security compliance analyst

Agility

<div>
 
 
 Role Summary:
 
 
 
 We are seeking a highly experienced and results-driven&nbsp;Senior Information Security Analyst&nbsp;to serve as our entral&nbsp;Governance, Risk, and Compliance (GRC) resource. This is a pivotal role responsible for the overall design, maintenance, and enhancement of the organization's security and resilience frameworks. The core purpose of this position is to ensure continuous compliance with all relevant international and local standards, with a specific focus on leading our audit readiness and certification efforts.
 
 
 
 Your Responsibilities:
 
 
 
 &nbsp;Compliance and GRC Management
 
 <ul>
 <li>
 &nbsp;Establish, maintain, and enhance the organization's Information Security Management System (ISMS) and Business Continuity &amp; Supply Chain Management (BCSM) frameworks
 </li>
 </ul>
 <ul>
 <li>
 Ensure the organization's compliance with all relevant local, regional, and international regulations and standards, ISO 27001, ISO 22301)
 </li>
 <li>
 Act as the primary auditee and point of contact for all internal and external information security audits
 </li>
 <li>
 Proactively identify, assess, and manage information security and business continuity risks to protect the organization's information assets
 </li>
 <li>
 Drive a culture of security and resilience across the organization
 </li>
 </ul>
 
 &nbsp;Security Controls &amp; Technical Oversight
 
 <ul>
 <li>
 &nbsp;Conduct security assessments and audits of various IT platforms, including cloud infrastructure , on-premise servers (Windows, Linux), databases, and network devices.
 </li>
 </ul>
 <ul>
 <li>
 Utilize or interpret reports from vulnerability scanners and penetration testing tools to identify and prioritize security weaknesses
 </li>
 <li>
 Evaluate and enforce robust Identity and Access Management (IAM) controls, including role-based access control (RBAC) and multi-factor authentication (MFA)
 </li>
 <li>
 Review and ensure the security of cloud deployments (IaaS, PaaS, SaaS), including security groups, IAM policies, and logging
 </li>
 <li>
 Apply strong knowledge of secure configuration baselines and hardening standards (CIS Benchmarks) for operating systems, web servers, and network equipment
 
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 
 
 Your Qualifications:
 
 
 <ul>
 <li>
 Education: Candidate must possess at least a Bachelor of Science or Bachelor of Computer Application
 </li>
 </ul>
 <ul>
 <li>
 Experience: A minimum of 5 - 10 years of experience in a similar environment
 </li>
 <li>
 Domain: Experience in Government Sector or Private Sector with Enterprise data Center Security Compliance
 </li>
 <li>
 Certifications: Essential certifications include ISO 27001, ISO 22301, CISSP, and CISA
 </li>
 <li>
 Language: Must be fluent in English, with Arabic as an added advantage.
 
 </li>
 </ul>
 
 
 Your Competencies:
 
 
 
 Technical:
 
 <ul>
 <li>
 Security Frameworks &amp; Standards: Profound knowledge of ISO 27001, NIST, and CIS
 </li>
 <li>
 Security Controls: A solid understanding of network security (Firewalls, IDS/IPS), Endpoint Security (EDR), IAM principles, and Cryptography
 </li>
 <li>
 Tools: Practical experience with Vulnerability and Risk Assessment Tools and familiarity with SIEM platforms
 </li>
 <li>
 Software Proficiency: Experience with GRC Platforms and documentation tools (Microsoft Office Suite, SharePoint, Jira, Confluence)
 </li>
 </ul>
 
 &nbsp;Behavioral:
 
 <ul>
 <li>
 Teamwork and Collaboration
 </li>
 <li>
 Quality and Results focused
 </li>
 <li>
 Learning Agility
 </li>
 <li>
 Business Acumen
 </li>
 <li>
 Decision Making
 </li>
 <li>
 Digital Savvy
 </li>
 <li>
 Agility and Adaptability
 </li>
 <li>
 Negotiation and influence
 </li>
 <li>
 Planning and Organizing
 </li>
 </ul>
</div>

Senior Information Security Analyst - Compliance & GRC

cFocus Software Incorporated

<div><h1 class="jobSectionHeader">Security Control Assessor &ndash; Job Description</h1>
Position Title: Security Control Assessor 
Program: SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader">
Position Overview</h2>
The Security Control Assessor (SCA) shall provide cybersecurity assessment, authorization, and compliance support services for the U.S. Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program.<h2 class="jobSectionHeader">
Key Responsibilities</h2><ul><li>
Conduct independent security control assessments in accordance with NIST SP 800-53 Rev. 5 and NIST SP 800-53A methodologies.</li><li>
Evaluate management, operational, and technical security controls for federal information systems and cloud environments.</li><li>
Support the SBA Risk Management Framework (RMF) lifecycle including assessment, authorization, continuous monitoring, and ongoing authorization activities.</li><li>
Develop and maintain Security Assessment Reports (SARs), Security Assessment Plans (SAPs), POA&amp;Ms, risk findings, and remediation recommendations.</li><li>
Review and validate cybersecurity documentation including System Security Plans (SSPs), Configuration Management Plans (CMPs), Incident Response Plans, ISCPs, and architecture diagrams.</li><li>
Perform vulnerability assessment validation activities and verify remediation efforts for identified weaknesses and deficiencies.</li><li>
Support Information System Continuous Monitoring (ISCM) activities and ongoing authorization (OA) evaluation support.</li><li>
Assess compliance with FISMA, OMB Circular A-130, NIST guidance, FedRAMP requirements, and agency-specific cybersecurity policies.</li><li>
Support audit readiness activities for Inspector General (IG), GAO, FISMA, and internal cybersecurity audits.</li><li>
Assist with High Value Asset (HVA) assessment support activities in alignment with CISA and OMB guidance.</li><li>
Coordinate with ISSOs, ISSMs, system owners, and engineering teams to evaluate cybersecurity risks and remediation strategies.</li><li>
Support enterprise vulnerability management and risk reporting activities.</li><li>
Participate in cybersecurity governance meetings, compliance reviews, and technical assessment briefings.</li><li>
Document assessment findings, technical analysis, and recommendations with clear and concise reporting suitable for executive and technical stakeholders.</li><li>
Support development of cybersecurity metrics, dashboards, and compliance reporting artifacts.</li><li>
Ensure all assessment deliverables are peer reviewed, Section 508 compliant, and delivered in accordance with SBA-defined quality standards and timelines.</li></ul><h2 class="jobSectionHeader">
Required Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, or related field.</li><li>
Minimum of six (6) years of experience supporting federal cybersecurity assessment, compliance, RMF, or security authorization activities.</li><li>
Minimum of four (4) years of experience conducting security control assessments, vulnerability assessments, or cybersecurity compliance evaluations.</li><li>
Demonstrated expertise in NIST RMF processes, NIST SP 800-53 Rev. 5, NIST SP 800-53A, and FISMA compliance requirements.</li><li>
Experience developing Security Assessment Reports (SARs), Security Assessment Plans (SAPs), POA&amp;Ms, and related accreditation documentation.</li><li>
Experience supporting continuous monitoring, ongoing authorization (OA), and cybersecurity audit activities.</li><li>
Knowledge of FedRAMP security assessment and continuous monitoring requirements.</li><li>
Experience using cybersecurity assessment, vulnerability management, and governance/risk/compliance (GRC) tools.</li><li>
Strong analytical, technical writing, and communication skills.</li><li>
Relevant cybersecurity certifications such as CAP, CISSP, CISA, Security+, CEH, or equivalent preferred.</li><li>
Ability to obtain and maintain a Moderate Risk background investigation and eligibility for higher-level clearances if required.</li></ul><h2 class="jobSectionHeader">
Desired Experience</h2><ul><li>
Experience supporting civilian federal agencies such as SBA, DHS, or CISA.</li><li>
Experience supporting FedRAMP cloud environments including Microsoft Azure, AWS, Microsoft 365, and SaaS platforms.</li><li>
Experience supporting enterprise cybersecurity metrics, dashboards, and automated compliance reporting.</li></ul>
PZHe7BkzAJ</div>

SBA - Security Control Assessor

ITG Holding

<div>
 
 About The Job GRC Analyst
 
 
 
 
 Department:
 
 Governance, Risk &amp; Compliance
 
 
 
 Reports To:
 
 GRC Manager / Senior GRC Analyst
 
 
 
 Location:
 
 Absega Egypt
 
 
 
 Employment Type:
 
 Full-time
 
 
 
 Role Summary
 
 
 
 The GRC Engineer/Analyst supports the organizations security governance and compliance initiatives. This role assists in risk assessments, policy development, internal audits, vendor security reviews, and compliance with industry frameworks such as ISO 27001, SOC 2 etc. The candidate will collaborate with technical and business teams to improve the overall security posture.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Assist in conducting risk assessments and tracking remediation actions.
 </li>
 <li>
 Support the creation, review, and maintenance of security policies, standards, and procedures.
 </li>
 <li>
 Participate in internal audits, evidence collection, and compliance reporting.
 </li>
 <li>
 Help monitor and evaluate security controls across IT and cloud infrastructure.
 </li>
 <li>
 Work on third-party/vendor risk assessments and due-diligence activities.
 </li>
 <li>
 Contribute to the Information Security Awareness Program (training, awareness content).
 </li>
 <li>
 Support governance activities related to:
 </li>
 <ul>
 <li>
 ISO 27001
 </li>
 <li>
 SOC 2 Type I &amp; II
 </li>
 <li>
 GDPR and data protection requirements
 </li>
 </ul>
 <li>
 Help document and track incidents and corrective actions in coordination with SOC/IT.
 </li>
 <li>
 Assist in maintaining the risk register and compliance dashboards.
 </li>
 <li>
 Perform gap assessments against security frameworks and best practices (e.g., NIST CSF).
 </li>
 <li>
 Stay up to date on emerging cybersecurity risks and regulatory changes.
 
 
 </li>
 </ul>
 
 Required Qualifications
 
 
 
 <ul>
 <li>
 Bachelors degree in Cybersecurity, Information Technology, Computer Science, or a related field.
 </li>
 <li>
 At least one year of experience in the field of GRC/Information security
 </li>
 <li>
 Basic knowledge of information security principles, risk management, and compliance frameworks.
 </li>
 <li>
 Familiarity with ISO 27001, SOC 2, NIST, or similar standards (academic or training exposure acceptable).
 </li>
 <li>
 Strong analytical thinking, problem-solving skills, and attention to detail.
 </li>
 <li>
 Good communication and documentation skills (English verbal &amp; written).
 </li>
 </ul>
</div>

GRC Analyst

Tikal Group Doha

Job Opportunity: Cybersecurity AnalystLocation: Doha, Qatar Company: Tikal Group DohaAbout UsTikal Group Doha is a technology solutions provider specializing in secure systems integration, IT infrastructure, and digital transformation. We are committed to protecting businesses against evolving cyber threats and ensuring the highest standards of data security. As we expand, we are seeking a skilled Cybersecurity Analyst to strengthen our security operations and safeguard our digital assets.Role OverviewThe Cybersecurity Analyst will be responsible for monitoring, analyzing, and responding to security incidents, ensuring compliance with regulatory standards, and proactively identifying vulnerabilities. This role requires technical expertise, analytical skills, and the ability to collaborate across teams to maintain a secure IT environment.Key Responsibilities<ul><li>Monitor and analyze security alerts, logs, and incidents.</li><li>Conduct vulnerability assessments and penetration testing.</li><li>Investigate and respond to cybersecurity threats and breaches.</li><li>Implement and maintain security tools, firewalls, and intrusion detection systems.</li><li>Ensure compliance with Qatari regulations and international cybersecurity standards.</li><li>Collaborate with IT teams to strengthen system defenses and patch vulnerabilities.</li><li>Prepare reports and recommendations for management on security posture.</li><li>Stay updated on emerging threats, trends, and best practices in cybersecurity.</li></ul>Qualifications<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or related field.</li><li>2&ndash;5 years of experience in cybersecurity analysis or IT security.</li><li>Strong knowledge of security frameworks (ISO 27001, NIST, CIS).</li><li>Proficiency in SIEM tools, firewalls, and endpoint protection systems.</li><li>Experience with incident response, vulnerability management, and risk assessment.</li><li>Excellent problem-solving, analytical, and communication skills.</li><li>Ability to thrive in a fast-paced, multicultural environment.</li></ul>Why Join Us?<ul><li>Be part of a growing cybersecurity team in Doha.</li><li>Play a key role in protecting Tikal Group Doha&rsquo;s digital infrastructure.</li><li>Competitive salary and benefits package.</li><li>Opportunities for professional development and career advancement.</li><li>Supportive, innovation-driven, and security-focused work culture.</li></ul>Pay: Up to QAR35,000.00 per monthWork Location: In person

Cybersecurity Analyst

<div><h1 class="jobSectionHeader">Vulnerability Analyst II &ndash; Job Description</h1>
Position Title: Vulnerability Analyst II 
Program: SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader">
Position Summary</h2>
The Vulnerability Analyst II provides cybersecurity risk, vulnerability management, and compliance support services in alignment with the SBA Enterprise Cybersecurity Services (ECS) RFQ Task Area 3.5.2. The position supports the SBA Risk Management Framework (RMF), FISMA compliance initiatives, Information System Continuous Monitoring (ISCM), vulnerability management, controls assessment activities, audit support, and continuous monitoring operations across enterprise systems and cloud environments. The analyst performs vulnerability assessments, supports POA&amp;M development, validates security controls, coordinates remediation efforts, and assists Information System Security Officers (ISSOs) and system owners with maintaining compliant and secure systems.<h2 class="jobSectionHeader">
Essential Duties and Responsibilities</h2><ul><li>
Perform enterprise vulnerability assessments and compliance scans using SBA-approved tools such as Tenable Security Center (SC), Nessus, and Microsoft TVM.</li><li>
Review identified vulnerabilities, assess impact and risk, and provide remediation recommendations for operating systems, applications, network devices, and cloud environments.</li><li>
Support continuous monitoring and Risk Management Framework (RMF) activities in accordance with NIST SP 800-37, NIST SP 800-53 Rev. 5, and NIST SP 800-53A.</li><li>
Assist with the creation, maintenance, and review of cybersecurity documentation including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&amp;Ms), Configuration Management Plans (CMPs), and contingency documentation.</li><li>
Support control assessments and validation activities by documenting NIST 800-53A Determine If Statements (DISs) and mapping vulnerabilities to applicable controls.</li><li>
Conduct vulnerability scanning activities every 72 hours across workstations, servers, routers, switches, and cloud-based assets in accordance with SBA requirements.</li><li>
Monitor CISA Known Exploited Vulnerabilities (KEV) listings and Binding Operational Directives (BODs) to identify and report emerging risks.</li><li>
Track zero-day vulnerabilities, coordinate remediation activities, and provide ad hoc reporting to leadership and stakeholders.</li><li>
Generate weekly vulnerability reports, dashboards, and briefing materials for ISSOs, system owners, and management.</li><li>
Assist with audit preparation and support activities involving IG, GAO, internal auditors, and external assessors.</li><li>
Maintain scanning infrastructure including scanner deployment, configuration, plugin updates, scan repositories, and vulnerability management SOPs.</li><li>
Support FedRAMP Continuous Monitoring (CONMON) activities by reviewing vulnerability reports and assessing vendor remediation activities.</li><li>
Participate in change management, security operations meetings, and enterprise cybersecurity coordination activities.</li><li>
Ensure all deliverables are complete, accurate, aligned with agency templates, and delivered within required timeframes.</li></ul><h2 class="jobSectionHeader">
Minimum Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or related discipline. Additional years of experience may substitute for degree requirements.</li><li>
3&ndash;6 years of experience supporting vulnerability management, cybersecurity compliance, RMF, or information assurance activities in a federal environment.</li><li>
Experience performing vulnerability assessments and remediation activities using Tenable SC/Nessus or equivalent tools.</li><li>
Knowledge of FISMA, NIST RMF, NIST SP 800-53 Rev. 5, NIST SP 800-53A, NIST SP 800-137, and related federal cybersecurity standards.</li><li>
Experience supporting POA&amp;M management, security assessments, continuous monitoring, and audit response activities.</li><li>
Working knowledge of Windows, Linux/Unix, network infrastructure, cloud platforms, and enterprise security technologies.</li><li>
Strong written and verbal communication skills with the ability to produce technical documentation and executive-level reports.</li><li>
Ability to analyze security findings, prioritize risks, and coordinate remediation with technical stakeholders.</li></ul><h2 class="jobSectionHeader">
Preferred Certifications</h2><ul><li>
CompTIA Security+</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
Certified Ethical Hacker (CEH)</li><li>
GIAC Security Certifications (GSEC, GPEN, or similar)</li><li>
Tenable Certified Professional or equivalent vulnerability management certification</li></ul>
Gupkg0JOaj</div>

SBA - Vulnerability Analyst II

Openkyber

<div>AVA Consulting is seeking an Application Security Analyst Location: Plano, TX (Hybrid) U.S. Citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time. Company Background : Our client, a major employer in the area, is looking for an Application Security Analyst to be part of its team in its North American operations.
Description: We are seeking a skilled and proactive Application Security Analyst to integrate security practices into our client s DevOps processes. The ideal candidate will work closely with development and operations team to ensure secure software delivery pipelines, automate security controls, and foster a culture of shift left in the organization.
Responsibilities:
<ul><li>Design, implement, and maintain secure CI/CD pipelines.</li>
<li>Integrate security tools (SAST, DAST, SCA, etc.) into development workflows.</li>
<li>Collaborate with development and operations teams to remediate vulnerabilities.</li>
<li>Automate security testing and compliance checks.</li>
<li>Monitor and respond to security incidents in cloud and container environments.</li>
<li>Develop and enforce security policies, standards, and procedures.</li>
<li>Stay current with emerging security threats and DevSecOps best practices.</li>
</ul>Requirements: Bachelor's degree in Computer Science, Cybersecurity, or related field. 3+ years of experience in DevOps, Security Engineering, or related roles. 2-3 years of security experience. Strong understanding of CI/CD tools (e.g., Jenkins, Harness). Development knowledge on Java, Python, .Net, etc Experience with security tools (e.g., Veracode, GHAS, Orca). Proficiency in scripting languages (e.g., Python, Bash). Familiarity with containerization and orchestration (Docker, Kubernetes). Knowledge of cloud platforms (AWS, Azure, Google Cloud Platform) and their security features. Understanding of secure coding practices and application security principles. Knowledge of Infrastructure as Code (Terraform, Ansible).
NOTE: Interested Candidates can apply by sending their Updated Resume and Contact Details. OpenKyber
For applications and inquiries, contact: hirings@openkyber.com</div>

OCI DevOps Professional

VHC Health

<div>Position Title: Senior Medical Imaging Systems Analyst Job Description:

Purpose &amp; Scope:
The Senior Medical Imaging Systems Analyst is responsible for the advanced management, optimization, and technical oversight of all medical imaging technologies and systems within the healthcare environment. This role ensures the seamless operation and integration of Picture Archiving and Communication Systems (PACS), Radiology/Cardiology Imaging Applications, and various medical imaging modalities across multiple departments (e.g., radiology, cardiology, pathology). As a senior-level expert, the analyst leads initiatives for system enhancements, provides strategic guidance, and ensures compliance with all relevant regulatory standards, including data security, quality control, and interoperability.
Education:
Bachelor&rsquo;s degree in Information Technology, Health Informatics, Computer Science, or a related field (Master&rsquo;s preferred).
Master&rsquo;s degree preferred.
Experience:<ul><li>
Minimum of 5+ years of experience in healthcare IT, specifically with medical imaging systems (PACS, RIS, imaging modalities) in a hospital or clinical setting.</li><li>
Demonstrated experience leading system integration projects and managing enterprise-level imaging infrastructure.</li></ul>
Certification/Licensure:<ul><li>
Certified Imaging Informatics Professional (CIIP), preferred.</li><li>
Epic Radiant and/or Cupid proficiency, preferred.</li><li>
IT certifications such as CompTIA Network+, Security+, or equivalent, preferred.</li></ul>
Technical Skills<ul><li>
Expert-level knowledge of DICOM, HL7, IHE, and other interoperability standards.</li><li>
Hands-on experience with enterprise PACS, RIS, and medical imaging software platforms.</li><li>
Strong understanding of database management, system integration, and network administration related to imaging systems.</li><li>
Familiarity with cloud-based imaging solutions and enterprise imaging strategies.</li></ul>
Soft Skills<ul><li>
Excellent analytical and problem-solving abilities for troubleshooting complex system issues.</li><li>
Strong leadership and project management skills with the ability to handle multiple priorities.</li><li>
Exceptional communication and interpersonal skills to interact with both technical and clinical teams.</li><li>
Detail-oriented mindset with a focus on accuracy, compliance, and data security.</li></ul>
Preferred Skills<ul><li>
Experience with various imaging modalities such as MRI, CT, ultrasound, and X-ray systems.</li><li>
Significant experience with Fuji Synapse, Powerscribe, CV Synapse, Muse, Fuji 3d, Intelerad Orchestrator, Powershare, Epic</li><li>
Knowledge of regulatory compliance related to medical imaging, including FDA, HIPAA, and medical device certification requirements.</li><li>
Proven experience managing large-scale imaging system projects, including vendor negotiations and budget planning.</li></ul></div>

Senior Medical Imaging Systems Analyst

Search 10000+ Security compliance analyst jobs near you this May. New roles added regularly across leading industries. Apply today.