information security analyst

CACI International Inc

<div>
 Job Title: Information Security Analyst 4
 
 
 Job Category: Information Technology
 
 
 Time Type: Full time
 
 
 Minimum Clearance Required to Start: TS/SCI
 
 
 Employee Type: Regular
 
 
 Percentage of Travel Required: Up to 10%
 
 
 Type of Travel: Local
 
 
 * * *
 
 
 
 Opportunity
 
 
 
 CACI is currently seeking an Information Security Analyst 4 in support of a program whose initiative is aimed at combating evolving and emerging threats, supporting related exploitation and replication activities, and advancing operational rehearsal, exercise, wargaming, and counter system development. Additionally, we are focusing on integration and experimentation, including Modeling and Simulation.
 
 
 By joining this team, you will have a unique opportunity to contribute to the U.S. and our allies&rsquo; ability to develop and apply models and simulations throughout the lifecycle of military and commercial technologies and systems. Your work will help ensure Warfighter readiness and the realization of future capabilities.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Devises and executes strategies for enhancing the security of computer networks and data
 </li>
 <li>
 Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information
 </li>
 <li>
 Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies
 </li>
 <li>
 Conducts in-depth security reviews of program systems, applications, and services
 </li>
 <li>
 May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure
 </li>
 <li>
 May respond to computer security breaches and viruses.
 
 
 </li>
 </ul>
 Evaluates potential weaknesses in systems to identify security threats and develops and applies solutions to mitigate these risks
 
 
 <ul>
 <li>
 Verifies the existence of adequate security protocols to protect digital assets and critical electronic systems
 </li>
 <li>
 Addresses and manages incidents involving computer security breaches and malware infections
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 Required:
 
 
 
 <ul>
 <li>
 Associate of Arts (AA) degree or 2-year technical school.
 </li>
 <li>
 10 years&rsquo; experience or 15+ years of relevant experience in lieu of degree
 </li>
 <li>
 Active TS/SCI clearance
 
 
 </li>
 </ul>
 
 What You Can Expect
 
 
 
 
 A culture of integrity.
 
 
 
 At CACI, we place character and innovation at the center of everything we do. As a valued team member, you&rsquo;ll be part of a high-performing group dedicated to our customer&rsquo;s missions and driven by a higher purpose &ndash; to ensure the safety of our nation.
 
 
 
 An environment of trust.
 
 
 
 CACI values the unique contributions that every employee brings to our company and our customers - every day. You&rsquo;ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
 
 
 
 A focus on continuous growth.
 
 
 
 Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground &mdash; in your career and in our legacy.
 
 
 
 Pay Range
 
 
 
 There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
 
 
 Since this position can be worked in more than one location, the range shown is the national average for the position.
 
 
 
 The Proposed Salary Range For This Position Is
 
 
 
 $53,100-$106,300
 
 
 
 CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.
 
</div>

Information Security Analyst 4

Colorado College

<div><div>Information Security Analyst</div> 

To apply, please visit: https://jobs.coloradocollege.edu/jobs/information-security-analyst-on-campus-colorado-united-states 
 
Job Title: Information Security Analyst 
 
Department: Infrastructure 
 
Campus Location: Main Campus 
 
FLSA Status: Exempt/Salaried 
 
Position Type/ Work Schedule 
<ul>
<li>2080 Hours per year</li>
<li>12 Months per year</li>
<li>40 Hours per week (Estimated)</li>
</ul> 
About Us 
 
Colorado College is a nationally recognized, residential liberal arts college with 2,100 students from around the world. Employees set the stage for student success by bringing their diverse experience and knowledge to the table. The college actively promotes a dynamic and inclusive environment in which students and employees of diverse backgrounds, cultures, and perspectives can learn and work. 
 
Job Summary 
 
Join Colorado College as an Information Security Analyst and help protect the technology, systems, and data that support our vibrant campus community while advancing a culture of cybersecurity awareness and resilience. This position supports the organization's information security program by monitoring, analyzing, and improving institutional security controls. The role assists with securing identity, network, cloud, application, and infrastructure environments through risk analysis, control validation, vulnerability review, and support of secure technology practices. It also supports threat detection, security partner coordination, incident response, and proactive review of security events and trends. In addition, the position assists with awareness and phishing simulation efforts to reduce human risk and strengthen the overall security posture. 
 
Responsibilities 
<ul>
<li>Security Control Analysis and Engineering Support: 
<ul>
<li>Supports the review, validation, and improvement of identity, network, and infrastructure security controls, including conditional access, privileged identity management, multi-factor authentication, firewalls, network admission control, and segmentation technologies.</li>
<li>Partners with other technical teams to analyze configurations, identify control gaps, document findings, and track remediation.</li>
<li>Assists with ensuring security controls are operating effectively and aligned with institutional risk and security standards.</li>
</ul></li><li>Security Awareness and Risk Reduction: 
<ul>
<li>Assists with the administration, analysis, and reporting of the institutional security awareness and phishing simulation program.</li>
<li>Uses campaign data to identify risk trends, support targeted education efforts, and help reduce user-related security risk across the organization.</li>
</ul></li><li>Security Systems and Vendor Support: 
<ul>
<li>Supports the review of software, vendors, and technology integrations to help ensure alignment with security requirements, including single sign-on, logging, data privacy, access control, and secure implementation practices.</li>
<li>Assists with security assessments, documents findings, identifies potential control gaps, and escalates risks to security or IT leadership.</li>
<li>Supports outsourced SOC/MSSP operations by reviewing alerts and escalations, coordinating follow-up, assisting with detection tuning requests, and tracking vendor performance against established procedures and expectations.</li>
</ul></li><li>Incident Response and Threat Management: 
<ul>
<li>Participates in technical incident response efforts, including investigation, containment, eradication, recovery support, forensic analysis support, and post-incident improvement activities.</li>
<li>Review's identity, firewall, endpoint, and infrastructure logs to support continuous security monitoring, identify potential threats, detect policy violations, and validate security control effectiveness.</li>
<li>Assists with proactive threat hunting activities by analyzing security events, documenting findings, escalating suspicious activity, and supporting remediation or control improvement efforts.</li>
</ul></li></ul> 
Minimum Qualifications 
<ul>
<li>Bachelor's degree in a related field</li>
<li>3 years of experience in a related field</li>
</ul> 
One year of relevant work experience may be substituted for one year of required education (OR) one year of relevant academic coursework beyond the minimum requirement may be substituted for one year of required professional experience. 
 
Preferred Qualifications 
 
Applicants are welcome to apply even if you do not meet the preferred qualifications. We value diverse perspectives and encourage individuals with a genuine interest in the role to submit their applications.
 
 
Other Position Details: 
<ul>
<li>Does not supervise others</li>
<li>Position will not drive CC vehicles</li>
</ul> 
Application Instructions 
<ul>
<li>Application Deadline - last day to submit an application: July 15, 2026</li>
<li>This position is not eligible for visa sponsorship.
</li></ul> 
In alignment with our commitment to reduce potential bias in hiring, applicants may redact any information that discloses their age, date of birth, or dates of attendance/graduation from educational institutions on resumes, certifications, transcripts, or other application materials. There will be no penalties for the omission of such information. 
 
Anticipated Hiring Salary Range: 
<ul>
<li>$74,262 to $90,972 per year
</li></ul> 
What We Offer: 
 
As part of the total compensation for Staff and Faculty roles, we offer a competitive benefits package including: 
<ul>
<li>Medical, Dental, and Vision Insurance</li>
<li>Paid vacation and sick time - accrual of 7.34 hours of vacation per pay period (176 hours, 22 days per year) and 4 hours of sick time per pay period (96 hours, 12 days per year)</li>
<li>Paid seasonal breaks and holidays (20 days per year)</li>
<li>403(b) retirement plans where employees contribute 5% of pay and CC contributes 10%</li>
<li>Tuition benefits for employee and eligible dependents</li>
<li>Public Service Loan Forgiveness (PSLF) Assistance Program</li>
<li>Wellness benefits include free access to the sports center, swimming pool, arts and crafts, outdoor programs, and financial consultants</li>
</ul> 
Benefits and Wellness Information: 
 
Please refer to our Benefits Page 
 
Accommodation Statement: 
 
In compliance with the Americans with Disabilities Act (ADA), the Rehabilitation Act of 1973, and Colorado College's policies, if you have a disability and would like to request accommodations to support your application or interview process, please contact Human Resources at HR@coloradocollege.edu as early as possible. Positions may close on the listed deadline or, if posted as continuous, may close without prior notice. 
 
E-Verify Information: 
 
This organization participates in E-Verify. For more information, visit www.e-verify.gov 
 
Leave Information: 
 
Please refer to https://www.coloradocollege.edu/basics/welcome/leadership/policies/vacation-leave-and-accrual.html</div>

Information Security Analyst

Checkout.com

<div>Company Description
We&rsquo;re Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we&rsquo;re behind many of the digital experiences you use every day.
 
 
We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers.
 
 
Whether you want to book a holiday, order food, renew a subscription, or check out online, there&rsquo;s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale.
 
 
If you want to do career-defining work, you&rsquo;ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact.
 
 
With 20 offices across six continents and London as our HQ, we&rsquo;re shaping the future of fintech &ndash; and we&rsquo;re just getting started.<h1 class="jobSectionHeader">
The Role</h1>
As an Information Security Analyst II at Checkout.com, you will work across the full breadth of the information security function, spanning Governance, Risk and Compliance (GRC), AI Governance, Application Security (AppSec), Technology Risk, and Data Governance. This is a role for someone who has built solid foundational expertise and is ready to take independent ownership of security initiatives across multiple domains.
Security at Checkout operates at scale and at pace. We are a global payments business, regulated across multiple jurisdictions, building infrastructure that processes billions of transactions. Our security function needs analysts who can think across domains, communicate with engineers and executives alike, and contribute to a security programme that is genuinely embedded in how the business operates.
At L3 you will manage security programmes, lead assessments, drive policy improvements, and mentor junior colleagues. Your primary focus is independent execution with growing influence. You know your domains well enough to spot gaps, propose solutions, and take them through to completion. 
 
How You'll Make an Impact<h2 class="jobSectionHeader"> 
Governance, Risk and Compliance</h2><ul><li>
Support workstreams within Checkout's GRC programme, including ISO 27001, SOC 2, and relevant regulatory obligations across our global licensed entities.</li><li>
Coordinate control evidence collection activities across internal teams, ensuring continuous audit readiness rather than point-in-time preparation.</li><li>
Maintain and improve GRC documentation including policies, standards, procedures, and control matrices, ensuring they stay current and proportionate to Checkout's evolving risk profile.</li><li>
Monitor the risk register, track remediation activity against agreed timelines, and escalate issues where commitments are at risk.</li><li>
Conduct third-party risk assessments, evaluating supplier security controls and compliance posture in line with Checkout's TPRM framework.</li><li>
Track regulatory change across Checkout's operating markets including DORA, FCA/PRA requirements, and payment scheme obligations, flagging gaps and supporting impact assessments.</li></ul><h2 class="jobSectionHeader">
AI Governance</h2><ul><li>
Support the development and operationalisation of Checkout's AI governance framework, aligned to ISO 42001, the EU AI Act, and NIST AI RMF.</li><li>
Conduct AI risk assessments for internal AI and ML systems and third-party AI tools, evaluating bias, transparency, data lineage, and control adequacy.</li><li>
Maintain an inventory of AI use cases and associated risk classifications, working with product and engineering teams to embed governance requirements at the point of design.</li><li>
Monitor the evolving regulatory landscape for AI in financial services and contribute to policy and control development that keeps Checkout ahead of emerging obligations.</li><li>
Support Checkout's AI Security programme including threat modelling for agentic and LLM-based systems, and controls mapping against the OWASP LLM Top 10 and related frameworks.</li></ul><h2 class="jobSectionHeader">
Technology Risk</h2><ul><li>
Conduct technology risk assessments across infrastructure, cloud environments, and third-party systems, producing clear outputs with actionable treatment recommendations.</li><li>
Support third-party risk management activities, evaluating supplier security controls and compliance posture in line with Checkout's vendor risk framework.</li><li>
Contribute to control assurance activities including vulnerability scanning coordination, firewall and configuration reviews, and access control assessments.</li><li>
Monitor Checkout's technology risk landscape, identifying emerging threats and translating them into actionable risk items for the register and leadership reporting.</li><li>
Support DORA-related ICT risk management obligations, contributing to resilience testing coordination and critical third-party risk assessments.</li></ul><h2 class="jobSectionHeader">
Data Governance</h2><ul><li>
Support Checkout's data governance programme, including data classification, data flow mapping, and enforcement of data handling standards across the business.</li><li>
Contribute to data loss prevention (DLP) controls and tooling, working with engineering and product teams to ensure sensitive data is protected throughout its lifecycle.</li><li>
Assist in maintaining records of processing activities (RoPA) and supporting data protection impact assessments (DPIAs) for new systems and processing activities.</li><li>
Work with the privacy and legal functions to ensure data governance controls meet GDPR, UK GDPR, and applicable regional data protection requirements.</li><li>
Promote data governance awareness and good data handling practices across the business, contributing to training and guidance materials for non-technical teams.</li></ul><h2 class="jobSectionHeader">
Cross-domain Collaboration and Mentoring</h2><ul><li>
Work closely with Engineering, Product, Legal, Procurement, Finance, and Compliance teams to embed security requirements into processes, systems, and projects across all five domains.</li><li>
Respond to security due diligence requests from merchants, partners, and regulators, drawing on multi-domain expertise to provide accurate and comprehensive responses.</li><li>
Provide guidance and day-to-day support to junior analysts (L1 and L2), contributing to their development through knowledge sharing and review.</li><li>
Contribute to the continuous improvement of Checkout's security processes, identifying inefficiencies and proposing practical solutions including automation where viable.</li></ul><h1 class="jobSectionHeader">
What We're Looking For 
</h1><h2 class="jobSectionHeader">
Experience</h2><ul><li>
2 to 4 years of experience in information security, IT audit, or a closely related function, ideally within payments, financial services, or fintech.</li><li>
Demonstrated working knowledge across more than one of the following domains: GRC, AI governance, AppSec, technology risk, or data governance. Depth in one or two with credible breadth across the others is the target profile.</li><li>
Practical experience with one or more major compliance frameworks: PCI DSS (v4.0.1 preferred), ISO 27001, SOC 2, DORA, NIST CSF, or equivalent.</li><li>
Experience supporting or managing external audits, assessments, or regulatory engagements including evidence collation and assessor liaison.</li><li>
Demonstrated ability to own a workstream independently, from scoping through to delivery, without requiring constant direction.</li></ul><h2 class="jobSectionHeader">
Skills and Approach</h2><ul><li>
Strong analytical and process-oriented mindset. You look for root causes and systemic fixes, not just point-in-time remediation.</li><li>
Clear written and verbal communication. You can translate security concepts for technical teams and business stakeholders with equal clarity.</li><li>
Comfortable operating with ambiguity across a complex domain landscape. You can prioritise without perfect information.</li><li>
Collaborative and pragmatic. You understand that security must work with the business and that influence matters as much as expertise.</li><li>
Methodical and well-organised, with a track record of delivering on commitments across concurrent workstreams.</li></ul><h2 class="jobSectionHeader">
Preferred</h2><ul><li>
Relevant certification in one or more domains: CISA, CISM, CISSP, PCIP, ISO 27001 Lead Implementer or Auditor, Certified AppSec Practitioner (CAP), or equivalent.</li><li>
Familiarity with cloud environments (AWS, Azure, GCP) from a security or compliance perspective.</li><li>
Exposure to AI and ML systems from a risk, governance, or security perspective.</li><li>
Experience with security or GRC tooling such as Wiz, Qualys, Microsoft Sentinel, ServiceNow GRC, or similar.</li><li>
Understanding of agentic AI and LLM security risks including OWASP LLM Top 10, prompt injection, and data exfiltration vectors.</li></ul><h2 class="jobSectionHeader">
Hybrid Working Model</h2>
All of our offices globally are onsite three times per week (Tuesday, Wednesday, and Thursday). We've worked towards enabling teams to work collaboratively in the same space while also being able to partner with colleagues globally. During your days at the office, we offer great snacks, breakfast, and lunch options in all of our locations. 
Additional Information
Bring all of you to work
We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.
Here, you&rsquo;ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It&rsquo;s a place where ambition gets met with opportunity, and where your growth is in your hands.
We work as one team, and we back each other to succeed. So whatever your background or identity, if you&rsquo;re ready to grow and make a difference, you&rsquo;ll be right at home here.
It&rsquo;s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.
Life at Checkout.com
We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.
Curious about what it&rsquo;s like to be part of our team? Visit our Careers Page to learn more about our culture, open roles, and what drives us.
For a closer look at daily life at Checkout.com, follow us on LinkedIn and Instagram</div>

Information Security Analyst II

Air Liquide

<div>R10093304 Information Security Analyst - Business Security and Compliance (Open)&amp;#xa;&amp;#xa;
Location:
Houston, TX (HO) - Digital &amp; IT - Hub&amp;#xa;&amp;#xa;
World leader in gases, technologies and services for Industry and Health, Air Liquide is present in 80 countries with approximately 66,000 employees and serves more than 3,6 million customers and patients. Oxygen, nitrogen and hydrogen have been at the core of the company&rsquo;s activities since its creation in 1902. Air Liquide&rsquo;s ambition is to be the leader in its industry, delivering long-term performance and acting responsibly.
<h2 class="jobSectionHeader">How will you CONTRIBUTE and GROW?
</h2>We are committed to building a diverse and inclusive workplace that embraces the unique perspectives of our employees, our customers, patients, community stakeholders, and cultures across the world. We believe that a variety of backgrounds makes our team stronger and more innovative.
 
 
The Security Analysts supports the Information Security Officer to uphold Governance, Risk Management, and Compliance standards across Digital &amp; IT environments. Security analysts are essential in maintaining the cybersecurity integrity of the company's IT and OT systems, as well as its sensitive data by ensuring adherence of Digital &amp; IT operations to established Global security governance.
 
 
This role integrates into a global cybersecurity organization characterized by a rich diversity of cultures, local and global operational requirements, and complex technological landscapes.
At Air Liquide we RESPECT, HONOR and VALUE diversity.
Air Liquide is hiring for a Information Security Analyst - Business Security and Compliance in Houston, TX.
We are looking for you!
Comprehensive Family Benefits: Air Liquide offers a full benefits package designed to support your whole life, including Medical, Dental, Vision, Life, AD&amp;D, and Disability Insurance.
 
Future Security: 401(k) Retirement Plan with company match, Tuition Assistance, Paid Holidays, Vacation, and Sick time.
 
Early Access: Your benefits start on the first day of employment.
Recruiter: Alessandra Manrique - alessandra.manrique@airliquide.com / 281-468-8286
Job Responsibilities:
<ul><li>Ensure alignment with Global Cyber security Framework
</li><li>Enforce policies, procedures and guidelines .
</li><li>Define risk, remediation plans and compensation controls to reduce risk through the use of Deviation Action Treatment Plans (DTAPs)
</li><li>Conduct Security Risk Assessments using Group Tools and Processes.
</li><li>Review cyber security risks for Vendor, Suppliers, Contractors and other Third-Parties
</li><li>Lead the process of critical digital asset compliance including stakeholder communications, reporting, review of evidence and maintaining compliance score
</li><li>Identify privacy and other regulatory requirements including AI evaluations
</li><li>Assess compliance with Global Cyber security Framework throughout the data and application life cycle (CDA&rsquo;s, Global ERP systems)
</li><li>Assist in cyber crisis management response and/or cyber crisis simulations
</li><li>Coordinate cyber security incident response with identified stakeholders to define and minimise impact.
</li><li>Provide support Digital and IT Audits by providing responses and evidence related to cyber security controls.
</li><li>Lead rules of engagement, scope of work assessments and logistics for penetration testing engagements as well as lead Penetration Testing Efforts (IT &amp; OT)
</li><li>Act as Cyber security expert within the organisation.
</li></ul><h2 class="jobSectionHeader">__________________
</h2><h2 class="jobSectionHeader">Are you a MATCH?
</h2>Mandatory Requirements:
<ul><li>Bachelors Degree required
</li><li>4-7 yr of experience in Cyber Security, risk management, and/or compliance
</li><li>Certifications in information security and/or cyber security like CISSP, CISM, CGRC.
</li><li>Level of English C1
</li></ul>Preferred Skills:
<ul><li>Knowledge of security control frameworks and standards such as SOC2, ISO 27001, NIST, etc .
</li><li>Experience securing cloud-based environments .
</li><li>Experience with regulatory requirements.
</li></ul>Our Differences make our Performance 
 
At Air Liquide, we are committed to build a diverse and inclusive workplace that embraces the diversity of our employees, our customers, patients, community stakeholders and cultures across the world. 
 
We welcome and consider applications from all qualified applicants, regardless of their background. We strongly believe a diverse organization opens up opportunities for people to express their talent, both individually and collectively and it helps foster our ability to innovate by living our fundamentals, acting for our success and creating an engaging environment in a changing world.</div>

Information Security Analyst - Business Security and Compliance

General Dynamics Information Technology

An Arma Opportunity
 
ARMA, a GDIT company, supports some of the most complex programs within Special Operations Forces (SOF).
 
Clearance Level
 Top Secret/SCI
 Category
 Cyber and IT Risk Management
 Location
 Fort Bragg, North Carolina
 (Onsite Workplace)
 
Key Skills For Success
 
Information System Security
 
Organizational Security
 
Physical Security
 
Security Policies
 
Security System
 
REQ#: RQ220960
 Public Trust: None
 Requisition Type: Regular
 Your Impact
 
Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.
 
Job Description
 
INFORMATION SECURITY ANALYST SENIOR
 
Advance your career while impacting our national security in cyber as an Information Security Analyst Senior at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.
 
MEANINGFUL WORK AND PERSONAL IMPACT
 As a COMSEC Manager, the work you’ll do at GDIT will be impactful to the mission of a SOCOM Customer. You will serve as an Information Security Analyst responsible for the management, control, accountability, protection, and operational oversight of Communications Security (COMSEC) materials, cryptographic equipment, Controlled Cryptographic Items (CCI), and related keying material supporting secure voice, data, and network communications. Ensures compliance with national security directives, DoW regulations, NSA guidance, and organizational COMSEC policies.
 
COMSEC Account Management
 
Serves as Primary or Alternate COMSEC Custodian for assigned accounts.
 Maintains accountability for all classified and unclassified COMSEC material.
 Conducts inventories, reconciliations, and audits of COMSEC holdings.
 Processes receipt, transfer, destruction, and hand-receipt of COMSEC assets.
 Maintains accurate records in COMSEC accounting systems
 
Cryptographic Equipment Oversight
 
Manages lifecycle of cryptographic devices such as TACLANE, KG-series, KIV devices, secure phones, and related encryption platforms.
 Coordinates loading and safeguarding of cryptographic keys and fill devices.
 Ensure proper storage, handling, transport, and destruction procedures.
 
Security Compliance
 
Provides guidance and direction in the implementation of the COMSEC Program which consists of development of policies and procedures for the issue, accounting, destruction, key management, systems administration, and operational support related to the COMSEC program, IAW TB 380-41, AR 380-19, AR 380-40, USSOCOM, Army, Intelligence Community, and other national directives and policies.
 
Ensures compliance with: 
National Security Agency COMSEC policies
 Department of War Regulations
 CNSSI directives
 TEMPEST / physical security requirements where applicable
 Conduct self-inspections and prepare for command inspections.
 
Incident Reporting
 
Investigates and reports COMSEC incidents, security violations, compromises, or suspected compromises.
 Coordinates corrective actions and mitigation plans.
 Prepares incident documentation and after-action reports.
 
Training & User Support
 
Trains personnel on proper safeguarding and handling of COMSEC materials.
 Advises leadership and system owners on COMSEC requirements.
 Assists technical teams with cryptographic device operations and key management procedures.
 
Program Administration
 
Develops local SOPs, continuity books, and internal controls.
 Tracks maintenance, replacement schedules, and device accountability.
 Supports contingency operations and emergency key change procedures.
 
WHAT YOU’LL NEED TO SUCCEED
 Bring your cyber expertise and drive for innovation to GDIT. The Information Security Analyst Senior must have:
 
Education: 
Associates Degree in related field
 DoD 8570 / 8140 compliant certification(s) IAT Level II
 Security+ CE
 COMSEC Custodian Course
 EKMS / KMI Training
 
Experience: 
4+ years of experience in COMSEC specialty programs and a wide variety of general concepts, principles, and practices to review and analyze COMSEC procedures to ensure program adequacy and needed improvements.
 4+ years in COMSEC management concepts, procedures, policies, and techniques.Technical knowledge of state-of-the-art COMSEC IT systems used for key management and accountability, as well as communications equipment with embedded COMSEC or external COMSEC devices, and ability to evaluate and new developments in solving difficult and complex key management problems.
 
Technical skills: 
Experience in developing COMSEC control procedures and methods of systematic control, accounting, and other means of ensuring protection of COMSEC material.
 Ability to plan, organize, and direct long-range studies, forecast requirements for electronic or digital COMSEC keying material, and develop methods and techniques which enhance the efficiency and capabilities of COMSEC systems.
 Knowledge of overall national COMSEC management programs to include the specific roles of the Intelligence Community.
 Knowledge of a wide variety of secure communications disciplines and in several program, system, and/or technical areas to conduct studies as to the feasibility of new designs and techniques.
 Ability to train and integrate technology utilizing state-of-the-art communications security equipment, or electronic keying material and devices used in the Command operations and specific secure communication systems.
 Ability to train in the use of multi-layered security systems which involve personnel access control, physical protection devices, remote alarm equipment, and other peripherals which apply to Command operations and COMSEC security.
 
Security clearance level: TS/SCI
 
US citizenship required
 
Role requirements: Familiar with: 
KMI (Key Management Infrastructure)
 EKMS (legacy where applicable)
 TACLANE devices
 KG/KY/KIV systems
 Secure telephony systems
 Asset management databases
 
GDIT IS YOUR PLACE
 At GDIT, the mission is our purpose, and our people are at the center of everything we do.
 Growth: AI-powered career tool that identifies career steps and learning opportunities
 Support: An internal mobility team focused on helping you achieve your career goals
 Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
 Community: Award-winning culture of innovation and a military-friendly workplace
 
OWN YOUR OPPORTUNITY
 Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.
 
#armajobs
 Work Requirements
 Years of Experience
 
4 + years of related experience
 
<ul>
<li>may vary based on technical training, certification(s), or degree</li>
</ul>
Certification
 
Travel Required
 
10-25%
 
Citizenship
 
U.S. Citizenship Required
 
Salary and Benefit Information
 
The likely salary range for this position is $76,565 - $97,750. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
 
Our Identity Verification Process
 
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.
 
About Our Work
 
We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.
 
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.
 
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

COMSEC Manager

Amerisure

<div>Amerisure creates exceptional value for its partners, policyholders, and employees. As a property and casualty insurance company, Amerisure&rsquo;s promise to our partner agencies and policyholders begins with a comprehensive line of insurance products designed to protect businesses, as well as the health and safety of every employee. With an A.M. Best &ldquo;A&rdquo; (Excellent) rating, Amerisure serves mid-sized commercial enterprises focused in construction, manufacturing and healthcare. Ranked as one of the top 100 Property &amp; Casualty companies in the United States, we proudly manage nearly $1 Billion of Direct Written Premium and maintain $1.21 billion in surplus.
Amerisure is currently recruiting for a Senior IT Security Risk Analyst that can do a 3-day hybrid approach onsite in our Farmington Hills office. The ideal candidate will also possess the following skill set.
Summary Statement
The Senior IT Security Risk Analyst is responsible for leading the organization&rsquo;s cybersecurity governance, risk, and compliance initiatives. This role drives the design, implementation, and continuous improvement of the IT risk program, ensuring alignment with regulatory requirements (e.g., New York State Department of Financial Services, NIST CSF) and business objectives.
Essential Tasks/Major Duties<ul><li>
Perform security risk assessments of third-party vendors including AI and mobile application reviews.</li><li>
Lead the review, update, and communication of cybersecurity policies, standards, and procedures to ensure alignment with global frameworks (e.g., NIST CSF, NYDFS, NIS2, PCI DSS).</li><li>
Lead and maintain the IT Risk Register including metrics which provides leadership an overall view of IT risk.</li><li>
Perform risk assessments of IT risks.</li><li>
Map regulations to policies and controls.</li><li>
Create risk and compliance metrics for management and compliance purposes.</li><li>
Perform control testing and validation to ensure proper control effectiveness.</li><li>
Support IT audits and controls around Model Audit Rule (MAR).</li><li>
Monitor threat intelligence to determine potential impact to environment and remediation urgency.</li><li>
Support vulnerability management program, daily security operations and identity tasks as needed.</li><li>
Be a key advisor to leadership, translating cybersecurity risk into business impact and enabling informed decision-making.</li></ul>
Knowledge, Skills &amp; Abilities<ul><li>
Bachelor&rsquo;s degree or equivalent combination of education and experience.</li><li>
5 years cybersecurity experience.</li><li>
Advanced Cyber Risk Management domain specific professional certification required: Certified Information Systems Security Professional (CISSP); Certified Information Security Manager (CISM); Certified in Risk and Information Systems Control (CRISC); Certified Cloud Security Professional (CCSP); AWS Certified Security.</li><li>
2 years experience performing IT security control testing.</li><li>
Experience reviewing SOC 2 Type 1 and Type 2 reports to articulate potential security risk.</li><li>
Expertise in conducting third-party cyber risk assessments.</li><li>
Proficient in NIST security domain frameworks and architectures.</li><li>
Experience in Logicgate or another GRC tool.</li><li>
Experience using AI driven tools to enhance automation and operational efficiency.</li><li>
Ability to quickly diagnose security control problems and propose/implement solutions.</li><li>
Clear and concise articulation of risk to both technical peers and non-technical stakeholders.</li><li>
Partner with IT teams, developers, and business leaders to support security initiatives, and mentor and develop members of the security team.</li><li>
Analyze data and security trends to anticipate and assess potential threats.</li><li>
Stay current with regulations, evolving threats, technologies, and security protocols.</li></ul>
#LI-BR1
Just as we are committed to creating exceptional value for our Partners For Success&reg; agencies and policyholders, Amerisure also remains committed to being an employer of choice. We reinforce this commitment by adhering to an Employee Value Proposition that, in part, is provided through a competitive total rewards package. This package includes competitive base pay, performance-based incentive pay, comprehensive health and welfare benefits, a 401(k) savings plan with profit sharing, and generous paid time off programs. We also offer flexible work arrangements to promote work-life balance. Recognized as one of the Best and Brightest&reg; Companies to Work For in the Nation and one of Business Insurance magazine&rsquo;s Best Places to Work in Insurance, we provide a workplace that fosters excellence and professional growth. If you are looking for a collaborative and rewarding career, Amerisure is looking for you.
Amerisure Mutual Insurance Company is an Equal Employment Opportunity employer. Amerisure provides equal employment opportunities to all employees and applicants without regard to race, color, religion, sex (to include sexual orientation and gender identity), national origin, age, disability, genetic information, veteran status, or any other protected characteristic under applicable federal, state, or local laws. Amerisure complies with all applicable laws governing nondiscrimination in employment in all locations where the company operates. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Amerisure prohibits harassment or discrimination of any kind and is committed to maintaining a workplace free from unlawful harassment or discrimination. Amerisure prohibits retaliation against anyone who reports discrimination, participates in an investigation, or opposes unlawful practices. Any improper interference with an employee&rsquo;s ability to perform their job duties may result in disciplinary action, up to and including termination.</div>

Senior IT Security Risk Analyst

RSA Security

<div>
 
 
 Sr Analyst, Information Security &amp; Privacy GRC
 
 
 
 
 RSA provides trusted identity and access management for 12,000 organizations around the world, managing 25 million enterprise identities and providing secure, convenient access to millions of users. RSA specializes in empowering security-first organizations in financial services, healthcare, energy, technology services, and other industries to thrive in a digital world, delivering complete capabilities for modern authentication, access, lifecycle management, and identity governance. Whether in the cloud or on-premises, RSA connects people with the digital resources they depend on everywhere they live, work, and play.
 
 
 For decades, RSA has pioneered many of the encryption, authentication, and identity federation technologies that still power the internet. And now RSA is transforming the industry yet again, paving the way for the future of digital identity through the RSA Unified Identity Platform; next-generation hybrid and cloud solutions; the first ever and only multi-functional, passwordless hardware authenticator; and a frictionless, mobile-optimized experience for the modern workforce. If you are self-motivated and looking for a fast-paced challenge doing something that truly matters, come join our winning team! For more information, go to rsa.com.
 
 
 
 Principal Responsibilities
 
 
 
 <ul>
 <li>
 Responds to customer-related security inquiries.
 </li>
 <li>
 Full ownership of the Customer Assurance queue.
 </li>
 <li>
 Escalating required exceptions to upper levels.
 </li>
 <li>
 Ownership of the end-to-end customer-related tickets and driving them towards resolution and satisfaction.
 </li>
 <li>
 Suggest enhancements and act as a voice of the customers.
 </li>
 <li>
 Works on problems of moderate scope where analysis of situations or data requires a review of multiple factors.
 
 
 </li>
 </ul>
 
 Skills
 
 
 
 <ul>
 <li>
 Good knowledge of information security and privacy aspects.
 </li>
 <li>
 Good understanding of the Security Standards and Frameworks.
 </li>
 <li>
 Exposure to security control assessments or willingness to learn and perform assessments under guidance.
 </li>
 <li>
 Risk management knowledge.
 </li>
 <li>
 Strong verbal and written communication skills in English.
 </li>
 <li>
 Ability to work effectively globally across different time zones, given the diverse locations of our team members.
 
 
 </li>
 </ul>
 
 Education &amp; Experience
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science or Computer Engineering or a related field.
 </li>
 <li>
 2+ years of related experience in a professional role, ideally in a technology setting.
 
 
 </li>
 </ul>
 RSA is committed to the principle of equal employment opportunity for all employees and applicants for employment and to providing employees with a work environment free of discrimination and harassment. All qualified applicants will receive consideration for employment without regard to race, color, and any other category protected by applicable country law.
 
 
 If you need a reasonable accommodation during the application process, please contact the RSA Talent Acquisition Team at
 
 
 rsa.global.talent.acquisition@rsa.com
 
 
 . RSA and its approved consultants will never ask you for a fee to process or consider your application for a career with RSA. RSA reserves the right to amend or withdraw any job posting at any time, including prior to the advertised closing date.
</div>

Senior Analyst, Information Security & Privacy GRC

Search 10000+ Information security analyst jobs near you this July. New roles added regularly across leading industries. Apply today.