information security

Santander Consumer Bank

<div><div><div><h1 class="jobSectionHeader"><b>Associate, Information Security</b></h1>
<p>New York, New York</p><p></p><div><div>
</div></div><div><div><div>Job ID</div>
<div>Req1563874</div>
</div><div><div>Category</div>
<div>Technology Risk &amp; Cybersecurity</div>
</div><div><div>Date posted</div>
<div>04/11/2026</div>
</div></div></div><div><div><b>It Starts Here:</b><p></p><p>
Santander is a global leader and innovator in the financial services industry and is evolving from a high-impact brand into a technology-driven organization. Our people are at the heart of this journey and together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what&rsquo;s possible. This is more than a strategic shift. It&rsquo;s a chance for driven professionals to grow, learn, and make a real difference.</p><p></p><p>
If you are interested in exploring the possibilities <b>We Want to Talk to You!</b></p><p></p><p><b>
The Difference You Make:</b></p><p>
Santander is seeking an Associate, Information Security professional to join the Information Security team within the First Line of Defense. This role is primarily focused on <b>Vulnerability Management</b>, with exposure to <b>Network Security</b> as a secondary or &ldquo;nice to have&rdquo; capability. The ideal candidate is a cybersecurity professional who can support, monitor, and help maintain information security controls across on-premises and cloud environments.</p><p></p><p>
As an Associate, you will:</p><ul><li>
Protect the Company, customers, and employees by identifying and mitigating technology threats to Santander</li><li>
Support and strengthen Santander&rsquo;s vulnerability management program through scanning, analysis, prioritization, and remediation tracking</li><li>
Help identify security risks, configuration gaps, and control weaknesses across infrastructure, applications, and cloud services</li><li>
Partner with technology and business teams to drive timely remediation and improve security posture</li><li>
Gain exposure to regulatory expectations and enterprise security operations</li><li>
Build a strong foundation in cyber risk management, with optional growth into network security disciplines.</li></ul><p></p><p><b>
What You Bring:</b></p><p>
The role will report directly to the Director of Information Security and functionally to the Santander US Tower Head of Infrastructure Security Services. The Associate Information Security professional will <b>work closely with multiple technology, application, and business teams</b> across the Santander ecosystem to help <b>advise on secure design and implementation of solutions</b>.</p><p></p><p>
Under the guidance of senior security leaders, this role supports the integration of security controls into new and existing systems while ensuring alignment with Santander&rsquo;s information security policies, standards, and regulatory expectations. The role also supports <b>process improvement and automation initiatives</b>, including the use of scripting and <b>prompt engineering techniques</b> to help streamline repetitive audit, risk, and security-related tasks within the Information Security function.</p><p></p><p><b>
Primary Focus: Vulnerability Management</b></p><ul><li>
Create vulnerability scanning schedules and perform scans on a periodic and ad hoc basis to identify vulnerabilities</li><li>
Conduct vulnerability assessments on IT infrastructure, applications, and related information assets</li><li>
Support the operation and governance of the vulnerability management lifecycle</li><li>
Analyze and prioritize vulnerabilities using the Common Vulnerability Scoring System (CVSS), threat intelligence, exploitability, and business context</li><li>
Identify gaps and risks and drive remediation through closure within established timeframes</li><li>
Partner with infrastructure, application, cloud, and business teams to validate findings and support remediation planning</li><li>
Track remediation progress, escalate aging issues, and support risk acceptance processes when needed</li><li>
Establish, track, and report key vulnerability management metrics (e.g., scan coverage, SLA adherence, critical vulnerability aging)</li><li>
Participate in change request reviews assessing security risk and recommend solutions</li><li>
Perform risk assessments and/or control gap analysis against Information Security Policies and Standards</li></ul><p></p><p><b>
Broader Information Security Responsibilities:</b></p><ul><li>
Collaborate with technology teams to advise on secure implementation of solutions across the Santander environment</li><li>
Provide security input during solution design and change activities, ensuring controls are embedded early in the delivery lifecycle</li><li>
Translate information security requirements into practical, business-aligned guidance for partner teams</li><li>
Support automation of repetitive security and audit-related tasks using scripting tools and prompt engineering techniques</li><li>
Implement book-of-work projects and initiatives within scope, on time, and within budget</li><li>
Establish and maintain appropriate governance forums and escalation paths</li><li>
Manage and monitor technology, audit, and regulatory risk through governance, oversight, reporting, and training initiatives</li><li>
Partner with examiners and auditors on technology examinations, gathering information and responding to findings</li><li>
Bachelor's Degree or equivalent work experience: Computer Science or equivalent field. - Required.</li><li>
5+ Years Experience in information security, governance, IT audit, or risk management. - Required.</li><li>
5+ Years SAS experience. - Required.</li><li>
Understanding of regulatory expectations related to technology and cyber risk (e.g., OCC, FFIEC, DORA, SOX, NYS DFS).</li><li>
Experience with cyber security and information security program management and frameworks (e.g., NIST CSF, ISO/IEC 27000, etc.).</li><li>
Working knowledge of security systems or tools such as Qualys, AlgoSec, Microsoft SCCM, Ansible, Red Hat Satellite, ServiceNow (SNOW), CMDB, etc.</li><li>
Proven ability to work in a team environment.</li><li>
Possess the ability to perform under pressure in a challenging environment.</li><li>
A hunger to learn and take on challenging opportunities, contributing to the success of the information security team.</li><li>
Possess a highly developed sense of personal accountability and follow-through with an ability to effectively prioritize multiple tasks and projects.</li><li>
Must take ownership, demonstrate a sense of urgency, and ensure accuracy and quality.</li></ul><p></p><p><b>
Certifications:</b></p><ul><li>
CompTIA Security+, CompTIA Network+, CISSP</li></ul><p></p><p><b>
It Would Be Nice For You To Have:</b></p><p>
Experience in the following areas is considered a plus:</p><ul><li>
Support oversight of Network Security controls, including firewalls, proxy, Intrusion Prevention Systems (IPS), VPN, Web Application Firewall (WAF), and Network Access Control (NAC), across on-premises and cloud environments</li><li>
Conduct periodic reviews of firewall, proxy, and VPN configurations in accordance with Santander US standards and processes</li><li>
Review firewall configurations to ensure inbound and outbound traffic is limited to what is necessary for business purposes, and that all other traffic is explicitly denied and logged</li><li>
Familiarity with network segmentation, access control principles, and secure rule lifecycle management</li></ul><p></p><p><b>
What Else You Need To Know:</b></p><p>
The base pay range for this position is posted below and represents the annualized salary range. For hourly positions (non-exempt), the annual range is based on a 40-hour work week. The exact compensation may vary based on skills, experience, training, licensure and certifications and location.</p><p></p><p><b>
Base Pay Range:</b></p><p>
Minimum:</p>
$125,000.00 USD<div><div><div><div><div><div><div><p>
Maximum:</p></div></div></div></div></div></div></div>
$165,000.00 USD<p></p><p><b>
We Value Your Impact:</b></p><p>
Your contribution matters and it&rsquo;s recognized. You can expect a fair and competitive rewards package that reflects the impact you create and the value you deliver. We know rewards go beyond numbers. Offering more than just a paycheck our benefits are designed to support you, your family and your well-being, now and into the future. Santander Benefits - 2026 Santander OnGoing/NH eGuide (foleon.com)</p><p></p><p><b>
Risk Culture:</b></p><p>
We embrace a strong risk culture and all of our professionals at all levels are expected to take a proactive and responsible approach toward risk management.</p><p></p><p><b>
EEO Statement:</b></p><p>
At Santander, we value and respect differences in our workforce. We actively encourage everyone to. Santander is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, genetics, disability, age, veteran status or any other characteristic protected by law.<br>
<br>
<b>Working Conditions:</b></p><p>
Frequent minimal physical effort such as sitting, standing and walking is required for this role. Depending on location, occasional moving and lifting light equipment and/or furniture may be required.<br>
<br>
<b>Employer Rights:</b></p><p>
This job description does not list all of the job duties of the job. You may be asked by your supervisors or managers to perform other duties. You may be evaluated in part based upon your performance of the tasks listed in this job description. The employer has the right to revise this job description at any time. This job description is not a contract for employment and either you or the employer may terminate your employment at any time for any reason.</p><p></p><p><b>
What</b><b> To Do Next</b><b>:</b></p><p>
If this sounds like a role you are interested in, then please.</p><p></p><p>
We are committed to providing an inclusive and accessible application process for all candidates. If you require any assistance or accommodation due to a disability or any other reason, please contact us at TAOps@santander.us to discuss your needs.</p></div></div></div></div><p></p>

Associate, Information Security

Digital Egypt For Investment Co.

<div>
 <strong>
  Overview
  <br/>
  <br/>
 </strong>
 We are seeking a highly skilled and experienced
 <strong>
  Information Security Auditor
 </strong>
 to join our dynamic team. The ideal candidate will be responsible for executing comprehensive information security audits to assess the effectiveness of our organizations&rsquo; security controls and processes. The Senior Information Security Auditor will play a crucial role in identifying vulnerabilities, recommending improvements, and ensuring compliance with industry standards and regulations.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <strong>
  Audit Planning and Execution:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Support the planning, execution, and management of information security audits, including risk assessments and scoping.
  </li>
  <li>
   Conduct thorough reviews of security policies, procedures, and technical controls.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Risk Assessment
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Identify and evaluate potential security risks and vulnerabilities, and provide recommendations for risk mitigation.
  </li>
  <li>
   Collaborate with cross-functional teams to assess the impact of identified risks on business operations.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Compliance And Standards
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Ensure compliance with relevant laws, regulations, and industry standards.
  </li>
  <li>
   Keep abreast of changes in the regulatory environment and recommend adjustments to audit processes accordingly.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Report Generation
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Prepare clear and concise audit reports outlining findings, recommendations, and remediation plans.
  </li>
  <li>
   Communicate audit results to senior management and provide guidance on security best practices.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Collaboration
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Collaborate with internal teams to promote a culture of security awareness and compliance.
  </li>
  <li>
   Support communication with other cross-functional departments to address security concerns and implement solutions.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Continuous Improvement
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Support continuous improvement initiatives related to information security processes and controls.
  </li>
  <li>
   Stay current with emerging security threats and technologies to enhance audit methodologies.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree in Information Security, Computer Science, or a related field.
  </li>
  <li>
   Certified Information Systems Auditor (CISA) or equivalent certifications.
  </li>
  <li>
   Proven experience in information security auditing, risk management, and compliance.
  </li>
  <li>
   Strong understanding of industry standards such as ISO 27001, NIST, and GDPR.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Proficient in using industry-standard audit tools and methodologies.
  </li>
  <li>
   Strong technical background in information security and familiarity with networking, operating systems, and security technologies.
  </li>
  <li>
   Ability to analyze complex systems and processes to identify vulnerabilities and risks.
  </li>
  <li>
   Excellent verbal and written communication skills for preparing reports and interacting with stakeholders.
  </li>
  <li>
   Effective project management skills for planning and executing audits within established timelines.
  </li>
  <li>
   In-depth knowledge of regulatory requirements and industry standards related to information security.
  </li>
  <li>
   Commitment to staying current with evolving security threats and technologies.
  </li>
 </ul>
</div>


Information Security Auditor

Care New England Health System

<p></p><div><div><div><div><div><b>Department:</b></div> <div>CNE-IS ADMINISTRATION</div>
</div><br>
<div><div><b>Operating Unit</b></div> <div>Care New England
<br>
</div></div><br>
<div><div><b>Location:</b></div> <div>Warwick, RI
<br>
</div></div><br>
<div><div><b>Job ID:</b></div> <div>24299
<br>
</div></div><br>
<div><div><b>Job Status:</b></div> <div>Full Time
<br>
</div></div><br>
<div><div><b>Shift: </b></div><div>Days
<br>
</div></div><br>
<div><div><b>Schedule:</b></div> <div>Other<br>
<br>
</div></div><br>
</div></div><div><p><b>Job Summary:</b></p>
<p>The Director, Information Security holds primary responsibility for safeguarding the Care New England (CNE) computing environment. This includes securing systems across all CNE operating units, directing enterprise-wide cybersecurity strategy, and ensuring compliance with HIPAA, PCI, and all applicable federal, state, local, and industry regulations.</p>
<p>The Director serves as the Chief Information Security Officer (CISO) for CNE, providing leadership in risk assessment, incident response, regulatory compliance, and cybersecurity governance. The role oversees information security tools, policies, vulnerability assessments, and monitoring systems; responds to security threats; leads mitigation activities; and collaborates closely with IS teams, Audit/Compliance, HR, Finance, and Legal.</p>
<p>This leader develops and manages the Information Security program, directs security staff, sets security standards, leads incident management, evaluates emerging technologies, manages vendor relationships, and ensures organizational readiness through education, training, and participation in business continuity and disaster recovery planning.</p>
<p><b>Duties and Responsibilities:</b></p>
<ul><li>Develop and maintain the enterprise Information Security Program.
</li><li>Establish protection goals, objectives, and metrics aligned with organizational strategy.
</li><li>Serve as the Chief Information Security Officer (CISO) for CNE.
</li><li>Coordinate with the Chief Privacy Officer to ensure compliant reporting of security incidents.
</li><li>Implement, manage, and maintain enterprise security systems and applications.
</li><li>Lead vulnerability assessments and ensure timely remediation.
</li><li>Oversee security incident response, forensic investigations, and threat mitigation efforts.
</li><li>Examine emerging technologies and assess their security implications.
</li><li>Lead ongoing risk assessment programs addressing information security and privacy.
</li><li>Ensure compliance with HIPAA, PCI, and applicable state and federal regulations.
</li><li>Develop and implement security policies, standards, guidelines, and procedures.
</li><li>Coordinate with IS teams, Audit/Compliance, HR, Finance, and Legal to align security efforts.
</li><li>Participate in disaster recovery and business continuity planning.
</li><li>Lead security education and awareness initiatives for staff across CNE.
</li><li>Manage security vendors responsible for operations, maintenance, and enhancements.
</li><li>Ensure vendor service delivery aligns with organizational security requirements and policies.
</li><li>Negotiate and manage contracts and service-level agreements with external partners.
</li><li>Manage, mentor, and develop information security staff.
</li><li>Promote professional growth and maintain awareness of industry trends.
</li><li>Provide input on resource allocation and security budgeting.
</li><li>Maintain 24-hour on-call availability to support critical operational needs.
</li><li>Perform other job-related duties as assigned.</li></ul>
<p><b>Requirements:</b></p>
<p>Bachelor's Degree Required (computer science, MIS or related field)</p>
<p>Minimum of 7-10 years of progressive experience in information security, Strong technical background in infrastructure, network security, firewalls, and cloud environments, Experience conducting forensic investigations and managing enterprise security products.</p>
<p>Security certifications required: CISSP, GIAC, SANS, or similar. Audit certification preferred: CISA.</p>
<p>Participation in national and regional security organizations preferred.</p>
<ul><li>Deep knowledge of cybersecurity principles, threat landscapes, and protection technologies.
</li><li>Strong working knowledge of enterprise infrastructure, network security, firewalls, and cloud platforms.
</li><li>Expertise in vulnerability management, forensic investigation, risk assessment, and incident response.
</li><li>Ability to develop enterprise-wide policies and governance frameworks.
</li><li>Strong communication skills for engaging executive leadership and cross-functional stakeholders.
</li><li>Exceptional organization, analytical, and decision-making abilities.
</li><li>Ability to manage technical teams and develop staff.
</li><li>Strong vendor management and contract negotiation skills.
</li><li>Ability to maintain confidentiality and uphold ethical and regulatory standards</li></ul>
<p>Additional Information:
<br>
Care New England Health System (CNE) and its member institutions, Butler Hospital, Women &amp; Infants Hospital, Kent Hospital, VNA of Care New England, Integra, The Providence Center, and Care New England Medical Group, and our Wellness Center, are trusted organizations fueling the latest advances in medical research, attracting top specialty-trained doctors, and honing renowned services and innovative programs to engage in the important discussions people need to have about their health.</p>
<p>EEOC Statement: Care New England is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.</p>
<p>Ethics Statement: Employee conducts himself/herself consistent with the ethical standards of the organization including, but not limited to hospital policy, mission, vision, and values.
<br>
Americans with Disability Act Statement: External and internal applicants, as well as position incumbents who become disabled must be able to perform the essential job-specific functions either unaided or with the assistance of a reasonable accommodation, to be determined by the organization on a case-by-case basis.</p></div></div><div></div>

Director Information Security

Aga Khan University

<div>
 <p>
  <strong>
   Introduction to the Aga Khan University:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  Chartered in 1983, Aga Khan University (AKU) is a private, autonomous and self-governing international university with 13 teaching sites in 6 countries distributed across three continents. As an integral part of the Aga Khan Development Network, AKU provides higher education in several disciplines, carries out research pertinent to the countries in which it exists and has campuses, programmes and/or teaching hospitals in Afghanistan, Kenya, Pakistan, Tanzania, Uganda and the UK. As an international institution, AKU operates on the core principles of quality, relevance, impact and access; and AKU is a model of academic excellence and an agent of social change.
 </p>
 <p>
  <br/>
 </p>
 <p>
  As an equal opportunity employer, AKU believes in promoting a diverse and inclusive culture and is committed to adopt appropriate standards for safeguarding and promoting a respectful relationship with and between diverse workforce of its faculty, staff, trainees, volunteers, beneficiaries, wider communities, and other stakeholders with whom it works, including children and vulnerable adults and expects all employees/trainees and partners to share this commitment.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job Role / Responsibilities:
  </strong>
 </p>
 <p>
  As Analyst, Information Security you will be assisting in managing the Global Information Security and to protect AKU&rsquo;s enterprise infrastructure, digital information, and business continuity globally through strong and effective security practices. At Aga Khan University, as an Analyst, Information Security you will be responsible for:
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   assisting in preparation, assessment and enforcement of information security policies, standards, guidelines and procedures and Perform IS policy and procedures gap assessments against information security, regulatory requirements and governance standards, for example ISO27001.2013, COBIT, PCI-DSS etc.
  </li>
  <li>
   ensuring that information security policy and relevant procedures are updated, reviewed and approved by the management at the defined frequency and are in compliance with applicable privacy and identity theft laws and other regulations.
  </li>
  <li>
   performing technology and information security risk assessments.
  </li>
  <li>
   liaising with IT and internal/external audit teams during information systems audit and working as a central point of contact from IT to ensure appropriate flow of information to audit team with any delay.
  </li>
  <li>
   working with IT team for successful closure of the audit observations for all sites (Pakistan, East Africa, UK and Afghanistan).
  </li>
  <li>
   actively participating in the Security Incident Response Team (SIRT).
  </li>
  <li>
   performing internal assessments and identify gaps in current documentation and operations
  </li>
  <li>
   and working to fix these gaps.
  </li>
  <li>
   working with other teams in technology, internal audit and vendors to ensure that AKU-wide information security requirements are incorporated into the rollout of new systems.
  </li>
  <li>
   performing and maintaining information/ data classification policy and procedure and educating IT and business users and ensure all critical information assets are classified properly.
  </li>
  <li>
   performing vulnerability assessments on operating systems, databases, and applications.
  </li>
  <li>
   reviewing of audit logs for critical applications, databases, OS and networks.
  </li>
  <li>
   conducting information security awareness trainings for AKU staff globally.
  </li>
  <li>
   working with business functional leads and technology team leads to ensure that user access rights review and privileged access rights review will complete on time.
  </li>
 </ul>
 <p>
 </p>
 <p>
  <br/>
 </p>
 <p>
 </p>
 <p>
  <strong>
   Eligibility Criteria / Requirements:
  </strong>
 </p>
 <ul>
  <li>
   a bachelor&rsquo;s degree in computer science, Computer Engineering, Information Security, or
  </li>
  <li>
   related field.
  </li>
  <li>
   relevant certifications such as CISA, CISM, CEH, CISSP, or equivalent Experience.
  </li>
  <li>
   1 to 2 years of hands-on experience in Information Security covering risk assessments, policy development, security awareness, IT audits, and implementation of ISO 27001 and PCI-DSS.
  </li>
  <li>
   proven expertise in performing security assessments for infrastructure, systems, and networks, with a focus on identifying vulnerabilities or gaps.
  </li>
  <li>
   experience in incident response planning, investigation, and handling breaches, including navigating legal and disciplinary actions.
  </li>
  <li>
   strong knowledge of Information Security frameworks and standards, including ISO 27001, PCI-DSS, NIST, GDPR, and CIS.
  </li>
  <li>
   ability to conduct information security risk assessments and critical practice assessments, providing actionable insights and recommending improvements.
  </li>
  <li>
   ability to manage and drive remediation efforts following security incidents, penetration tests, vulnerability scans, and audit results.
  </li>
  <li>
   deep understanding of business activities, with the ability to tailor security solutions that address specific needs within the organization.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Comprehensive employment reference checks will be conducted
 </p>
 <p>
 </p>
</div>


Analyst, Information Security

Zones

<div><p><b>Description</b><br>
</p><br>
<br>
<p>Company Overview:</p><p>
When it comes to IT solution providers, there are a lot of choices. But when it comes to providers with innovative and differentiating end-to-end service offerings, there&rsquo;s really only one: Zones &ndash; First Choice for IT.TM</p><p>
Zones is a Global Solution Provider of end-to-end IT solutions with an unmatched supply chain. Positioned to be the IT partner you need, Zones, a Minority Business Enterprise (MBE) in business for over 35 years, specializes in Digital Workplace, Cloud &amp; Data Center, Networking, Security, and Managed/Professional/Staffing services. Operating in more than 120 countries, leveraging a robust portfolio, and utilizing the highest certification levels from key partners, including Microsoft, Apple, Cisco, Lenovo, Adobe, and more, Zones has mastered the science of building digital infrastructures that change the way business does business ensuring whatever they need, they can Consider IT Done. Follow Zones, LLC on Twitter @Zones, and LinkedIn and Facebook.</p><p>
Position Overview:</p><p>
The Information Security Auditor will be responsible for independent planning, executing, and reporting on audits of Zones&rsquo; information security management system (ISMS), privacy information management system (PIMS), and related compliance frameworks (ISO 27001, ISO 27701, SOC 2, etc.). This role ensures continuous improvement of Zones&rsquo; security posture, identifies risks and non-conformities, and provides actionable recommendations to the CISO and senior management.</p><p>
Key Responsibilities:</p><ul><li>
Develop, maintain, and execute the internal IS audit plan under the direction of the CISO.</li><li>
Conduct process, technical, and compliance audits in line with ISO 27001/27701 standards.</li><li>
Validate the effectiveness of security controls across infrastructure, applications, and processes.</li><li>
Assess compliance with regulatory, contractual, and corporate requirements.</li><li>
Identify gaps and risks; recommend corrective and preventive actions.</li><li>
Provide input to the CISO for risk prioritization and security strategy.</li><li>
Prepare concise audit reports with clear findings, root causes, and recommendations.</li><li>
Present audit results to the CISO and Information Security Steering Committee (ISSC).</li><li>
Track remediation progress and report status updates to leadership.</li><li>
Engage with IT, Network, Data Center, and Business teams to review evidence and remediation.</li><li>
Support the CISO in preparing for external audits (ISO, SOC 2, client/vendor assessments).</li><li>
Advise on best practices and continuous improvement of ISMS/PIMS.</li></ul><p>
Required Skills &amp; Competencies:</p><ul><li>
Deep knowledge of ISO 27001:2022 and ISO 27701 standards.</li><li>
Familiarity with other frameworks: NIST CSF, SOC 2, PCI DSS, CIS Controls.</li><li>
Understanding of cloud (Azure, O365), IT infrastructure, and cybersecurity controls.</li><li>
Strong audit methodology, documentation, and reporting skills.</li><li>
Excellent communication and ability to influence cross-functional teams.</li><li>
High integrity, independence, and objectivity.</li></ul><p>
Qualifications &amp; Experience:</p><ul><li>
Bachelor&rsquo;s degree in Information Security, Computer Science, or related field.</li><li>
Preferred certifications or Trainings: ISO 27001 Lead Auditor, ISO 27701 Lead Implementer, CISA, CISSP, CISM.</li><li>
At least 2-3 years&rsquo; experience in internal audits, compliance, or security governance.</li><li>
Experience in IT services or reseller industry is an advantage.</li><li>
Key Performance Indicators (KPIs):</li><li>
Timely delivery of internal IS audit plan.</li><li>
Rate of closure for non-conformities/findings.</li><li>
Effectiveness of recommendations (as measured by improved audit scores or reduced incidents).</li><li>
Contribution to successful external audits and certifications.</li></ul><p>
Zones offers a comprehensive Benefits package</p><p>
At Zones, we are committed to fostering an inclusive and diverse workplace where every team member is valued and supported. We offer life insurance, optional health insurance, EOBI, and a voluntary pension scheme in line with Company policy. Employees also enjoy additional perks such as Complimentary meals, and access to our in-house gym.</p><p>
We take pride in being an equal opportunity employer and remain dedicated to maintaining a workplace free from discrimination of any kind. If you are passionate about driving innovation in IT, sales, engineering, or operations, Zones provides a dynamic and collaborative environment to help you grow your career.</p><p>
All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, age, genetic information, or pregnancy.</p><p>
Job timings: 8:00PM &ndash; 5:00AM (Pk time)</p><p></p><p><br>
#LI-MA1</p></div><p></p>

CoVantage Credit Union

<div>
 Job Details
 <br/>
 <br/>
 <strong>
  Description
  <br/>
  <br/>
 </strong>
 As an Information Security Analyst 1, you&rsquo;ll play an important role in protecting member and employee information, supporting business and technology teams, and contributing to a strong culture of security across the organization. If you&rsquo;re detail‑oriented, curious about cybersecurity, and motivated to make a meaningful impact, this role is an excellent foundation for a security career at CoVantage.
 <br/>
 <br/>
 <strong>
  As a CoVantage team member, you&rsquo;ll receive a 401k employer match of up to 200%, a bonus of annual salary up to 4%, a generous employer HSA contribution, and paid time off for community service.
  <br/>
  <br/>
 </strong>
 <strong>
  Job Duties
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Assists with monitoring systems, networks, and security tools to help protect credit union information and ensure adherence to security policies
  </li>
  <li>
   Supports vulnerability management, security reporting, and remediation efforts under the direction of the Information Security Officer
  </li>
  <li>
   Assists with the administration of information security tools, policies, and standards
  </li>
  <li>
   Responds to security‑related Help Desk requests and provides support to internal users as needed
  </li>
  <li>
   Participates in testing and maintenance of information security controls and business continuity plans
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Associate&rsquo;s or Bachelor&rsquo;s degree in cybersecurity, computer science, networking, or a related field, or six months of professional experience in information security or network administration
  </li>
  <li>
   Basic knowledge of information technology, networking concepts, and information security principles
  </li>
  <li>
   Security+ or other cybersecurity‑related certification preferred; A+ certification or willingness to obtain within 12 months of hire
  </li>
  <li>
   Strong written and verbal communication skills with the ability to work professionally across teams
  </li>
  <li>
   Ability to organize and prioritize work, work independently, and maintain accuracy under pressure
  </li>
  <li>
   Must be bondable
   <br/>
   <br/>
  </li>
 </ul>
 <em>
  Depending on the qualifications and experience of applicants, CoVantage may elect to modify this position and/or job title without reposting the opportunity.
 </em>
</div>


Information Security Analyst

PGMTEK Inc.

<div>
 <p>
  This role demands a strategic thinker with comprehensive knowledge of information security practices and a proven track record of executing and maintaining security operations in a fast-paced, regulated environment. The ideal candidate will have 3-8 years of experience.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Required Qualifications
  </strong>
 </p>
 <ul>
  <li>
   <strong>
    Experience:
   </strong>
   5-10 years of IT security experience ideally within the banking industry.
  </li>
  <li>
   <strong>
    Education:
   </strong>
   Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field. Advanced certifications such as CISSP, CISM, or CISA are preferred.
  </li>
  <li>
   <strong>
    Regulatory Knowledge:
   </strong>
   Strong understanding of federal and state regulatory requirements affecting the banking sector. FIDC, NIST etc.
  </li>
  <li>
   <strong>
    Technical Expertise:
   </strong>
  </li>
  <li>
   Proven experience in network security, backup solutions, patch management, and IT risk assessments.
  </li>
  <li>
   Hands-on experience with security tools like firewalls, SIEM, IDS/IPS, DLP, and antivirus systems.
  </li>
 </ul>
 <p>
  <strong>
   Key Competencies
  </strong>
 </p>
 <ul>
  <li>
   Strategic thinking and problem-solving skills.
  </li>
  <li>
   Ability to work independently and lead cross-functional teams.
  </li>
  <li>
   Strong organizational skills and attention to detail.
  </li>
  <li>
   Ability to manage multiple projects and prioritize effectively.
  </li>
 </ul>
 <p>
  <strong>
   Languages:
  </strong>
 </p>
 <ul>
  <li>
   Fluency in both English and Mandarin is mandatory given global team component.
  </li>
 </ul>
</div>


Search 10000+ Information security jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 information security jobs Near Me

Associate, Information Security

Information Security Auditor

Director Information Security

Analyst, Information Security

Information Security Auditor

Information Security Analyst

Information Security Analyst