Security Analyst IV at NOVALINK SOLUTIONS LLC in Madison, United States

Job description

• Under the general guidance of the Chief Information Security Officer (CISO) and in cooperation
• with the Security Team Lead, this position is responsible for providing advanced security policy
• analysis. This position is responsible for developing and maintaining information security
• policies and workforce training and awareness. This position serves as a resource for staff and
• leaders regarding information security policy implementation, interpretation, and compliance
• This position may lead projects to implement new security controls. This position will also have
• daily, weekly, and monthly duties operating security control systems in place at ETF. It will
• monitor compliance with security policies and procedures.

Responsibilities

• • Information Security Risk Assessment: Identifies, analyzes, evaluates, and documents
• information security risks and controls based on established risk criteria.
• • Risk Management: Measure, monitor and manage risks related to the use of Information
• Technology, Information Security, Privacy, Regulatory Compliance, and Governance.
• Ensures and monitors compliance with industry and government rules and regulations at
• all levels.
• • Control Implementation: Assist the security team to conduct gap analysis and
• implements frameworks and standards such as ISO 27001, NIST, and CSC. Engage
• with your stakeholders to identify issues, understand their needs and challenges to
• proactively find ways the program can support those needs.
• • Coordination: Provides coordination to the GRC team by setting goals, objectives,
• performance metrics, and ensuring that the team is aligned with the organization’s
• mission3. Develops strategies to improve the effectiveness of the GRC program.

Requirements

• • IT Security – 5+ years
• • IT Professional – 8+ years
• • Project leadership experience – 4+ years
• • Experience evaluating and implementing vendor security offerings – 4+ years
• • Strong attention to detail
• • Excellent communication skills (written and verbal)
• IT Security – 5+ years
• IT Professional – 8+ years
• Project leadership experience – 4+ years
• Experience evaluating and implementing vendor security offerings – 4+ years
• Strong attention to detail
• Excellent communication skills (written and verbal)
• • CISSP or equivalent – 1 year
• • CISSP or equivalent – 1 year

Skills

Required

• IT Security
• IT Professional
• Project leadership
• Strong attention to detail

Preferred

• CISSP or equivalent