Security Specialist, Junior

Embrace Home Loans•Middletown, RI

18h

About The Position

This role focuses on supporting various aspects of information security, including policy development, compliance, operations, awareness training, and project support. The Security Specialist will assist in maintaining security policies, supporting compliance efforts, monitoring security tools, contributing to security awareness programs, and participating in security-related projects. This is an entry-level position with opportunities to learn and grow within the information security field.

Requirements

Bachelor's degree in Information Security, Computer Science, Information Technology, or related field (or equivalent experience)
0-2 years of experience in information security, IT, or related field
Basic knowledge of information security principles, practices, and technologies
Understanding of common security frameworks (NIST, ISO 27001)
Familiarity with Windows and Linux operating systems
Basic knowledge of networking concepts and protocols
Understanding of common security tools (firewalls, antivirus, SIEM)
Proficiency with Microsoft Office Suite
Basic understanding of financial services regulations (GLBA, NYDFS, CCPA) preferred
Familiarity with data privacy requirements
Understanding of audit and compliance processes
Strong written and verbal communication skills
Detail-oriented with excellent organizational abilities
Ability to handle sensitive information with discretion
Self-motivated with eagerness to learn
Ability to work independently and as part of a small team

Nice To Haves

Security+ or other entry-level security certification
Experience in financial services or regulated industry
Familiarity with mortgage industry operations
Knowledge of cloud security concepts (AWS, Azure)
Basic scripting skills (Python, PowerShell)

Responsibilities

Assist in developing, documenting, and maintaining information security policies, procedures, and standards.
Support the implementation of security controls aligned with industry frameworks (NIST, ISO 27001, SOC).
Help maintain policy documentation and ensure accessibility to all employees.
Track policy exceptions and assist with periodic policy reviews.
Support compliance efforts for financial services regulations including GLBA, FCRA, and state privacy laws.
Assist with internal and external audit preparations and responses.
Maintain compliance tracking documentation and evidence collection.
Help conduct risk assessments for new technologies and business processes.
Monitor regulatory changes and assist with impact assessments.
Monitor security tools and dashboards for potential threats and vulnerabilities.
Assist with vulnerability scanning and remediation tracking.
Support incident response activities under CISO guidance.
Help maintain security tool configurations and documentation.
Participate in security event investigations.
Assist in developing and delivering security awareness training materials.
Help coordinate phishing simulation campaigns.
Support the creation of security communications and alerts.
Track training completion and effectiveness metrics.
Participate in security-related projects and initiatives.
Collaborate with IT team on security requirements for new systems.
Support security architecture reviews for new applications.
Assist with security tool implementations and upgrades.