recommendations
Understanding relevant laws and regulations for security and privacy requirements
Providing consultation and framework gap analysis of vendor deliverables to the client - such as system security plans, security control assessments, and information system risk assessments
Drafting or recommending updates to policies, standards, procedures, and related security and privacy deliverables