information security associate

<div>
 At EY, we&rsquo;re all in to shape your future with confidence.
 <br/>
 <br/>
 We&rsquo;ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.
 <br/>
 <br/>
 Today&rsquo;s world is fueled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of almost 1,100 people who collaborate to support the business of EY by protecting EY and client information assets! Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team help protect the EY brand and build client trust.
 <br/>
 <br/>
 Within Information Security we blend risk strategy, digital identity, cyber defense, application security and technology solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting, and enabling the business through innovative, secure solutions that provide speed to market and business value.
 <br/>
 <br/>
 <strong>
  The opportunity
  <br/>
  <br/>
 </strong>
 To create opportunity for people starting their careers in this area of technology, we are launching an intensive paid learning program that invests in our new joiners to upskill with the latest learnings. This unique opportunity provides paid virtual, classroom and exercise-based learning in key areas of technology, communication and collaboration. Distinct technical learning paths focused on high demand areas Information Security culminate in graduation to a role where applied practice begins.
 <br/>
 <br/>
 <strong>
  What qualifications are required for this opportunity?
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Advanced level English (verbal and written)
  </li>
  <li>
   Love for learning and applying technology.
  </li>
  <li>
   Passion for finding and solving problems.
  </li>
  <li>
   Dedication to protect our data, our client&rsquo;s data, and the infrastructure it resides on
  </li>
  <li>
   Enjoyment working as a member of a local team that is part of a larger global team.
  </li>
  <li>
   Desire to eliminate needless toil and make the world a better place.
  </li>
  <li>
   Purpose driven, self-motivated and goal oriented.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What else could you bring?
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience with a scripting or programming language.
  </li>
  <li>
   Knowledge of automation and continuous integration tools
  </li>
  <li>
   Familiarity with Information Security concepts
  </li>
  <li>
   Knowledge about the importance of vulnerability management
  </li>
  <li>
   Experience with various operating systems such as Windows and Linux
  </li>
  <li>
   Desire to connect with globally diverse people
  </li>
  <li>
   Energized by challenges and fast paced tempo
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Why you might like working here:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Our culture encourages autonomy and fun. Happy people make it happen!
  </li>
  <li>
   We invest in you. Learning supported by a coach culminates in an exciting placement on a team.
  </li>
  <li>
   Build your skills and experience at a world class technology company as a member of a global team.
  </li>
  <li>
   A wide variety of career paths with easy access to change roles and/or progress your career.
  </li>
  <li>
   Develop non-technical skills including communication, agile ways of working, cultural &amp; emotional intelligence, customer service, time management, leadership, design &amp; documentation and more.
  </li>
  <li>
   Social events like hackathons, team lunches, holiday parties, community volunteering and more.
  </li>
  <li>
   Being part of an organization where our purpose of Building a better working world is the foundation of our culture.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What We Look For
  <br/>
  <br/>
 </strong>
 We&rsquo;re looking for someone who can collaborate globally with different regions and cultures with an open mind and a creative approach. Critical thinking and problem-solving skills are vital traits to be successful. An individual with strong customer service and communication skills who will share their thoughts and ideas in a safe working environment. A highly motivated, diligent, and driven individual who seeks development and improvement opportunities and deliver quality services
 <br/>
 <br/>
 <strong>
  What We Offer You
  <br/>
  <br/>
 </strong>
 The compensation ranges below are provided in order to comply with United States pay transparency laws. Other geographies will follow their local salary guidelines, which may not be a direct conversion of published US salary ranges. At EY, we&rsquo;ll develop you with future-focused skills and equip you with world-class experiences. We&rsquo;ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.
 <br/>
 <br/>
 <ul>
  <li>
   We offer a comprehensive compensation and benefits package where you&rsquo;ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $60,400 to $109,600. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $72,500 to $124,500. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
  </li>
  <li>
   Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.
  </li>
  <li>
   Under our flexible vacation policy, you&rsquo;ll decide how much vacation time you need based on your own personal circumstances. You&rsquo;ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Are you ready to shape your future with confidence? Apply today.
  <br/>
  <br/>
 </strong>
 EY accepts applications for this position on an on-going basis.
 <br/>
 <br/>
 For those living in California, please click here for additional information.
 <br/>
 <br/>
 EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.
 <br/>
 <br/>
 <strong>
  EY | Building a better working world
  <br/>
  <br/>
 </strong>
 EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
 <br/>
 <br/>
 Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
 <br/>
 <br/>
 EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
 <br/>
 <br/>
 EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.
 <br/>
 <br/>
 EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY&rsquo;s Talent Shared Services Team (TSS) or email the TSS at ssc.customersupport@ey.com.
</div>


Information Security Associate - STS

Santander Consumer Bank

<div><div><div><h1 class="jobSectionHeader"><b>Associate, Information Security</b></h1>
<p>New York, New York</p><p></p><div><div>
</div></div><div><div><div>Job ID</div>
<div>Req1563874</div>
</div><div><div>Category</div>
<div>Technology Risk &amp; Cybersecurity</div>
</div><div><div>Date posted</div>
<div>04/11/2026</div>
</div></div></div><div><div><b>It Starts Here:</b><p></p><p>
Santander is a global leader and innovator in the financial services industry and is evolving from a high-impact brand into a technology-driven organization. Our people are at the heart of this journey and together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what&rsquo;s possible. This is more than a strategic shift. It&rsquo;s a chance for driven professionals to grow, learn, and make a real difference.</p><p></p><p>
If you are interested in exploring the possibilities <b>We Want to Talk to You!</b></p><p></p><p><b>
The Difference You Make:</b></p><p>
Santander is seeking an Associate, Information Security professional to join the Information Security team within the First Line of Defense. This role is primarily focused on <b>Vulnerability Management</b>, with exposure to <b>Network Security</b> as a secondary or &ldquo;nice to have&rdquo; capability. The ideal candidate is a cybersecurity professional who can support, monitor, and help maintain information security controls across on-premises and cloud environments.</p><p></p><p>
As an Associate, you will:</p><ul><li>
Protect the Company, customers, and employees by identifying and mitigating technology threats to Santander</li><li>
Support and strengthen Santander&rsquo;s vulnerability management program through scanning, analysis, prioritization, and remediation tracking</li><li>
Help identify security risks, configuration gaps, and control weaknesses across infrastructure, applications, and cloud services</li><li>
Partner with technology and business teams to drive timely remediation and improve security posture</li><li>
Gain exposure to regulatory expectations and enterprise security operations</li><li>
Build a strong foundation in cyber risk management, with optional growth into network security disciplines.</li></ul><p></p><p><b>
What You Bring:</b></p><p>
The role will report directly to the Director of Information Security and functionally to the Santander US Tower Head of Infrastructure Security Services. The Associate Information Security professional will <b>work closely with multiple technology, application, and business teams</b> across the Santander ecosystem to help <b>advise on secure design and implementation of solutions</b>.</p><p></p><p>
Under the guidance of senior security leaders, this role supports the integration of security controls into new and existing systems while ensuring alignment with Santander&rsquo;s information security policies, standards, and regulatory expectations. The role also supports <b>process improvement and automation initiatives</b>, including the use of scripting and <b>prompt engineering techniques</b> to help streamline repetitive audit, risk, and security-related tasks within the Information Security function.</p><p></p><p><b>
Primary Focus: Vulnerability Management</b></p><ul><li>
Create vulnerability scanning schedules and perform scans on a periodic and ad hoc basis to identify vulnerabilities</li><li>
Conduct vulnerability assessments on IT infrastructure, applications, and related information assets</li><li>
Support the operation and governance of the vulnerability management lifecycle</li><li>
Analyze and prioritize vulnerabilities using the Common Vulnerability Scoring System (CVSS), threat intelligence, exploitability, and business context</li><li>
Identify gaps and risks and drive remediation through closure within established timeframes</li><li>
Partner with infrastructure, application, cloud, and business teams to validate findings and support remediation planning</li><li>
Track remediation progress, escalate aging issues, and support risk acceptance processes when needed</li><li>
Establish, track, and report key vulnerability management metrics (e.g., scan coverage, SLA adherence, critical vulnerability aging)</li><li>
Participate in change request reviews assessing security risk and recommend solutions</li><li>
Perform risk assessments and/or control gap analysis against Information Security Policies and Standards</li></ul><p></p><p><b>
Broader Information Security Responsibilities:</b></p><ul><li>
Collaborate with technology teams to advise on secure implementation of solutions across the Santander environment</li><li>
Provide security input during solution design and change activities, ensuring controls are embedded early in the delivery lifecycle</li><li>
Translate information security requirements into practical, business-aligned guidance for partner teams</li><li>
Support automation of repetitive security and audit-related tasks using scripting tools and prompt engineering techniques</li><li>
Implement book-of-work projects and initiatives within scope, on time, and within budget</li><li>
Establish and maintain appropriate governance forums and escalation paths</li><li>
Manage and monitor technology, audit, and regulatory risk through governance, oversight, reporting, and training initiatives</li><li>
Partner with examiners and auditors on technology examinations, gathering information and responding to findings</li><li>
Bachelor's Degree or equivalent work experience: Computer Science or equivalent field. - Required.</li><li>
5+ Years Experience in information security, governance, IT audit, or risk management. - Required.</li><li>
5+ Years SAS experience. - Required.</li><li>
Understanding of regulatory expectations related to technology and cyber risk (e.g., OCC, FFIEC, DORA, SOX, NYS DFS).</li><li>
Experience with cyber security and information security program management and frameworks (e.g., NIST CSF, ISO/IEC 27000, etc.).</li><li>
Working knowledge of security systems or tools such as Qualys, AlgoSec, Microsoft SCCM, Ansible, Red Hat Satellite, ServiceNow (SNOW), CMDB, etc.</li><li>
Proven ability to work in a team environment.</li><li>
Possess the ability to perform under pressure in a challenging environment.</li><li>
A hunger to learn and take on challenging opportunities, contributing to the success of the information security team.</li><li>
Possess a highly developed sense of personal accountability and follow-through with an ability to effectively prioritize multiple tasks and projects.</li><li>
Must take ownership, demonstrate a sense of urgency, and ensure accuracy and quality.</li></ul><p></p><p><b>
Certifications:</b></p><ul><li>
CompTIA Security+, CompTIA Network+, CISSP</li></ul><p></p><p><b>
It Would Be Nice For You To Have:</b></p><p>
Experience in the following areas is considered a plus:</p><ul><li>
Support oversight of Network Security controls, including firewalls, proxy, Intrusion Prevention Systems (IPS), VPN, Web Application Firewall (WAF), and Network Access Control (NAC), across on-premises and cloud environments</li><li>
Conduct periodic reviews of firewall, proxy, and VPN configurations in accordance with Santander US standards and processes</li><li>
Review firewall configurations to ensure inbound and outbound traffic is limited to what is necessary for business purposes, and that all other traffic is explicitly denied and logged</li><li>
Familiarity with network segmentation, access control principles, and secure rule lifecycle management</li></ul><p></p><p><b>
What Else You Need To Know:</b></p><p>
The base pay range for this position is posted below and represents the annualized salary range. For hourly positions (non-exempt), the annual range is based on a 40-hour work week. The exact compensation may vary based on skills, experience, training, licensure and certifications and location.</p><p></p><p><b>
Base Pay Range:</b></p><p>
Minimum:</p>
$125,000.00 USD<div><div><div><div><div><div><div><p>
Maximum:</p></div></div></div></div></div></div></div>
$165,000.00 USD<p></p><p><b>
We Value Your Impact:</b></p><p>
Your contribution matters and it&rsquo;s recognized. You can expect a fair and competitive rewards package that reflects the impact you create and the value you deliver. We know rewards go beyond numbers. Offering more than just a paycheck our benefits are designed to support you, your family and your well-being, now and into the future. Santander Benefits - 2026 Santander OnGoing/NH eGuide (foleon.com)</p><p></p><p><b>
Risk Culture:</b></p><p>
We embrace a strong risk culture and all of our professionals at all levels are expected to take a proactive and responsible approach toward risk management.</p><p></p><p><b>
EEO Statement:</b></p><p>
At Santander, we value and respect differences in our workforce. We actively encourage everyone to. Santander is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, genetics, disability, age, veteran status or any other characteristic protected by law.<br>
<br>
<b>Working Conditions:</b></p><p>
Frequent minimal physical effort such as sitting, standing and walking is required for this role. Depending on location, occasional moving and lifting light equipment and/or furniture may be required.<br>
<br>
<b>Employer Rights:</b></p><p>
This job description does not list all of the job duties of the job. You may be asked by your supervisors or managers to perform other duties. You may be evaluated in part based upon your performance of the tasks listed in this job description. The employer has the right to revise this job description at any time. This job description is not a contract for employment and either you or the employer may terminate your employment at any time for any reason.</p><p></p><p><b>
What</b><b> To Do Next</b><b>:</b></p><p>
If this sounds like a role you are interested in, then please.</p><p></p><p>
We are committed to providing an inclusive and accessible application process for all candidates. If you require any assistance or accommodation due to a disability or any other reason, please contact us at TAOps@santander.us to discuss your needs.</p></div></div></div></div><p></p>

Associate, Information Security

<div><p><b>Line of Service
</b></p>Internal Firm Services
<p></p><p><b>Industry/Sector
</b></p>Not Applicable
<p></p><p><b>Specialism
</b></p>IFS - Information Technology (IT)
<p></p><p><b>Management Level
</b></p>Senior Associate
<p></p><p><b>Job Description &amp; Summary
</b></p>At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.
<br>
<br>
Those in information security at PwC will focus on protecting sensitive data and systems from cyber threats through risk assessments, security audits, and implementing robust security measures. Your work will help enable the confidentiality, integrity, and availability of information assets for clients.
<p></p><p>Focused on relationships, you are building meaningful client connections, and learning how to manage and inspire others. Navigating increasingly complex situations, you are growing your personal brand, deepening technical expertise and awareness of your strengths. You are expected to anticipate the needs of your teams and clients, and to deliver quality. Embracing increased ambiguity, you are comfortable when the path forward isn&rsquo;t clear, you ask questions, and you use these moments as opportunities to grow.
</p><p></p><p>Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to:
</p><p></p><ul><li><p>Respond effectively to the diverse perspectives, needs, and feelings of others.
</p></li><li><p>Use a broad range of tools, methodologies and techniques to generate new ideas and solve problems.
</p></li><li><p>Use critical thinking to break down complex concepts.
</p></li><li><p>Understand the broader objectives of your project or role and how your work fits into the overall strategy.
</p></li><li><p>Develop a deeper understanding of the business context and how it is changing.
</p></li><li><p>Use reflection to develop self awareness, enhance strengths and address development areas.
</p></li><li><p>Interpret data to inform insights and recommendations.
</p></li><li><p>Uphold and reinforce professional and technical standards (e.g. refer to specific PwC tax and audit guidance), the Firm's code of conduct, and independence requirements.
</p></li></ul><p></p><p>This position will be part of PwC IT Services (US) LLC, a member of the PwC network of firms. PwC IT Services (US) LLC (a wholly owned subsidiary of PwC IT Services Limited) provides technology services to other PwC member firms. PwC refers to the PwC network and/or one or more of its member firms, each of which is a separate legal entity. Please see www.pwc.com/structure for further details.
</p><p></p><p><b>What You Must Have
</b></p><ul><li>High School Diploma
</li></ul><ul><li>At least 2 years of relevant experience
</li></ul><p></p><p><b>Degree Preferred: </b>Bachelor's Degree<br>
</p><p><br>
<b>Preferred Fields of Study: </b>Management Information Systems, Business
<br>
Administration/Management<br>
</p><div><br>
<b>Preferred Knowledge/Skills
</b><br>
Demonstrates thorough knowledge of, and/or proven record of success in, firm
<br>
priorities, Information Security concepts, principles and standards and their application in a large enterprise environment, preferably for a global network of professional services firms, with emphasis in the following areas:
<br>
<ul><li>Understanding and leveraging information security policy and procedure development and maintenance (including security awareness and role-based security training);
</li><li>Execute firm-wide AI security and risk assessments for models, workflows, data flows, and business processes, documenting findings and coordinating follow‑ups with risk owners;
</li><li>Develop, maintain, and operationalize standardized AI security documentation, including templates, review frameworks, and reusable control patterns that support consistent execution across teams;
</li><li>Provide hands‑on enablement to business and technology teams, delivering guidance, clarifying requirements, and supporting the secure adoption of AI solutions across the organization;
</li><li>Providing insight to overall security strategies and evaluating organizational progress towards agreed upon goals, and finding solutions to complex issues in order to maintain timelines and achieve project success;
</li><li>Developing and maintaining information security training and development programs;
</li><li>Creating and maintaining effective business relationships;
</li><li>Writing, communicating, facilitating and presenting cogently; to and/or for all levels of audiences, and internal staff and management;
</li></ul>- Developing team building skills that foster an inclusive and collaborative environment for stakeholders and team members; and - Collaborating with team members to create an atmosphere of trust, seeking diverse views to encourage improvement and innovation, answering questions and providing direction to less-experienced staff, coaching staff including providing timely meaningful written and verbal feedback.<br>
</div><p><br>
Demonstrates thorough abilities, and/or proven record of success, supporting and/or coordinating Information Security Governance, preferably for a global network of professional services firms or matrixed environment, with emphasis in the following areas:<br>
</p><div><br>
<ul><li>Identifying and addressing leadership and stakeholder needs;
</li><li>Collaborating effectively with all levels of stakeholders and project resources to gather information for various project management activities, adapting strategy as needed;
</li><li>Leveraging creative thinking, problem solving, and technology (i.e., MS Office Suite, Lotus Notes, Google at Work and other firm sponsored technologies) to develop deliverables and analyses;
</li><li>Working independently on projects, influencing line manager by providing project and operational planning and implementation; and,
</li><li>Tracking and reporting AI security enablement activities, escalating issues, monitoring progress toward milestones, and ensuring alignment with firm‑wide information security governance requirements;
</li><li>Coordinating across security, governance, and technology groups to operationalize AI control adoption, maintain stakeholder relationships, and support continuous improvement of AI security practices.
</li></ul></div><p></p><p>This is a U.S. based role and PwC IT Services (US) LLC does not intend to hire external job seekers who will need, now or in the future, PwC IT Services (US) LLC sponsorship through the H-1B lottery.
</p><p></p><p>The salary range for this position is: $93,000 - $145,500. Actual compensation within the range will be dependent upon the individual's skills, experience, qualifications and location, and applicable employment laws. Additionally, individuals may be eligible for an annual discretionary bonus. For roles that are based in Maryland, this is the listed salary range for this position.
</p><p></p><p><b>Education </b><i>(if blank, degree and/or field of study not specified)
</i></p>Degrees/Field of Study required:
<p></p>Degrees/Field of Study preferred:
<p></p><p><b>Certifications </b><i>(if blank, certifications not specified)
</i></p><p></p><p><b>Required Skills
</b></p><p></p><p><b>Optional Skills
</b></p>Accepting Feedback, Accepting Feedback, Active Listening, Analytical Thinking, Azure Data Factory, Communication, Creativity, Cybersecurity, Cybersecurity Governance, Data Architecture, Data Archiving, Data Flow Mapping, Data Privacy Act, Embracing Change, Emotional Regulation, Empathy, Enterprise Content Management, Incident Response Plan, Inclusion, Information Rights Management (IRM), Information Security, Information Security Governance, Information Security Management System (ISMS), Intellectual Curiosity, IT Infrastructure {+ 11 more}
<p></p><p><b>Desired Languages </b><i>(If blank, desired languages not specified)
</i></p><p></p><p><b>Travel Requirements
</b></p>0%
<p></p><p><b>Available for Work Visa Sponsorship?
</b></p>No
<p></p><p><b>Government Clearance Required?
</b></p>No
<p></p><p><b>Job Posting End Date
</b></p><p></p>All qualified applicants will receive consideration for employment at PwC IT Services (US) LLC without regard to race; creed; color; religion; national origin; sex; age; disability; sexual orientation; gender identity or expression; genetic predisposition or carrier status; veteran, marital, or citizenship status; or any other status protected by law. PwC IT Services (US) LLC is proud to be an equal opportunity employer.
<p></p>For only those qualified applicants that are impacted by the Los Angeles County Fair Chance Ordinance for Employers, the Los Angeles' Fair Chance Initiative for Hiring Ordinance, the San Francisco Fair Chance Ordinance, San Diego County Fair Chance Ordinance, and the California Fair Chance Act, where applicable, arrest or conviction records will be considered for Employment in accordance with these laws. At PwC, we recognize that conviction records may have a direct, adverse, and negative relationship to responsibilities such as accessing sensitive company or customer information, handling proprietary assets, or collaborating closely with team members. We evaluate these factors thoughtfully to establish a secure and trusted workplace for all.
<p></p>We offer a comprehensive, flexible and competitive benefits program. It provides access to programs that can be tailored to meet the personal health and financial well-being needs of our employees and their families. Our benefits include medical, dental and vision coverage, health savings accounts; mental health support, family and caregiver support, a robust time off policy inclusive of sick, vacation and holiday time; and a retirement savings plan with Roth features and company match.</div>

AI Security Enablement Sr. Associate

Velocity Network, Inc.

<div>Description:
<p>
 Velocity Network, Northwest Pennsylvania&rsquo;s leading technology services firm, is currently searching for a Security and IT Specialist to join our growing team.</p><p>
The Security and IT Specialist plays a critical role in analyzing, assessing, and addressing security incidents and vulnerabilities. This role involves implementing and managing security solutions, conducting security monitoring and analysis, and ensuring compliance with security policies and procedures. The qualified candidate will have a strong technical background in IT security, hands-on experience with security tools and technologies, and the ability to recommend and implement effective security measures.</p><p>
The responsibilities of the position include:</p><ul><li>
Analyze and assess damage to the data/infrastructure due to security incidents, examine available recovery tools and processes, and recommend solutions.</li><li>
Analyze and assess vulnerabilities, research available tools and countermeasures to remedy the detected vulnerabilities, and recommend solutions and best practices.</li><li>
Audit security product deployment to ensure full deployment.</li><li>
Implement and manage security solutions.</li><li>
Perform security monitoring, security and data/logs analysis, and forensic analysis to detect security incidents and initiate an incident response.</li><li>
Investigate and utilize new technologies and processes to enhance security capabilities and implement improvements.</li><li>
Test for compliance with security policies and procedures.</li></ul><p>
 A bachelor's degree in Cybersecurity, Computer and Information Technology or related field with 1-2 years of previous information security experience and at least one security certification required.</p><p>
VNET offers a comprehensive compensation and benefits package including:</p><ul><li>
Competitive Pay</li><li>
Health Insurance</li><li>
Dental Insurance</li><li>
Vision Insurance</li><li>
Flexible Spending Accounts/Section 125 Plan</li><li>
401(k) Savings Plan with a company match</li><li>
Life Insurance</li><li>
Short Term Disability Insurance</li><li>
Paid Time Off</li><li>
Sick Time</li><li>
Paid Holidays</li><li>
Employee Assistance Program</li><li>
On-Site Fitness Facility</li><li>
Free Parking</li></ul><p>
If you&rsquo;re looking for a challenging career that will allow you to showcase your talents, skills, and expertise, a position at VNET could be a great fit.</p>
Requirements:
<ul><li>A bachelor's degree in Cybersecurity, Computer and Information Technology or related field.</li></ul></div>

Security and IT Associate

Vanguard

<div><div>Provides administrative support to a department, operating under direct supervision.</div><div><p><b>
Support a Senior Leader. Be the Connector. Grow Your Career.</b></p><p>
Are you energized by fast‑paced environments, relationships, and learning how a large organization really works? Do you thrive when trusted with responsibility and given room to grow?</p><p>
We&rsquo;re looking for an <b>Administrative Associate </b>to support the <b>Global Head of Identity and Access Management</b> at Vanguard. This is an <b>ideal entry‑level opportunity</b> for someone who brings curiosity, professionalism, and a positive mindset&mdash;and is ready to scale quickly with the right support.</p><div></div><p><b>
 Why This Role Is Special</b></p><p>
This isn&rsquo;t just calendar management.</p><p>
In this role, <b>you&rsquo;ll be at the center of how work gets done</b>, partnering closely with a senior leader and connecting with hundreds of people across the organization. You&rsquo;ll learn how the enterprise functions, who the key players are, and how to navigate priorities at a senior level&mdash;skills that will serve you throughout your career.</p><p></p><p><b>
 What You&rsquo;ll Do
</b></p><ul><li>Manage a dynamic, high‑visibility calendar for a senior leader</li><li>
Coordinate meetings with partners across the organization, including executive‑level participants</li><li>
Learn how Vanguard works&mdash;and quickly figure out <i>who&rsquo;s who</i>, what matters most, and how to get things done</li><li>
Serve as a trusted, approachable point of contact for leaders and team members across the crew</li><li>
Build strong relationships and communicate with confidence and discretion</li><li>
Help surface themes, feedback, and insights you hear across the organization in a thoughtful, professional way</li><li>
Grow your responsibilities and impact as trust and confidence build</li></ul><div></div><p><b>
✅ What We&rsquo;re Looking For
</b></p><ul><li>Strong <b>learning agility</b>&mdash;you pick things up fast and aren&rsquo;t afraid to ask questions</li><li>
A people‑first mindset: approachable, engaging, and collaborative</li><li>
The drive to figure things out, take ownership, and bring great energy to everything you do.</li><li>
A positive, professional, and <b>enthusiastic attitude</b></li><li>
Clear written and verbal communication skills</li><li>
Solid organizational skills and attention to detail</li><li>
Comfort working with calendars, meetings, and deadlines</li><li>
Good judgment and discretion&mdash;you know what to escalate and what to keep confidential</li></ul><div></div><p><b>
➕ Nice to Have
</b></p><ul><li>Prior administrative, coordinator, or scheduling experience</li><li>
Exposure to a large organization or enterprise environment</li><li>
Experience supporting multiple stakeholders or leaders</li><li>
Familiarity with corporate tools (Outlook, Teams, etc.)</li></ul><div></div><p><b>
 Growth &amp; Development</b></p><p>
You&rsquo;ll be supported, coached, and encouraged to grow&mdash;whether that means deepening your administrative expertise or mapping your career journey at Vanguard.</p><div></div><p><b>
 What We Value</b></p><ul><li>
People who speak professionally about past roles and experiences</li><li>
Curiosity over perfection</li><li>
Enthusiasm over ego</li><li>
Integrity, trust, and teamwork</li></ul><p>
W</p><div></div><p><b>
 Location &amp; Work Environment</b></p><ul><li>
Hybrid work model in PA only.</li><li>
No relocation or visa sponsorship available for this role</li></ul><div></div><p><b>
Special Factors</b></p><p><b>
Sponsorship</b></p>
Vanguard is not offering visa sponsorship for this position.<p></p><p><b>
About Vanguard</b></p><p>
At Vanguard, we don't just have a mission&mdash;we're on a mission.</p><p></p><p>
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.</p><p></p><p><b>
How We Work</b></p><p>
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.</p></div></div>

Administrative Associate: Identity & Access Management, GR&S

The Friedkin Group

<div><div><ul><li>Houston, Texas</li><li>
Information Technology</li><li>
Contract</li><li>
GSFSGroup</li><li>
6318</li></ul><div></div><div><div><div><div><div><br>
</div></div></div></div></div></div><div></div><div><h2 class="jobSectionHeader"><b>
Job Description
</b></h2><div><div><b>LIVING OUR VALUES
</b></div><div>All associates are guided by Our Values. Our Values are the unifying foundation of our companies. We strive to ensure that every decision we make and every action we take demonstrates Our Values. We believe that putting Our Values into practice creates lasting benefits for all of our associates, shareholders, and the communities in which we live.</div><div></div><div><b><br>
A Day in The Life</b></div><div>
We&rsquo;re seeking a DevSecOps Engineer to own the secure delivery pipeline and platform foundations across cloud environments. You&rsquo;ll design and automate IAM, infrastructure as code (Terraform), CI/CD (GitHub Actions), and Kubernetes operations, embedding security controls by default and enabling development teams to ship quickly and safely.</div><div></div><div><b><br>
What You&rsquo;ll Do</b></div><ul><li>
Design and implement least-privilege IAM (users, roles, policies, SSO/OIDC) across cloud and Kubernetes (RBAC, service accounts, Pod Security Standards).</li><li>
Build/maintain Terraform modules and environments (prod/non-prod), enforce drift detection, and apply policy-as-code (OPA/Conftest, Sentinel, Checkov/tfsec).</li><li>
Own GitHub Actions pipelines (build/test/scan/sign/release), reusable workflows, environment protections, required reviews, and deployment gates.</li><li>
Operate Kubernetes clusters (EKS/AKS/GKE or on-prem): cluster lifecycle, Helm/Kustomize, GitOps (Argo CD/Flux), NetworkPolicies, ingress, secrets.</li><li>
Embed software supply chain security: SCA/SAST/DAST, container/IaC scanning, SBOM generation, image signing (Cosign), provenance (SLSA).</li><li>
Implement secret management (Vault/Secrets Manager/KMS), key rotation, and secure parameter stores.</li><li>
Stand up observability: metrics, logs, traces (Prometheus/Grafana/ELK/Cloud-native), and actionable alerts.</li><li>
Automate incident response runbooks; support on-call for platform/security events.</li><li>
Partner with AppSec and product teams on threat modeling, secure design reviews, and remediation.</li><li>
Contribute to compliance initiatives (SOC 2/ISO 27001) with evidence automation and configuration baselines.</li><li>
Drive cost, reliability, and capacity guardrails; champion platform DX and documentation.</li></ul><div><b><br>
Required Qualifications</b></div><ul><li>
8+ years in DevOps/Platform/SRE with a security-first mindset.</li><li>
Strong IAM design (cloud + Kubernetes RBAC), OIDC/OAuth2, SSO/IdP (e.g., Okta/Azure Entra).</li><li>
Production Terraform experience (workspaces, modules, remote state, CI-driven plans/applies).</li><li>
Hands-on GitHub Actions (self-hosted runners, OIDC to cloud, environments/protections, matrix builds).</li><li>
Operating Kubernetes in production (Helm, networking, ingress, autoscaling, upgrades, backups/DR).</li><li>
Practical use of security scanners (e.g., Wiz, Trivy/Grype, Dependabot, Checkov/tfsec), and policy-as-code.</li><li>
Proficient with one or more clouds (AWS), Linux, containers, and networking fundamentals.</li><li>
Strong scripting in Python or Bash; Infrastructure troubleshooting and debugging skills.</li><li>
Clear communication, ownership, and ability to drive cross-team initiatives.</li></ul><div><b>
Nice to Have</b></div><ul><li>
HashiCorp Vault, keeper/Kyverno, service mesh (Istio/Linkerd), or CNI like Cilium.</li><li>
GitOps at scale (Argo CD multi-app/multi-cluster), progressive delivery (Argo Rollouts/Flagger).</li><li>
Experience with SIEM, detections, or security data pipelines.</li><li>
Knowledge of data protection (PII), tokenization, and regional compliance.</li><li>
Background in financial/insurance/auto domains (regulated environments).</li></ul><div><b>
Physical Requirements</b></div><div>
The physical requirements described here are representative of those that must be met by an associate to successfully perform the essential functions of the job. While performing the duties of the job, the associate is required on a daily basis to analyze and interpret data, communicate, and remain in a stationary position for a significant amount of the work day; and frequently access, input, and retrieve information from the computer and other office productivity devices. The associate is regularly required to move about the office and around the corporate campus. The associate is occasionally required to travel to other sites, including out-of-state, where applicable, for business. The associate must frequently move up to 10 pounds and occasionally move up to 25 pounds.</div><div></div><div><b><br>
Work Environment</b></div><div>
The work environment characteristics described here are representative of those an associate encounters while performing the essential functions of this job. While the job is generally performed in an office environment, the associate is occasionally exposed to wet and/or humid conditions, areas in which moving mechanical parts, fumes, toxic or caustic chemicals are present, and outside weather conditions. The noise level in the office environment is typically quiet, but the associate may be occasionally exposed to loud noise levels.</div><div><br>
</div><div><b>Travel Required</b></div><div>
Minimal travel is required for this position (up to 20% of the time and on a domestic basis).</div><div></div><div><br>
The Friedkin Group and its affiliates are equal opportunity employers and maintain drug-free workplaces by conducting pre-employment drug testing.</div><div></div><p><br>
#LI-TW1</p></div></div></div>

Dev/Sec Ops Engineer

Arvest Bank

<div><p>Pay is based on a number of factors including the successful candidate&rsquo;s job-related knowledge and skills, qualifications, and prior experience. Arvest offers a comprehensive suite of benefits, including a full range of health and life, financial, and wellness benefits. For more information about benefits, please visit www.arvest.com/careers/benefits .<br>
<br>
</p><p><b>Position is based at 201 W Walnut Street, Rogers, AR 72756.
</b></p><p><b>Position requires flexible availability Monday through Friday 8am to 5pm with additional hours as needed.
</b></p><p>The story of Arvest is one of commitment started by our founders in 1961, with an intense dedication to focusing on our customers. We will always be active and involved members of the communities we serve, and we will always work to put the needs of our customers and associates first as we continue to fulfill our mission &ndash; People helping people find financial solutions for life.
</p><p><b>Job Title: Associate Security Operations Center Analyst
</b></p><p>The Associate Security Operations Center (SOC) Analyst is an initial responder performing analysis, triage, and response coordination to security incidents and alerts ensuring the protection of critical systems and assets. They provide frontline support across various security tools and processes to prevent and respond to potential cyber threats.
</p><p><b>What You&rsquo;ll Do at Arvest:
</b></p><ul><li>Support the team by gathering preliminary evidence, performing initial triage and basic threat analysis of incoming security alerts.
</li></ul><ul><li>Assist with initial response activities during security events and incidents, including cyber threats, major incident responses, physical security, and operational team notifications during outages.
</li></ul><ul><li>Help the team by performing critical event management functions, encompassing proactive severe weather communications, cybersecurity and physical security threat reporting, and the arrangement and implementation of relevant response protocols.
</li></ul><ul><li>Aid with threat intelligence analysis, frontline security incident, and initial incident reporting by collecting, reviewing, and analyzing data.
</li></ul><ul><li>Document and complete security incident and event reports while communicating findings to key stakeholders, contributes to the development of incident handling processes and security posture reports and maintain records of all security events, responses, and outcomes.
</li></ul><ul><li>Collaborate in the development and updates made to incident handling processes, standard operating procedures, playbooks, and runbooks.
</li></ul><ul><li>Identify opportunities for system and procedural improvements and recognize security gaps in critical infrastructure by adjusting alert thresholds, updating rules and security tool parameters.
</li></ul><ul><li>Understand and comply with bank policy, laws, regulations, and the bank's BSA/AML Program, as applicable to your job duties. This includes but is not limited to; complete compliance training and adhere to internal procedures and controls; report any known violations of compliance policy, laws, or regulations and report any suspicious customer and/or account activity.
</li></ul><ul><li>Other duties may be assigned.<br>
</li></ul><br>
<p></p><p>Responsibilities:<br>
<br>
</p><p><b>Required Toolbox for Success:
</b></p><ul><li>High School Diploma or General Education Diploma (GED)
</li></ul><ul><li>1 year of relevant experience in Information Technology (IT), or Emergency Management including experience with security tooling
</li></ul><ul><li>Knowledge of security tools responding to security alerts using case management tool or IT ticketing system
</li></ul><ul><li>Analytical and conceptual thinking skills, with the ability to solve problems and make decisions using data
</li></ul><ul><li>Excellent communication and interpersonal skills, with the ability to build and maintain relationships with internal and external stakeholders
</li></ul><ul><li>Outstanding organizational skills and attention to detail, with the ability to manage multiple tasks and deadlines effectively
</li></ul><ul><li>Proven ability to analyze procedures and standards
</li></ul><ul><li>Ability to maintain an inquisitive mindset and desire for continuous learning
</li></ul><ul><li>Relevant military experience is considered for veterans and transitioning service members
</li></ul><p><b>Preferred Toolbox for Success:
</b></p><ul><li>Bachelor's Degree in Computer Science, Information Security, Information Technology, Emergency Management, or a related field
</li></ul><ul><li>Experience working in a regulated industry
</li></ul><ul><li>General knowledge in networking, monitoring, and incident response
</li></ul><ul><li>Knowledge of scripting or automation languages
</li></ul><ul><li>Working knowledge of Google Workspace and other applicable software
</li></ul><p><b>Physical Demands:
</b></p><p>Regular attendance is an essential function of the job. The associate must be able to travel occasionally by themselves within the US, possibly overnight. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions.
</p><p>We offer competitive compensation, benefits packages, and significant professional growth.
</p><p>Arvest Bank is committed to providing equal opportunity to all persons regardless of race, color, race-based hairstyles and textures, religion, marital status, sex, sexual orientation, gender identity, pregnancy, age, national origin, disability, veteran status, or any other basis, which now or in the future may be specified by law.
</p><p>Along with an excellent benefits package, our associates are engaged, rewarded for performance, and encouraged to grow professionally and personally. Our future is driven by our associates. If you want to be recognized for your results and empowered to reach your potential, we urge you to apply.<br>
</p><br>
<p></p><p><b>Grade 14
</b></p><p><b>Pay Range: </b>$25.30 - $31.60 per hour</p></div>

Associate Security Operations Center Analyst

Search 10000+ Information security associate jobs near you this May. New roles added regularly across leading industries. Apply today.