Senior Information Security Analyst

Marotta Controls•Parsippany, NJ

9d•Hybrid

About The Position

Elevate your career at Marotta Controls, a New Jersey Top Workplace three years running! Dedicated to innovation, quality and excellence, we deliver cutting edge control systems for the Aerospace & Defense industry. At Marotta, we value bold thinking and teamwork, and we empower our employees to push boundaries while delivering top-tier solutions to our customers. Our team fosters a fun, collaborative culture where creativity and technical excellence thrive! Your next big opportunity starts here. Be part of a company where your work supports a mission that makes a difference—apply today! The Senior Information Security Analyst is responsible for the assessment and mitigation of information risk and the remediation of identified vulnerabilities with the corporate network, systems and applications. Reports on findings and recommendations for corrective action. Performs vulnerability assessments as assigned utilizing IT security tools and methodologies. Performs assessments of the IT security/risk posture within the IT network, systems and software applications. Manages continuous monitoring of all information security risk metrics and the broader information security program. Identifies opportunities to reduce risk and documents remediation options regarding acceptance or mitigation of risk scenarios. The Sr. Information Security Analyst assists in all IT audits, IT risk assessments and regulatory compliance efforts including DFARS, NIST and CMMC. Key responsibilities including but not limited to: Management of IT security and IT risk (e.g., data systems, network and/or web) across the enterprise. Address questions from internal and external audits and examinations. Develop, execute, and track the performance of security measures to protect information and network infrastructure and computer systems. Design computer security strategy and engineer comprehensive cybersecurity architecture. Develop policies, procedures and standards that meet existing and newly developed policy and regulatory requirements including DFARS 252.204-7012, NIST 800-171, and CMMC. Serve as project manager/lead within IT security projects. Mentor and coach Level I Information Security Analysts. Promote awareness of applicable regulatory standards, upstream risks, and industry best practices across the enterprise.

Requirements

Preferably 4-7 years of experience
Bachelor’s degree in computer science or equivalent.
Must be a US person.
Basic understanding of the project management life cycle.
Well-developed practical operating knowledge of common desktop/laptop hardware and application software specifically: Windows MS Office Suite Print services and printers System application, systems management, and data communication including basic networking in LAN/WAN environment and remote access solutions.
Understanding of key information security policy requirements, metrics, and reporting.
Strong attention to detail.
Good problem-solving skills with the ability to think creatively.
Excellent written and verbal skills, including ability to clearly articulate technical issues and activities to technical and non-technical staff.
Strong interpersonal skills and the ability to adapt in a complex and changing environment.
Consistently meet expected production, accuracy and quality standards as set by management.
Must be team oriented with the ability to work independently.

Nice To Haves

Information security certification (CISSP, Security+, CySA+).
Technical solution design and planning experience.
Knowledge of risk assessment methodologies.
Knowledge of NIST Cyber Security Framework and associated controls.
Knowledge of the Cybersecurity Maturity Model Certification (CMMC) controls and practices.

Responsibilities

Assessment and mitigation of information risk and the remediation of identified vulnerabilities with the corporate network, systems and applications.
Reporting on findings and recommendations for corrective action.
Performing vulnerability assessments as assigned utilizing IT security tools and methodologies.
Performing assessments of the IT security/risk posture within the IT network, systems and software applications.
Managing continuous monitoring of all information security risk metrics and the broader information security program.
Identifying opportunities to reduce risk and documenting remediation options regarding acceptance or mitigation of risk scenarios.
Assisting in all IT audits, IT risk assessments and regulatory compliance efforts including DFARS, NIST and CMMC.
Management of IT security and IT risk (e.g., data systems, network and/or web) across the enterprise.
Addressing questions from internal and external audits and examinations.
Developing, executing, and tracking the performance of security measures to protect information and network infrastructure and computer systems.
Designing computer security strategy and engineering comprehensive cybersecurity architecture.
Developing policies, procedures and standards that meet existing and newly developed policy and regulatory requirements including DFARS 252.204-7012, NIST 800-171, and CMMC.
Serving as project manager/lead within IT security projects.
Mentoring and coaching Level I Information Security Analysts.
Promoting awareness of applicable regulatory standards, upstream risks, and industry best practices across the enterprise.
Clearly articulate technical issues, solutions and activities to colleagues and clients with associated technical risks
Gather business and technical requirements and assess them against information security policies.
Configure, troubleshoot, and maintain security infrastructure software and hardware.
Evaluate potential new solutions and provide feedback to IT Management
Trains users on software, hardware, applications and creates user documentation.
Define, monitor, and report on information security controls and metrics.
Install software that monitors systems and networks for security breaches and intrusions.
Monitor systems for irregular behavior and set up preventive measures.
Perform regular risk assessments of Marotta systems and report on findings to IT management.
Document and assess Marotta Controls’ information security policies against required compliance frameworks (NIST, DFARS etc…)
Create and maintain action plans for achieving information security goals.
Drive and manage projects from inception to completion.
Attend meetings in person when on-site and via dial-in when working remotely.