Senior Cybersecurity Professional

Job Title: Senior Security Analyst

• Performs duties related to compliance certifications, continuous monitoring of controls and operational security administration.
• Analyses security-related incidents, vulnerabilities, and events that may affect the organization and its clients.

Key Responsibilities:

• Provides compliance guidance to business units and product teams.
• Supports Internal/External ISO 27001/9001, SOC 2, SOC 1 and any new regional assessments requirements.
• Works effectively as part of a geographically distributed team.
• Develops and maintains security operations processes & documentation.
• Maintains event collection environment through health monitoring and logs from Fire Walls, VPN, Email protection, Network Analytics, access control cards system and CCTV.
• Interacts with various security products and platforms, including: O365, MimeCast, WorkspaceOne, Fortinet, Cloud Hosting Providers (Azure, AWS) and others.
• Provides support for implementation and maintenance of SIEM, DLP, endpoint protection, and other security tool alerts.
• Provides hands on based input of vendor proposals and emerging security technologies and systems.
• Coordinates, tracks and Manages CEII compliance.
• Provides technical expertise and support to IT management and staff in the implementation of security/protection technologies and network systems/applications.
• Assists with penetration testing and vulnerability management efforts.
• Participates in customer audits and responds to infosec questionnaires as part of the RFP process.
• Participates in incident management activities which include associated investigations, ticket response, communications including periodic tabletop exercises.
• Assists in Risk Management, Vendor Management, and governance of Information Security policies across the company.
• Continuously improves our security practices and processes and keeps company and customer data safe across our services and infrastructure.
• Designs and builds metrics and dashboards to track security incidents, vulnerabilities, risks, and awareness.

Required Skills and Qualifications:

• Minimum 6 years of related experience in Compliance and information security.
• Well-versed in technologies like Windows, Antivirus, Data loss prevention (DLP).
• Must have experience in Firewalls, Cloud platforms, and content filtering solutions.
• Must have experience in creating and maintaining security policy documents.
• Good to have experience with regular vulnerability and web application scanning methodologies.
• Crisis management (Incident Management) identification and reporting.
• Network and cloud-based penetration testing experience required
• Incident response experience and prepare relevant security metrics dashboards
• 2-4 years' experience with Firewall, Network, Anti-Virus, DLP, Azure, AWS, and Desktop security administration
• Proficiency with security tools and platforms (e.g., SIEMs, vulnerability scanners, and malware analyzers)
• Familiarity with IDS/IPS systems and endpoint Antivirus and EDR products
• Insider Threat Hunting and Analysis
• 2 + years of professional experience focused on ITIL standards and practices.
• Knowledge of current security standards, including ISO 27001, ISO 9001, SOC2, SOC 1, FERC, CEII, GDPR
• Ability to understand enterprise business computing operations/requirements, and cloud-based cybersecurity services.
• Working knowledge DevOps concepts (e.g., Infrastructure as Code, Deployment Pipelines)
• Must have a general hands-on IT background with the capability and enthusiasm of delving into new technologies.
• Must be willing to work in different time zones.
• Good communication, presentation, documentation skills.

Benefits:

• We value your unique identity and perspective.
• We are fully committed to providing and fostering a workplace that reflects the diversity of society.
• Bring your authentic self and help us build an inclusive world together.