security compliance analyst

Blackpoint Cyber

<div>Blackpoint Cyber is the leading provider of world-class cybersecurity threat hunting, detection and remediation technology. Founded by former National Security Agency (NSA) cyber operations experts who applied their learnings to bring national security-grade technology solutions to commercial customers around the world, Blackpoint Cyber is in hyper-growth mode, fueled by a recent $190m series C round.
What You&rsquo;ll Do
We are looking for a motivated Security Compliance Analyst to help lead our evolving internal security compliance program. As a member of the Internal Security Team, you work closely with the Director of Internal Security Compliance on maintaining and continuously improving our compliance initiatives.
This role requires deep knowledge of US and international security and privacy frameworks and regulations and a strong foundation in cyber security, and security compliance management. You&rsquo;ll play a key role in building organizational resiliency by refining security policies, conducting internal audits, and helping to drive the resolution of compliance gaps.
Day to day, you will:<ul><li>Support the maintenance of a comprehensive security compliance program aligned with laws, regulations, and industry best practices. This includes framework and control mapping, refining policies, standards, and procedures, and continuous monitoring of control compliance.</li><li>Maintain and optimize key programs like Third Party Risk Management and Security Awareness Training.</li><li>Apply expertise in GDPR, HIPAA, PCI DSS, NIST 800-171/CMMC, ISO 27001, SOC2, and FedRAMP controls as well as U.S. state privacy regulations to ensure practices remain compliant and up to date.</li><li>Support internal audits, partnering with stakeholders to remediate findings.</li><li>Support external audits (e.g., SOC 2) through preparation and planning, monitoring and remediation coordination, documentation and follow-up tracking.</li><li>Bring a structured, methodical approach to assisting with cross-functional project implementation.</li><li>Stay current on emerging threats, regulations, and security best practices to strengthen compliance posture.</li></ul>
What You&rsquo;ll Bring:<ul><li>Bachelor&rsquo;s degree (or equivalent experience) in IT, Information Security, Computer Science, Information Systems Management, Privacy, Law, Compliance, or related field.</li><li>Minimum 5 years of experience in privacy, security, or security compliance roles, including experience with internal audit.</li><li>Strong verbal and written communication, organizational, and documentation skills. Experience working with Atlassian Suite tools for collaboration and task management.</li><li>Deep knowledge of regulatory and compliance frameworks, including SOC2, ISO 27001, GDPR, NIS2, CMMC, FedRAMP, HIPAA, PCI DSS.</li><li>Strong analytical and problem-solving abilities with strong attention to detail.</li><li>Proven ability to work with multiple stakeholder groups, coordinating as needed, and supporting the integration of compliance into business processes.</li><li>Hands-on experience with framework and control mapping, compliance automation tools (One Trust Certification Automation, DRATA, and others), and third-party risk management (TPRM) tools.</li><li>Solid understanding of compliance risk, including implementing compensating controls and translating risk assessments for technical and non-technical audiences.</li><li>Experience working in remote or distributed environments.</li><li>Relevant professional certifications are preferred, such as CISA, CIPP/US, CIPP/E, CIPM, or CIPT</li></ul>
Blackpoint Cyber welcomes and encourages applications from qualified individuals of all races, colors, religions, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status. We are committed to equality of opportunity in all aspects of employment. For eligible employees in the US, Blackpoint offers competitive Health, Vision, Dental, and Life Insurance plans, a robust 401k plan, Discretionary Time Off, and other minor perks.
Compensation Range: $115K - $125K</div>

Security Compliance Analyst

NetBrain Technologies.

<div><div>Founded in 2004, NetBrain is the leader in no-code network automation. Its ground-breaking Next-Gen platform provides IT operations teams with the ability to scale their hybrid multi-cloud connected networks by automating the processes associated with Diagnostic Troubleshooting, Outage Prevention and Protected Change Management. Today, over 2,500 of the world's largest enterprises and managed services providers leverage NetBrain's platform.</div>
What We Need

We are seeking a security and compliance leader to build and operationalize a scalable security program for our SaaS environment. This role will define policies, drive alignment with frameworks such as SOC 2, ISO 27001, and NIST, and partner cross-functionally to embed compliance into engineering, infrastructure, and business processes. You will own risk management initiatives&mdash;including third-party risk, control testing, and audit readiness&mdash;while ensuring the organization is prepared for certifications and regulatory requirements. Additionally, you will enhance our security posture through automation, continuous monitoring, and proactive improvements to mitigate evolving threats and compliance risks. 


What You'll Do

Security Program &amp; Compliance
<ul>
<li>Own and scale the company's SaaS security and compliance program, aligning to frameworks such as SOC 2, ISO 27001, NIST, and GDPR.</li>
<li>Define and implement security policies, standards, and controls to meet regulatory and business requirements.</li>
</ul>
Risk Management &amp; Audits
<ul>
<li>Lead risk management efforts, including third-party risk assessments, control testing, and gap analysis.</li>
<li>Drive audit readiness and execution, coordinating evidence collection and remediation for internal and external audits.</li>
</ul>
Policy Integration &amp; Enablement
<ul>
<li>Embed security and compliance requirements into engineering, infrastructure, and operational workflows.</li>
<li>Partner cross-functionally with engineering, legal, and business teams to align on security and compliance goals.</li>
</ul>
Security Engineering &amp; Continuous Improvement
<ul>
<li>Partner with engineering to implement technical safeguards (e.g., access controls, logging, encryption) and automate compliance processes.</li>
<li>Continuously monitor evolving threats and regulations, proactively strengthening the company's security posture.</li></ul> 


What You Bring
<ul>
<li>Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.
</li><li>4+ years of experience in information security, compliance, or related technical roles.
</li><li>Strong knowledge of security frameworks and regulations (e.g., ISO 27001, SOC 2, NIST, PCI-DSS, HIPAA, GDPR).
</li><li>Hands-on experience with cloud environments (AWS, Azure, or GCP) and related security services.
</li><li>Familiarity with auditing, logging, monitoring, SCA, DAST, SAST and vulnerability management tools.
</li><li>Excellent documentation, communication, and collaboration skills.
</li><li>Security certifications (e.g., CISSP, CISM, CISA, CCSK, or equivalent) preferred.
</li><li>Experience with automation tools for compliance (e.g., Terraform, Cloud Custodian, or compliance-as-code frameworks)
</li><li>Background in DevSecOps or secure software development practices preferred.
</li><li>Manual Dexterity: Repetitive motion of wrists, hands and fingers for using a computer.</li>
<li>Stationary Tasks: Sitting for extended periods, remaining in a stationary position.</li></ul> 


What We Offer

Our comprehensive compensation package is vital in how we recognize our people for the impact they make on us reaching our goals as a company.

For this role, the estimated base is $140,000 - $180,000 + Bonus. The actual salary may vary based on a range of factors, including market and individual qualifications objectively assessed during the interview process.

The range listed above is a guideline and may be modified. People Experience offers a comprehensive benefits package in addition to cash compensation that includes but is not limited to 401k and medical/dental coverage. Speak with your Recruiter for more details on our Total Rewards philosophy.<div> 
NetBrain invites all interested and qualified candidates to apply for employment opportunities.

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, or other characteristics protected by law.

If you have a disability that prevents or limits your ability to use or access the site, or if you require any other accommodation in the application process due to a disability, you may request a reasonable accommodation. To make a request, please contact our People Team at: people@netbraintech.com and we will be happy to assist you.

In compliance with applicable laws, NetBrain conducts holistic, individual background reviews in support of all hiring decisions.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.</div></div>

Senior Security Compliance Analyst

Nakisa

<div>Description:

Nakisa is seeking a detail-oriented, proactive, and technically curious Security and Compliance Analyst to support our growing global security and compliance initiatives. This role is central to maintaining and enhancing Nakisa's compliance posture with recognized standards such as SOC 1, SOC 2, ISO/IEC 27001, and data privacy regulations.

You'll work closely with internal teams and external auditors to manage evidence collection, track audit deliverables, and maintain robust documentation. You'll also assist with RFPs/RFIs from prospective clients and contribute to internal security improvement projects. A strong interest and understanding of Artificial Intelligence (AI), particularly its implications on compliance and security, is essential.

This is an excellent opportunity for someone looking to launch or grow a career in information security and compliance in a fast-paced SaaS environment that is deeply invested in cloud technology, AI, and process excellence.

Key Responsibilities:
<ul>
<li>Coordinate and manage tasks related to Nakisa's security and compliance programs, including SOC 1, SOC 2, and ISO 27001 audits.</li>
</ul><ul><li>Collaborate with internal stakeholders and external auditors to collect, organize, and validate audit evidence and documentation.</li>
</ul><ul><li>Drive and support continuous improvement of internal processes, controls, and compliance documentation.</li>
</ul><ul><li>Assist in completing security and compliance sections of RFPs, RFIs, and due diligence questionnaires from prospects and clients.</li>
</ul><ul><li>Contribute to internal information security projects and process improvements.</li>
</ul><ul><li>Ensure documentation and policies are accurate, up-to-date, and aligned with industry standards.</li>
</ul><ul><li>Monitor and follow up on compliance deadlines, audit deliverables, and remediation actions.</li>
</ul><ul><li>Stay informed on evolving security frameworks, regulatory requirements, and AI-related security practices.</li>
</ul><ul><li>Educate employees on security awareness topics and best practices through training, content creation, or internal communications.</li>
</ul>
Qualifications:
<ul>
<li>Bachelor's degree in information security, Cybersecurity, Information Systems, Computer Science, or a related field&mdash;or equivalent hands-on experience.</li>
</ul><ul><li>Solid knowledge of industry standards and frameworks, such as:</li>
</ul><ul><li>SOC 1 / SOC 2 (Type I &amp; II), ISO/IEC 27001 &amp; 27017, CIS Controls, Data protection regulations (GDPR, PIPEDA, CCPA, etc.)</li>
</ul><ul><li>Strong reporting and documentation skills:</li>
</ul><ul><li>Proficiency in generating audit reports, compliance documentation, and RFP/RFI responses</li>
</ul><ul><li>Skilled in Excel, Word, PowerPoint, and PDF tools for structured reporting and evidence tracking</li>
</ul><ul><li>Experience with compliance audits, security questionnaires, or risk assessments</li>
</ul><ul><li>Basic technical knowledge of cloud environments (AWS, Azure, GCP), access controls, encryption, and security operations</li>
</ul><ul><li>Exceptional attention to detail, with the ability to identify gaps, maintain precision, and meet deadlines</li>
</ul><ul><li>Strong verbal and written communication skills, comfortable working cross-functionally with internal teams, auditors, and clients</li>
</ul><ul><li>Demonstrated interest and foundational knowledge in Artificial Intelligence, especially its impact on cybersecurity and compliance</li>
</ul>
Preferred:
<ul>
<li>3+ years of relevant work experience in security compliance, audit, or GRC functions</li>
<li>Exposure to internal controls testing, risk registers, or information security policies</li>
<li>Certifications (or active pursuit) such as:</li>
<li>Certified in Cybersecurity (ISC&sup2; CC), ISO 27001 Lead Implementer or Foundations, CISA etc.</li></ul> 


Why Nakisa?

 Flexibility: Hybrid work model with one day a week from home or four days a month from home. 
 Time off: Three weeks of vacation to start, generous sick leave, one personal day, and maternity or paternity leave. 
 Health and wellness: Comprehensive IPD and OPD coverage plus life insurance. 
 Financial security: Three bonuses a year, including annual and festive bonuses. 
 Social perks: Team events, outdoor lunches or dinners, birthday celebrations, annual gatherings, giveaways, and more. 
 Career growth: Mentorship, education assistance up to PKR 100,000 per year, and reimbursement of job-related professional dues. 
 Culture: Supportive, values-driven teams with leaders who care.

 Make your impact at Nakisa.
If building enterprise-grade, privacy-first AI excites you, apply today and help shape the future of enterprise software.
<ul>
<li>Location: Mega Tower Gulberg, Lahore</li>
<li>Hiring process: AI-powered screening, Recruiter conversation, hiring manager interview, and a panel or skills assessment depending on the role</li>
<li>Not a perfect match: Apply anyway. Potential and drive matter here</li>
</ul>
Apply today.</div>

Security and Compliance Analyst

State of Florida

<div>Requisition No: 873783

Agency: Department of Revenue

Working Title: INFORMATION SECURITY ANALYST IV - 73000322

 Pay Plan: Career Service

Position Number: 73000322

Salary: $68,400.00 - $72,000.00 / annually

Posting Closing Date: 04/27/2026

Total Compensation Estimator Tool<div>
Florida Department of Revenue</div>
<div>
Information Services Program</div>
<div>
Information Security Analyst IV</div>
<div>
Tallahassee</div>
<div>
If you have a desire to use your talent and skills at an organization that provides critical services to millions of individuals, businesses and families across the state, the Florida Department of Revenue invites you to apply to become an essential member of our team. We are committed to maintaining a diverse workforce and providing employment opportunities to veterans and individuals who have a disability. To learn more about the Department of Revenue&rsquo;s excellent array of benefits, including career training, tuition waivers, paid vacations, insurance, and retirement programs, visit our website.</div>
<div>
JOB SUMMARY:
</div><div>The Information Security Analyst IV performs advanced analytical and consultative work in support of the Department&rsquo;s Information Security Program. This position is responsible for interpreting statutory, regulatory, framework, and audit requirements and translating them into actionable security control expectations, implementation guidance, ownership structures, evidence requirements, and related governance processes that can be applied across the Department&rsquo;s technology environment. The position supports the proactive management of security controls by helping improve control clarity, strengthen governance and documentation practices, reduce ambiguity in how requirements are understood and applied, and enhance the Department&rsquo;s ability to demonstrate compliance through normal operations. This work requires collaboration with technical staff, managers, auditors, service owners, and other stakeholders to promote consistent implementation of security expectations, support audit readiness, and advance continuous improvement in the Department&rsquo;s overall security and compliance posture.</div>
<div>
MINIMUM REQUIREMENTS:</div>
<ul>
<li>Five years of professional experience in cybersecurity, technology analysis, compliance, audit, governance, risk management, or related work. *</li>
<li>One year of professional experience must have duties related to compliance, audit, or control interpretation.</li>
</ul>
<div>SUBSTITUTIONS:</div>
<ul>
<li><ul><li>A bachelor&rsquo;s degree in cybersecurity, information technology, computer science, information systems, business administration, public administration, audit, risk management, or closely related field may substitute for 4 years of the required experience.</li></ul></li>
</ul>
<div>PREFERENCES:</div>
<ul>
<li>One year of experience interpreting or applying cybersecurity, compliance, audit, or control requirements in an operational environment.</li>
<li>One year of experience developing, maintaining, or supporting security-related documentation, processes, workflows, standards, or governance activities.</li>
<li>One year of experience working in an environment aligned with regulatory or security frameworks, to include 60GG-2, section 282.318, Florida Statutes, NIST Cybersecurity Framework, IRS Publication 1075, or similar requirements.</li>
<li>One year of experience supporting cybersecurity compliance, audit response, corrective action tracking, or control documentation.</li>
<li>Six months of experience using a governance, risk, and compliance platform, work management system, or structured workflow tool such as Onspring or similar tools.</li>
<li>One year of experience developing procedures, standards, guidance, or other formal documentation.</li>
<li>One year of experience coordinating with technical teams, managers, auditors, and other stakeholders in a regulated or compliance-driven environment.</li>
</ul>
<div>SPECIAL NOTES:
</div><ul><li>The anticipated salary for this position is $72,000.</li>
<li>Interviews will be conducted on site for this position.</li>
</ul>
<div>SALARY: $68,400.00 - $72,000.00 / annually</div>
<div>
BENEFITS: Benefits include, but are not limited to, health insurance, life insurance, tuition waivers, paid sick and personal leave, paid parental leave, 10 paid holidays annually, retirement savings, and vision and dental insurance.</div>
<div>
ADDITIONAL INFORMATION YOU NEED TO KNOW</div>
<div>
CONTACT INFORMATION: Alyssa Stevens, (850) 717-6424, Alyssa.Stevens@floridarevenue.com.</div>
<div>
SCREENING DISCLAIMER: Your responses to qualifying questions must be verifiable by skills and/or experiences you stated on your candidate profile and/or resume.</div>
<div>
SKILLS VERIFICATION TEST OR ONLINE SKILLS ASSESSMENT: If you meet the minimum job requirements, we might require you to take a skills verification test or an online skills assessment to be considered for an interview.
</div><div>CANDIDATE POOL: Future vacancies may be filled from this advertisement for a period of up to six months.</div>
<div>
CRIMINAL BACKGROUND CHECKS: You will be required to undergo a National Level-2 criminal background check which requires you to provide your fingerprints.
</div><div>REMINDER: Male candidates born on or after October 1, 1962, will not be eligible for hire or promotion unless they are registered with the Selective Services System (SSS) before their 26th birthday or have a Letter of Registration Exemption from the SSS. For more information, please visit the SSS website at http://www.sss.gov.</div>
Candidates requiring a reasonable accommodation, as defined by the Americans with Disabilities Act, must notify the agency hiring authority and/or People First Service Center (1-866-663-4735). Notification to the hiring authority must be made in advance to allow sufficient time to provide the accommodation.

The State of Florida supports a Drug-Free workplace. All employees are subject to reasonable suspicion drug testing in accordance with Section 112.0455, F.S., Drug-Free Workplace Act.

VETERANS&rsquo; PREFERENCE. Pursuant to Chapter 295, Florida Statutes, candidates eligible for Veterans&rsquo; Preference will receive preference in employment for Career Service vacancies and are encouraged to apply. Certain service members may be eligible to receive waivers for postsecondary educational requirements. Candidates claiming Veterans&rsquo; Preference must attach supporting documentation with each submission that includes character of service (for example, DD Form 214 Member Copy #4) along with any other documentation as required by Rule 55A-7, Florida Administrative Code. Veterans&rsquo; Preference documentation requirements are available by clicking here. All documentation is due by the close of the vacancy announcement.</div>

INFORMATION SECURITY ANALYST IV

FirstEnergy

<div>
 
 Job Description
 
 
 
 
 
 FirstEnergy at a Glance
 
 
 
 
 We are a forward-thinking electric utility powered by a diverse team of employees committed to making customers&rsquo; lives brighter, the environment better and our communities stronger.
 
 
 FirstEnergy (NYSE: FE) is dedicated to safety, reliability, and operational excellence. Headquartered in Akron, Ohio, FirstEnergy includes one of the nation's largest investor-owned electric systems, more than 24,500 miles of transmission lines that connect the Midwest and Mid-Atlantic regions, and a regulated generating fleet with a total capacity of 3,780 megawatts.
 
 
 
 About The Opportunity
 
 
 
 This is an open position with FirstEnergy Service Co., a subsidiary of FirstEnergy Corp. [SC00]
 
 
 This position&rsquo;s reporting location is in Akron, Ohio, and reports to the Manager of Cyber Security Compliance. ). Candidates must reside within commute distance of the FirstEnergy Headquarters or be willing to relocate.
 
 
 The Cyber Security Compliance Analyst supports FirstEnergy&rsquo;s commitment to safety, integrity, accountability, collaboration, and continuous improvement by ensuring strong, sustainable cyber security compliance practices across the enterprise. This role partners with Cyber Security, IT, OT, and business stakeholders across all FirstEnergy subsidiaries to protect cyber and information assets and support compliance with mandatory reliability, cyber security, and information protection requirements, including NERC Critical Infrastructure Protection (CIP) standards and state regulations.
 
 
 The successful candidate applies cyber security and compliance expertise in a manner that upholds FirstEnergy&rsquo;s values, promotes a strong compliance culture, and enables reliable and secure electric service to customers.
 
 
 Responsibilities include
 
 
 
 Cyber Security Compliance &amp; Regulatory Stewardship
 
 
 
 <ul>
 <li>
 Serve as a trusted subject matter expert (SME) for cyber security compliance requirements, providing clear, accurate, and ethical guidance to Cyber Security, IT, OT, and business units.
 </li>
 <li>
 Support FirstEnergy&rsquo;s compliance with NERC CIP Standards and state regulations, helping ensure the protection of BES Cyber Systems and the reliability of the Bulk Electric System.
 </li>
 <li>
 Interpret new and revised regulatory requirements and collaborate with stakeholders to implement compliant, risk‑informed solutions.
 </li>
 <li>
 Participate, as appropriate, in industry forums or standards development activities to responsibly represent FirstEnergy&rsquo;s operational and regulatory interests.
 
 
 </li>
 </ul>
 
 Governance, Risk &amp; Controls
 
 
 
 <ul>
 <li>
 Identify, assess, and communicate cyber security compliance risks in a manner that supports informed, fact‑based business decisions.
 </li>
 <li>
 Support risk remediation, mitigation tracking, and exception management in alignment with FirstEnergy policies, standards, and governance frameworks.
 </li>
 <li>
 Translate technical findings and assessment data into clear risk statements and actionable compliance recommendations.
 
 
 </li>
 </ul>
 
 Audit Readiness, Evidence &amp; Sustainment
 
 
 
 <ul>
 <li>
 Guide and oversee ongoing compliance activities across business units, including evidence collection, control validation, and sustainment practices.
 </li>
 <li>
 Support internal audits, regulatory audits, self‑certifications, and examinations by coordinating responses and ensuring high‑quality, defensible evidence.
 </li>
 <li>
 Promote efficient, repeatable compliance processes that reduce operational burden while maintaining regulatory rigor.
 
 
 </li>
 </ul>
 
 Collaboration, Communication &amp; Culture
 
 
 
 <ul>
 <li>
 Educate and engage stakeholders to improve understanding of cyber security compliance responsibilities and reinforce a strong compliance culture.
 </li>
 <li>
 Develop and deliver professional communications, training materials, reports, and presentations tailored to both technical and non‑technical audiences.
 </li>
 <li>
 Build effective working relationships across organizational boundaries and influence outcomes through expertise, credibility, and collaboration.
 
 
 </li>
 </ul>
 Qualifications
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Information Security, Cybersecurity, Engineering, Corporate Compliance, or a related discipline preferred.
 </li>
 <ul>
 <li>
 A bachelor&rsquo;s degree in another field with relevant cyber security, compliance, or regulated‑industry experience will be considered.
 </li>
 </ul>
 <li>
 Experience working in a regulated environment (electric utility, energy, critical infrastructure, or similar) preferred.
 </li>
 <li>
 Prior experience supporting compliance audits or regulatory reviews is a plus.
 </li>
 <li>
 Working knowledge of NERC CIP Standards and cyber security governance frameworks (e.g., NIST, ISO) preferred.
 </li>
 <li>
 Ability to communicate complex and technical issues clearly, accurately, and professionally to diverse audiences.
 </li>
 <li>
 Experience with GRC platforms and compliance tools.
 </li>
 <li>
 Demonstrated ability to influence stakeholders, resolve compliance challenges collaboratively, and drive continuous improvement.
 </li>
 <li>
 Strong organizational skills with the ability to manage multiple priorities simultaneously.
 </li>
 <li>
 Commitment to ethical conduct, diligence, and accountability for results.
 
 </li>
 </ul>
 
 Benefits, Compensation &amp; Workforce Diversity
 
 
 
 At FirstEnergy, employees are key to our success. We depend on their talents to meet the challenges of our changing business environment. We are committed to rewarding individual and team efforts through our total rewards philosophy which includes competitive pay plus incentive compensation, a company-sponsored pension plan, 401(k) savings plan with matching employer contribution, a choice of medical, prescription drug, dental, vision, and life insurance programs, as well as skills development training with tuition reimbursement. Please visit our website at www.firstenergycorp.com to learn more about all of our employee rewards programs. FirstEnergy proudly supports workforce diversity. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, or status as a qualified individual with a disability. No recruiters or agencies without a previously signed contract. Unable to sponsor or transfer H-1B visas at this time.
 
 
 
 
 Safety
 
 
 
 
 Safety is a core value for FirstEnergy and is essential to all of our business activities. We ensure employees have the tools, information, and processes to perform their duties in a manner that assures safety for themselves, their co-workers, our customers and the public. Our goals are to provide a safe work environment, to maintain an accident-free, injury-free workplace, and to promote and maintain public safety. To meet these goals, we dedicate ourselves to achieving world-class safety standards.
 
 
 
 
 Position Classification
 
 
 
 
 Exempt
 
 
 
 
 FirstEnergy Human Resources Team
 
 
</div>

Cyber and Information Security Analyst - Cyber Security & TSOC

<div>FirstEnergy at a Glance
We are a forward-thinking electric utility powered by a diverse team of employees committed to making customers&rsquo; lives brighter, the environment better and our communities stronger.
FirstEnergy (NYSE: FE) is dedicated to safety, reliability, and operational excellence. Headquartered in Akron, Ohio, FirstEnergy includes one of the nation's largest investor-owned electric systems, more than 24,500 miles of transmission lines that connect the Midwest and Mid-Atlantic regions, and a regulated generating fleet with a total capacity of 3,780 megawatts.
About the Opportunity
This is an open position with FirstEnergy Service Co., a subsidiary of FirstEnergy Corp. [SC00]
This position&rsquo;s reporting location is in Akron, Ohio, and reports to the Manager of Cyber Security Compliance. ). Candidates must reside within commute distance of the FirstEnergy Headquarters or be willing to relocate.
The Cyber Security Compliance Analyst supports FirstEnergy&rsquo;s commitment to safety, integrity, accountability, collaboration, and continuous improvement by ensuring strong, sustainable cyber security compliance practices across the enterprise. This role partners with Cyber Security, IT, OT, and business stakeholders across all FirstEnergy subsidiaries to protect cyber and information assets and support compliance with mandatory reliability, cyber security, and information protection requirements, including NERC Critical Infrastructure Protection (CIP) standards and state regulations.
The successful candidate applies cyber security and compliance expertise in a manner that upholds FirstEnergy&rsquo;s values, promotes a strong compliance culture, and enables reliable and secure electric service to customers.
Responsibilities include
Cyber Security Compliance &amp; Regulatory Stewardship
<ul><li>Serve as a trusted subject matter expert (SME) for cyber security compliance requirements, providing clear, accurate, and ethical guidance to Cyber Security, IT, OT, and business units.
</li><li>Support FirstEnergy&rsquo;s compliance with NERC CIP Standards and state regulations, helping ensure the protection of BES Cyber Systems and the reliability of the Bulk Electric System.
</li><li>Interpret new and revised regulatory requirements and collaborate with stakeholders to implement compliant, risk‑informed solutions.
</li><li>Participate, as appropriate, in industry forums or standards development activities to responsibly represent FirstEnergy&rsquo;s operational and regulatory interests.
</li></ul>Governance, Risk &amp; Controls
<ul><li>Identify, assess, and communicate cyber security compliance risks in a manner that supports informed, fact‑based business decisions.
</li><li>Support risk remediation, mitigation tracking, and exception management in alignment with FirstEnergy policies, standards, and governance frameworks.
</li><li>Translate technical findings and assessment data into clear risk statements and actionable compliance recommendations.
</li></ul>Audit Readiness, Evidence &amp; Sustainment
<ul><li>Guide and oversee ongoing compliance activities across business units, including evidence collection, control validation, and sustainment practices.
</li><li>Support internal audits, regulatory audits, self‑certifications, and examinations by coordinating responses and ensuring high‑quality, defensible evidence.
</li><li>Promote efficient, repeatable compliance processes that reduce operational burden while maintaining regulatory rigor.
</li></ul>Collaboration, Communication &amp; Culture
<ul><li>Educate and engage stakeholders to improve understanding of cyber security compliance responsibilities and reinforce a strong compliance culture.
</li><li>Develop and deliver professional communications, training materials, reports, and presentations tailored to both technical and non‑technical audiences.
</li><li>Build effective working relationships across organizational boundaries and influence outcomes through expertise, credibility, and collaboration.
</li></ul>Qualifications
<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, Cybersecurity, Engineering, Corporate Compliance, or a related discipline preferred.
<ul><li>A bachelor&rsquo;s degree in another field with relevant cyber security, compliance, or regulated‑industry experience will be considered.
</li></ul></li><li>Experience working in a regulated environment (electric utility, energy, critical infrastructure, or similar) preferred.
</li><li>Prior experience supporting compliance audits or regulatory reviews is a plus.
</li><li>Working knowledge of NERC CIP Standards and cyber security governance frameworks (e.g., NIST, ISO) preferred.
</li><li>Ability to communicate complex and technical issues clearly, accurately, and professionally to diverse audiences.
</li><li>Experience with GRC platforms and compliance tools.
</li><li>Demonstrated ability to influence stakeholders, resolve compliance challenges collaboratively, and drive continuous improvement.
</li><li>Strong organizational skills with the ability to manage multiple priorities simultaneously.
</li><li>Commitment to ethical conduct, diligence, and accountability for results.
</li></ul>Benefits, Compensation &amp; Workforce Diversity
 
 
At FirstEnergy, employees are key to our success. We depend on their talents to meet the challenges of our changing business environment. We are committed to rewarding individual and team efforts through our total rewards philosophy which includes competitive pay plus incentive compensation, a company-sponsored pension plan, 401(k) savings plan with matching employer contribution, a choice of medical, prescription drug, dental, vision, and life insurance programs, as well as skills development training with tuition reimbursement. Please visit our website at www.firstenergycorp.com to learn more about all of our employee rewards programs. FirstEnergy proudly supports workforce diversity. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, or status as a qualified individual with a disability. No recruiters or agencies without a previously signed contract. Unable to sponsor or transfer H-1B visas at this time.
 
 
Safety
 
 
Safety is a core value for FirstEnergy and is essential to all of our business activities. We ensure employees have the tools, information, and processes to perform their duties in a manner that assures safety for themselves, their co-workers, our customers and the public. Our goals are to provide a safe work environment, to maintain an accident-free, injury-free workplace, and to promote and maintain public safety. To meet these goals, we dedicate ourselves to achieving world-class safety standards.
 
 
Position Classification
 
 
Exempt 
FirstEnergy Human Resources Team</div>

<div>Position Type :
Full time
Type Of Hire :
Experienced (relevant combo of work and education)
Education Desired :
Bachelor of Computer Science
Job Description
Are you curious, motivated, and forward-thinking? At FIS you will have the opportunity to work on some of the most challenging and relevant issues in financial services and technology. Our talented people empower us, and we believe in being part of a team that is open, collaborative, entrepreneurial, passionate, and above all fun.
About the role:
As a Cybersecurity Analyst with FIS, your skills will be put to the test on the front lines of cybercrime. Information security is at the heart of fintech, and you&rsquo;ll help protect and secure highly-sensitive financial data for customers around the world.
About the team:
The Mainframe Security Compliance team is responsible for leading the audit efforts of the enterprise Mainframe environment, including validating adherence to internal policies, standards, and applicable regulations.
What you will be doing:<ul><li>
Oversee and assign tickets/requests for the Mainframe Security Compliance Team</li><li>
Managing Mainframe audit processes and ensuring compliance with industry standards.</li><li>
Monitor team mailbox and respond to information security-related questions and inquiries using established tools and procedures</li><li>
Gain/expand knowledge of the Mainframe, Security Tools, and Business Policies</li><li>
Expand the team database of procedures and verify/confirm current written procedures are correct as training proceeds</li><li>
Assist the Supervisor and team in daily workflow tasks using Microsoft Office Tools</li><li>
Implement and administer information security controls using Security Software and Mainframe tools</li></ul>
What you will need:<ul><li>
Knowledge of network and security technologies</li><li>
A bachelor's in computer science or a related field, or the equivalent experience</li><li>
Security+ or equivalent certification</li><li>
Proficiency in Microsoft Office Suite</li><li>
Fluent in English; strong written and verbal communication skills</li><li>
Adaptability, a drive to learn, and strong problem-solving skills</li><li>
Ability to work well independently and within a team</li></ul>
Bonus if you have:<ul><li>
Mainframe experience in up to 3 Security Software tools (RACF, ACF2, TSS)</li><li>
Experience with ticketing systems</li><li>
Banking industry knowledge</li><li>
Experience with a Mainframe Production Support Environment</li></ul>
What we offer you:
At FIS, you can learn, grow, and make an impact in your career. Our benefits include:<ul><li>
Flexible and creative work environment</li><li>
Diverse and collaborative atmosphere</li><li>
Professional and personal development resources</li><li>
Opportunities to volunteer and support charities</li><li>
Competitive salary and benefits</li></ul> 
Privacy Statement
FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.
EEOC Statement
FIS is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here supplement document available here 
For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will be required to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.
Sourcing Model
Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.
#pridepass</div>

Cybersecurity Analyst I

Search 10000+ Security compliance analyst jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 security compliance analyst jobs Near Me

Security Compliance Analyst

Senior Security Compliance Analyst

Security and Compliance Analyst

INFORMATION SECURITY ANALYST IV

Cyber and Information Security Analyst - Cyber Security & TSOC

Cyber and Information Security Analyst - Cyber Security & TSOC

Cybersecurity Analyst I