senior information security analyst

Foxhole Technology

<div>Overview:
<p><b>
Title-Senior Information Security Analyst</b></p><p><b>
Location: Arlington, VA (Remote)</b></p><p><b>
Clearance: Secret</b></p><p><b>
Start: Upon Contract Award</b></p><p></p><p><br>
Foxhole Technology provides robust cybersecurity and IT support capabilities for federal civilian and defense agencies. A recognized leader in navigating technology and security challenges, Foxhole delivers mission-focused innovations to answer evolving and complex needs. Our talented employee-owners provide agile, scalable services and solutions that solve operational gaps, operate critical systems, and protect and secure the enterprise &ndash; across the organization and around the world.</p><p></p><p><br>
Foxhole is seeking a Cybersecurity Team Lead (Senior Information Security Analyst). This position will manage and enforce cybersecurity posture, assessments, compliance, and monitoring activities. Using relevant experience, strong problem solving, and customer service skills to ensure the appropriate operational security posture is maintained for information system, integration points, and program by implementing and maintaining security controls in close coordination with the Government.</p>
Job Description:
<ul><li>Lead the design, implementation, and continuous improvement of enterprise cybersecurity frameworks across GovCloud environments, ensuring alignment with DoD security requirements</li><li>
Manage the full Risk Management Framework (RMF) lifecycle, including control selection, tailoring, inheritance, and mapping</li><li>
Architect and sustain automated compliance and continuous monitoring pipelines, enabling real-time RMF evidence generation, vulnerability scanning, AWS security, or equivalent platforms</li><li>
Maintain and govern cybersecurity architecture artifacts, including system security plans, system diagrams, and data flow mappings to support audit readiness and system authorization</li><li>
Direct vulnerability management and remediation programs, including coordination of scanning and POA&amp;M tracking to ensure timely risk mitigation</li><li>
Ensure compliance with DISA STIGs, SRGs, and PPSM requirements through continuous validation, audits, and control assessments</li><li>
Collaborate with Authorizing Officials (AOs), Security Control Assessors (SCAs), and engineering teams to obtain and sustain Authorization to Operate (ATO)</li><li>
Lead the security integration into DevSecOps pipelines, ensuring automated security testing, compliance enforcement, and secure code deployment practices</li><li>
Oversee development and maintenance of key security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Incident Response Plans (IRPs), and Contingency Plans</li><li>
Lead incident response efforts, including detection, analysis, containment, and reporting, ensuring alignment with organizational and regulatory requirements</li><li>
Mentor and guide junior analysts, while communicating security posture, risk metrics, and compliance status effectively to senior leadership and stakeholders</li></ul>
Minimum Requirements:
<ul><li>At least 7 years of experience in cybersecurity, compliance, or RMF program management</li><li>
Hands-on experience managing assessment and authorization activities within eMASS (or similar tool) and implementing RMF controls in GovCloud environment</li><li>
Strong understanding of RMF, DISA STIGs/SRGs, and Cloud Computing SRG</li><li>
Knowledge of FedRAMP, NIST SP 800-53, and CMMC frameworks</li><li>
Experience with vulnerability scanning and compliance validation technologies</li><li>
Strong understanding of cloud security (AWS, OCI, etc.)</li><li>
Ability to work independently, and part of team, in a high-intensity fast=paced environment</li><li>
Familiarity with security best practices and compliance requirements.</li><li>
Excellent troubleshooting and problem-solving skills</li><li>
Active DoD Secret Clearance</li><li>
Continental travel may be required</li></ul>
Desired Experience/Certifications:
<ul><li>Bachelor&rsquo;s (BS) degree in relevant field &ndash; strongly preferred but not required</li><li>
Certifications such as CISSP, CISM, or similar cert is preferred</li><li>
Familiarity with security tools and frameworks such as ACAS, Nessus, cloud-based scanning technologies, etc.</li><li>
Experience supporting FedRAMP accreditations is a plus</li><li>
Knowledge of computer network defense process and procedures</li></ul>
More Information:
<div>
Requirements of position: Think analytically, effective verbal and written communication skills, make decisions, observe/remember details, interpret data, concentrate on tasks, adjust to change, handle stress/emotions. Regular attendance, maintain work schedule, attend meetings, meet deadlines, keyboard/type, handle confidential information, use math/calculations, stay organized, operate office equipment, may direct others. May be exposed to dust/dirt, humidity, and noise</div><div></div><div><br>
Foxhole Technology is an Equal Opportunity Employer and makes hiring decisions without regard to race, color, religion, sex (including pregnancy, childbirth and sexual orientation), national origin, age, disability, genetic information, military/veteran status, or any other protected class.</div></div>

Senior Information Security Analyst

TISTA Science and Technology Corporation

<div>Overview:
<div>
TISTA is seeking an experienced <b>Senior Information Security Policy Analyst</b> to join our team that has a strong background in Policy for IT Security and Privacy.</div><div></div><div><br>
At TISTA, you&rsquo;ll do meaningful, mission‑driven work that improves lives alongside teammates you trust and leaders who are transparent and supportive. We invest in your learning and internal mobility so you can build a career that keeps advancing. We&rsquo;re proud to serve and hire Veterans, and we put people first in everything we do.</div><div></div><div><b><br>
TISTA </b>associates enjoy above Industry Healthcare Benefits, Remote Working Options, Paid Time Off, Training/Certification opportunities, Healthcare Savings Account &amp; Flexible Savings Account, Paid Life Insurance, Short-term &amp; Long-term Disability, 401K Match, Professional development reimbursement, Employee Assistance Program, Paid Holidays, Military Leave, and much more!</div>
Responsibilities:
<ul><li>Experience in technical writing, specific to security-related documents, policies and procedures.</li><li>
Develop, update, and implement DISC security directives, policies, procedures and plans to support DISC Authority to Operate (ATO).</li><li>
Perform gap analysis of existing policies and procedures.</li><li>
Develop, update, and implement DISC security directives, policies, and procedures to support cloud working group and cloud migrations.</li><li>
Assist in the development and implementation of Departmental Regulations with CPOC.</li><li>
Coordinate with system owners to develop Business Impact Analysis (BIAs).</li><li>
Assist in Disaster Recovery (DR), Business Continuity (BC) &amp; Continuity of Operations (COOP) documentation and activities.</li><li>
Demonstrate strong knowledge of migrating and securing IT systems in the cloud.</li><li>
Experience with High Value Assets (HVA) systems and their security controls.</li><li>
Experience with Privacy related policy and compliance.</li><li>
Experience with developing risk impact assessments and risk mitigation strategies.</li><li>
Strong project management skills and familiarity with standard project management methodologies such as Agile and Scrum.</li><li>
Comfortable leading meetings.</li><li>
Strong familiarity with NIST Special Publications and guidance, specifically 800-53 rev. 4/rev. 5 and the NIST Risk Management Framework.</li><li>
Strong problem solving and analysis skills, self-motivated, leader and able to work and communicate in a team environment.</li></ul>
Qualifications:
<ul><li>A minimum of 5-7 years of demonstrated experience in the Information Security (Cybersecurity or Information Assurance) field.</li><li>
Experience with leading and directing the work of others.</li><li>
Demonstrates proficiency with developing, maintaining and managing Authorizations and Assessments (A&amp;A) and Authority to Operate (ATO) packages.</li><li>
Knowledge of standard concepts, practices, and procedures within program management.</li><li>
Demonstrates proficiency in IT systems cloud migrations and securing systems in the cloud.</li><li>
A holistic understanding and knowledge of the Risk Management Framework (RMF) as defined by National Institute of Technology (NIST) Special Publication (SP) 800-53 (current revision), Recommended Security Controls for Federal Information Systems and NIST SP 800-53A Revision 4, Guide for Assessing the Security Controls in Federal Information Systems.</li><li>
Strong problem-solving and analysis skills, self-motivated, and able to work and communicate in a team environment.</li><li>
Excellent documentation skills &ndash; redacted samples may be requested.</li><li>
Excellent oral and written communication skills.</li></ul><div><b>
Desired Certifications</b>:</div><ul><li>
Security+</li><li>
Certified Authorization Professional (CAP)</li><li>
Certified in Governance, Risk and Compliance (CGRC)</li><li>
Certified Information Privacy Professional (CIPP)</li><li>
Cloud Certification (Azure, AWS, CCSP, Cloud+, etc.)</li><li>
Certified Information System Security Professional (CISSP)</li><li>
Certified Cloud Security Professional (CCSP)</li><li>
Project Management Professional (PMP)</li></ul><div><b>
Education:</b></div><ul><li>
Bachelor&rsquo;s degree or higher in computer science, Information Technology, Information Security, or similar fields.</li></ul><div><b>
Clearance:</b></div><ul><li>
The ability to pass a Public Trust Background Investigation.
</li><li>US citizens or permanent residents highly preferred.</li></ul><div><b>
Location:</b></div><ul><li>
Remote, USA.</li></ul><div><b>
Pay Range:</b></div><ul><li>
The pay for this position ranges from $85,730 to $95,500.</li><li>
The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience, and location.</li><li>
Also, certain positions are eligible for additional forms of compensation, such as bonuses.</li><li>
TISTA associates are eligible to participate in our comprehensive benefits plan! More information can be found here: https://tistatech.com/working-at-tista/</li></ul></div>

Senior Information Security Policy Analyst

General Dynamics Information Technology

<p></p><div><div><div><p>Your Impact</p><p>
Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.</p><p>
Job Description</p><div><div>
Information Security Analyst Senior<br>
<br>
Transform technology into opportunity as an Information Security Analyst Senior with GDIT. A career in enterprise IT means connecting and enhancing the systems that matter most. At GDIT you&rsquo;ll be at the forefront of innovation and play a meaningful part in improving how agencies operate.<br>
<br>
At GDIT, people are our differentiator. As an Information Security Analyst Senior you will help ensure today is safe and tomorrow is smarter. Our work depends on Information Security Analyst Senior joining our team to<br>
<br>
HOW AN INFORMATION SECURITY ANALYST SENIOR WILL MAKE AN IMPACT<br>
<ul><li>Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction</li></ul><br>
WHAT YOU&rsquo;LL NEED TO SUCCEED:<br>
<ul><li>Education: Technical Training, Certification(s) or Degree</li><li>TS/SCI with CI Polygraph</li><li>3+ years of related experience</li><li>IAT Level I2, IAT Level II2, or IAT Level III (prefer Security+ or CISSP)</li><li>Information Systems Security Officer (ISSO) per DoD 8140 requirements.</li><li>Travel: &lt;25%</li><li>On Customer Site</li><li>US Citizenship Required</li></ul><br>
GDIT IS YOUR PLACE:<br>
<br>
<ul><li>401K with company match</li><li>Comprehensive health and wellness packages</li><li>Internal mobility team dedicated to helping you own your career</li><li>Professional growth opportunities including paid education and certifications</li><li>Cutting-edge technology you can learn from</li><li>Rest and recharge with paid vacation and holidays</li></ul></div>
</div></div><div><div><div><p>Work Requirements</p></div></div><div></div><div><div>
Years of Experience<div>
3 + years of related experience</div><ul><li>may vary based on technical training, certification(s), <i>or</i> degree</li></ul></div><div></div><div>
Certification</div><p></p><div>
Travel Required<div>
Less than 10%</div></div><div></div><div>
Citizenship<div>
U.S. Citizenship Required</div></div></div></div></div><div><p>
Salary and Benefit Information</p><div>
The likely salary range for this position is $97,750 - $132,250. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.<br>
View information about benefits and our total rewards program.</div><p>
About Our Work</p><div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div><i>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></div></div></div>

Information Systems Security Officer (ISSO)

The Home Depot

<div><p><b>Position Purpose:</b></p><p>
This is a Senior Communications Specialist within our Cyber Security organization. Protecting what matters most to our associates and consumers by securing our sensitive data and critical assets from current and emerging threats. At The Home Depot Cybersecurity consists of Architecture, Governance, Identity &amp; Access Management, Internal Threat Operations, Issue and Compliance Management, Risk Assessment/Advisory, Security Consulting, Security Operations, Service Optimization and Strategic Planning<br>
Analysts II perform data gathering, analysis, synthesis and develop solutions to support THD Cybersecurity practices.</p><p><b><br>
Key Responsibilities:</b></p><ul><li>
60% Analysis - Synthesize data to develop a solution, communicate the solution to stakeholders Analyze problems, structure the issue and perform analysis</li><li>
10% Collaborate - Partner cross-functionally to identify trends and resolve issues</li><li>
30% Drive Execution - Ensure initiative/project goals are met in a timely manner Implement solutions to meet customer expectations</li></ul><p><b><br>
Direct Manager/Direct Reports:</b></p><ul><li>
This Position typically reports to Manager or Sr. Manager</li><li>
This Position has 0 Direct Reports</li></ul><p><b><br>
Travel Requirements:</b></p><ul><li>
Typically requires overnight travel less than 10% of the time.</li></ul><p><b><br>
Physical Requirements:</b></p><ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul><p><b><br>
Working Conditions:</b></p><ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul><p><b><br>
Minimum Qualifications:</b></p><ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li></ul><p><b><br>
Preferred Qualifications:</b></p><ul><li><div><ul><li><p><b>
T</b><b>eam Construction &amp; Vision:</b> Support the foundational set-up of the Cybersecurity Communications team, defining the mission, vision, and long-term goals in partnership with team Manager and Sr. Analyst.</p></li></ul></div><div><ul><li><p><b>
Operational Infrastructure Development:</b> Design and implement the team's dedicated &quot;backbone&quot; by helping to set up the necessary technology stack and engineering for a centralized intake process.</p></li></ul></div><div><ul><li><p><b>
Brand &amp; Template Stewardship:</b> Build and maintain the Cybersecurity brand guidelines, templates, SLAs, playbooks, and SOPs to bring order and consistency to the team.</p></li></ul></div><div><ul><li><p><b>
Communication Planning &amp; Execution:</b> Partner closely with Sr. Analyst and Corporate Communications to create and execute communication plans and written and visual communications for high-impacting security initiatives, KTLO, and crisis response, ensuring all milestones are met with high-quality, professional output.</p></li></ul></div><div><ul><li><p><b>
Corporate Communications Coordination:</b> Partner heavily with Corporate Communications to ensure all Cybersecurity collateral adheres to enterprise brand standards and communications are distributed to the intended parties in a timely manner.</p></li></ul></div><div><ul><li><p><b>
Feedback and Data Driven Insights:</b><b> </b>Partner with Sr. Analyst to<b> </b>monitor feedback and sentiment from cross-functional partners and employees to identify communication needs, surface themes, and recommend data-informed improvements to Cybersecurity communications and strategies, using tools such as engagement surveys, pulse checks, and feedback channels to quantify impact over time.</p></li></ul></div><div><ul><li><p><b>
Crisis Communication Support:</b> Partner with Sr. Analyst and Corporate Communications to establish an Internal Cyber Crisis Communication process. Once established, will rapidly deploy urgent crisis related communication during critical Cybersecurity incidents using preapproved templates and SLAs.</p></li></ul></div><div><ul><li><p><b>
Adoption Tracking &amp; Reporting:</b> Develop tactics and identify tools to measure communication reach, comprehension, engagement, and behavioral outcomes. In collaboration with the senior cybersecurity analyst, develop and maintain dashboards with an executive snapshot that ties communication metrics to the overall program objectives.</p></li></ul></div></li></ul><p><b><br>
Minimum Education:</b></p><ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul><p><b><br>
Preferred Education:</b></p><ul><li>
No additional education</li></ul><p><b><br>
Minimum Years of Work Experience:</b></p><ul><li>
2</li></ul><p><b><br>
Preferred Years of Work Experience:</b></p><ul><li>
No additional years of experience</li></ul><p><b><br>
Minimum Leadership Experience:</b></p><ul><li>
None</li></ul><p><b><br>
Preferred Leadership Experience:</b></p><ul><li>
None</li></ul><p><b><br>
Certifications:</b></p><ul><li>
None</li></ul><p><b><br>
Competencies:</b></p><ul><li>
Action Oriented</li><li>
Collaborates</li><li>
Communicates Effectively</li><li>
Customer Focus</li><li>
Drives Results</li></ul></div><p></p>

Cybersecurity Analyst II - Senior Communications Specialist

GovCIO

<div>Overview:
<div>
GovCIO is currently hiring for a Senior Systems Security Analyst with an active Secret clearance to evaluate actions needed to implement customer security policy by developing plans and implementing solutions. This position will be located in Arlington, VA, and will be a hybrid position.</div>
Responsibilities:
<div><div><b>
Day-to-Day Responsibilities</b></div><ul><li>
Reviews security policies, directives, and vulnerability information to determine plans for addressing them.</li><li>
Determines and/or works with others to determine technical solutions for remediating vulnerabilities within a large Enterprise.</li><li>
Leads team to patch and deploy remediations/patches.</li><li>
Tracks and reports on vulnerability remediation.</li><li>
Manages team efforts to address remediations in alignment with customer security policies and timelines.</li><li>
Utilizes the Qualys vulnerability scanning tool to review vulnerabilities in the environment and validate post-deployment vulnerability remediation.</li><li>
Assists technical teams with the identification of baselines, scanning compliance, and performing remediation steps to bring systems into compliance.</li><li>
Works with System ISSOs to develop POAMs, address audit findings, and provide other required information for security documentation and artifacts.</li><li>
Provides technical recommendations to the remediation plan for identified events.</li><li>
Ensures security tools are on all systems, including servers, laptops, and desktops, and works with systems administrators to install them if missing.</li></ul></div>
Qualifications:
<div><b>
Required Skills and Experience</b></div><ul><li>
High School with 10+ years of overall systems and/or network vulnerability remediation experience (or commensurate experience)
<br>
Clearance Required: Active Secret with the ability to obtain and hold DEA suitability</li><li>
Experience in determining and/or working with others to determine technical solutions for remediating vulnerabilities within a large Enterprise</li><li>
5+ years of leadership experience</li><li>
Strong systems and/or network administration experience</li><li>
Hands-on experience remediating vulnerabilities on systems and/or network infrastructure</li><li>
Strong customer-facing and stakeholder communication skills</li></ul><div><b>
Nice to Have</b></div><ul><li>
Experience with Qualys</li><li>
Experience with ServiceNow ticketing</li></ul>
Posted Salary Range: USD $145,000.00 - USD $170,000.00 /Yr.</div>

Senior Systems Security Analyst

Aga Khan University

<div>
 <p>
  <strong>
   Introduction to the Aga Khan University:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  Chartered in 1983, Aga Khan University (AKU) is a private, autonomous and self-governing international university with 13 teaching sites in 6 countries distributed across three continents. As an integral part of the Aga Khan Development Network, AKU provides higher education in several disciplines, carries out research pertinent to the countries in which it exists and has campuses, programmes and/or teaching hospitals in Afghanistan, Kenya, Pakistan, Tanzania, Uganda and the UK. As an international institution, AKU operates on the core principles of quality, relevance, impact and access; and AKU is a model of academic excellence and an agent of social change.
 </p>
 <p>
  <br/>
 </p>
 <p>
  As an equal opportunity employer, AKU believes in promoting a diverse and inclusive culture and is committed to adopt appropriate standards for safeguarding and promoting a respectful relationship with and between diverse workforce of its faculty, staff, trainees, volunteers, beneficiaries, wider communities, and other stakeholders with whom it works, including children and vulnerable adults and expects all employees/trainees and partners to share this commitment.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job Role / Responsibilities:
  </strong>
 </p>
 <p>
  As Analyst, Information Security you will be assisting in managing the Global Information Security and to protect AKU&rsquo;s enterprise infrastructure, digital information, and business continuity globally through strong and effective security practices. At Aga Khan University, as an Analyst, Information Security you will be responsible for:
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   assisting in preparation, assessment and enforcement of information security policies, standards, guidelines and procedures and Perform IS policy and procedures gap assessments against information security, regulatory requirements and governance standards, for example ISO27001.2013, COBIT, PCI-DSS etc.
  </li>
  <li>
   ensuring that information security policy and relevant procedures are updated, reviewed and approved by the management at the defined frequency and are in compliance with applicable privacy and identity theft laws and other regulations.
  </li>
  <li>
   performing technology and information security risk assessments.
  </li>
  <li>
   liaising with IT and internal/external audit teams during information systems audit and working as a central point of contact from IT to ensure appropriate flow of information to audit team with any delay.
  </li>
  <li>
   working with IT team for successful closure of the audit observations for all sites (Pakistan, East Africa, UK and Afghanistan).
  </li>
  <li>
   actively participating in the Security Incident Response Team (SIRT).
  </li>
  <li>
   performing internal assessments and identify gaps in current documentation and operations
  </li>
  <li>
   and working to fix these gaps.
  </li>
  <li>
   working with other teams in technology, internal audit and vendors to ensure that AKU-wide information security requirements are incorporated into the rollout of new systems.
  </li>
  <li>
   performing and maintaining information/ data classification policy and procedure and educating IT and business users and ensure all critical information assets are classified properly.
  </li>
  <li>
   performing vulnerability assessments on operating systems, databases, and applications.
  </li>
  <li>
   reviewing of audit logs for critical applications, databases, OS and networks.
  </li>
  <li>
   conducting information security awareness trainings for AKU staff globally.
  </li>
  <li>
   working with business functional leads and technology team leads to ensure that user access rights review and privileged access rights review will complete on time.
  </li>
 </ul>
 <p>
 </p>
 <p>
  <br/>
 </p>
 <p>
 </p>
 <p>
  <strong>
   Eligibility Criteria / Requirements:
  </strong>
 </p>
 <ul>
  <li>
   a bachelor&rsquo;s degree in computer science, Computer Engineering, Information Security, or
  </li>
  <li>
   related field.
  </li>
  <li>
   relevant certifications such as CISA, CISM, CEH, CISSP, or equivalent Experience.
  </li>
  <li>
   1 to 2 years of hands-on experience in Information Security covering risk assessments, policy development, security awareness, IT audits, and implementation of ISO 27001 and PCI-DSS.
  </li>
  <li>
   proven expertise in performing security assessments for infrastructure, systems, and networks, with a focus on identifying vulnerabilities or gaps.
  </li>
  <li>
   experience in incident response planning, investigation, and handling breaches, including navigating legal and disciplinary actions.
  </li>
  <li>
   strong knowledge of Information Security frameworks and standards, including ISO 27001, PCI-DSS, NIST, GDPR, and CIS.
  </li>
  <li>
   ability to conduct information security risk assessments and critical practice assessments, providing actionable insights and recommending improvements.
  </li>
  <li>
   ability to manage and drive remediation efforts following security incidents, penetration tests, vulnerability scans, and audit results.
  </li>
  <li>
   deep understanding of business activities, with the ability to tailor security solutions that address specific needs within the organization.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Comprehensive employment reference checks will be conducted
 </p>
 <p>
 </p>
</div>


Analyst, Information Security

Aspirus Health

<div><p><b>Compassion. Accountability. Collaboration. Foresight. Joy.</b></p><p><b>
These are the Aspirus Core Values; and we are looking for the BEST around to join us as we demonstrate those values Every. Single. Day.</b></p><p></p><b>
Aspirus Health </b>in Wausau, WI is seeking an <b>IDENTITY AND ACCESS MANAGEMENT ANALYST - SENIOR </b>to join our <b>INFORMATION TECHNOLOGY </b>team!<p><br>
The Senior Identity and Access Management Analyst performs advanced Identity and Access Management (IAM) functions with minimal supervision, leads process improvement initiatives, and serves as a technical expert for complex access management challenges. This role requires the ability to design and implement IAM solutions, lead projects, and provide comprehensive mentorship to junior staff members. Key responsibilities include designing complex user lifecycle management processes, leading access certification programs, managing enterprise privileged access management initiatives, architecting advanced SSO implementations, developing comprehensive compliance reporting, providing tier-3 support for complex issues, and leading medium to large-scale IAM projects, conducting training sessions for clinical and business staff on IAM processes and compliance requirements, developing educational materials and user guides for non-technical stakeholders, and serving as primary point of contact for complex access questions from department leaders. The position emphasizes technical leadership, process innovation, and comprehensive mentorship of team members.</p><p></p><p><b>
HOURS: </b>Full-Time or 1.0 FTE, 80 hours every 2 weeks. Hybrid.</p><p></p><p><b>
Experience/Qualifications</b></p><p></p><ul><li>
Bachelor&rsquo;s degree in information technology, Cybersecurity, Computer Science, or related field; OR Associate's degree with minimum 4 years of relevant experience.</li><li>
Minimum 4 years of experience in identity and access management or related field required.</li><li>
Demonstrated experience leading technical projects.</li><li>
Experience with enterprise directory services and identity governance.</li><li>
Proven track record of process improvement and documentation.</li><li>
One or more relevant professional certifications required (examples: CISSP, Epic Security Administrator, CIAM, Microsoft Identity and Access Administrator, CISM).</li><li>
Epic Security Administrator certification beneficial.</li><li>
Advanced knowledge of Microsoft Active Directory, Microsoft Entra ID, and cloud identity services.</li><li>
Deep understanding of authentication protocols (SAML, OAuth, OIDC).</li><li>
Experience with privileged access management solutions.</li><li>
Advanced proficiency in Microsoft Visio for process documentation.</li><li>
Proficiency in PowerShell and Python scripting for IAM automation and administration tasks.</li><li>
Strong understanding of compliance frameworks (HICP, NIST, HIPAA, SOC).</li><li>
Excellent leadership and project management abilities.</li><li>
Strong analytical and strategic thinking skills.</li><li>
Exceptional written and verbal communication skills.</li><li>
Ability to translate technical concepts for non-technical stakeholders and conduct effective training sessions.</li><li>
Ability to work effectively with autonomy and lead small project teams.</li><li>
Strong mentoring and coaching abilities.</li></ul><p>
</p><p></p><p><b>Employee Benefits</b></p><br>
<ul><li>
Full benefits packages available for part- and full-time status.</li><li>
Time away from work accrual.</li><li>
Retirement plans available.</li><li>
Wellness program for employees and their families.</li></ul><p></p><p><b><br>
Our Mission</b>: We heal people, promote health and strengthen communities.</p><p><b>
Our Vision</b>: Aspirus is a catalyst for creating healthy, thriving communities, trusted and engaged above all others.</p><p><br>
As an Aspirus team, we demonstrate caring, we plan to impact the future, work with happiness and enthusiasm, recognize our power to make a difference and improve the health of our communities.</p><p><b>
Aspirus Health</b> is a nonprofit, community-directed health system based in Wausau, Wisconsin, serving northeastern Minnesota, northern and central Wisconsin and the Upper Peninsula of Michigan. The health system operates 18 hospitals and 130 outpatient locations with nearly 14,000 team members, including 1,300 employed physicians and advanced practice clinicians. For more information visit aspirus.org.</p><p><b>
Click </b><b>here</b><b> to learn more.</b></p></div><p></p>

IDENTITY AND ACCESS MANAGEMENT ANALYST - SENIOR - IT

Search 10000+ Senior information security analyst jobs near you this April. New roles added regularly across leading industries. Apply today.