senior information security analyst

Gargash Group

<div>
 <p>
  <strong>
   Job Purpose:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  The Senior Cybersecurity Analyst is responsible for safeguarding the group&rsquo;s information systems and sensitive data from cyber threats. This job is responsible for analysing complex security issues, implementing effective security measures, and providing guidance to team members.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Responsibilities:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  &bull; Conduct in-depth analysis of security incidents, vulnerabilities, and breaches, providing timely and accurate reports to management.
 </p>
 <p>
  &bull; Collaborate with cross-functional teams to ensure that security measures are integrated into all aspects of the group&rsquo;s operations.
 </p>
 <p>
  &bull; Monitor and assess the group&rsquo;s network, systems, and applications for potential security risks and
 </p>
 <p>
  vulnerabilities.
 </p>
 <p>
  &bull; Perform penetration testing, vulnerability assessments, and security audits to identify weaknesses and recommend mitigation strategies.
 </p>
 <p>
  &bull; Design and implement advanced security controls to protect sensitive data and maintain regulatory compliance.
 </p>
 <p>
  &bull; Provide guidance and mentorship to junior cybersecurity team members, assisting with skill
 </p>
 <p>
  development and knowledge enhancement.
 </p>
 <p>
  &bull; Stay current with emerging threats, attack techniques, and industry trends to continuously improve the group&rsquo;s security posture.
 </p>
 <p>
  &bull; Lead incident response efforts, coordinating with relevant teams to contain, mitigate, and recover from security incidents.
 </p>
 <p>
  &bull; Collaborate with third-party vendors and partners to assess their security practices and ensure
 </p>
 <p>
  compliance with established standards.
 </p>
 <p>
  &bull; Participate in the evaluation and deployment of new cybersecurity technologies, tools, and solutions.
 </p>
 <p>
  &bull; Contribute to the development of security awareness training programs for employees to enhance their understanding of cybersecurity best practices.
 </p>
 <p>
  &bull; Prepare and deliver comprehensive reports and presentations to convey security-related information
 </p>
 <p>
  to technical and non-technical audiences, including senior management.
 </p>
 <p>
  &bull; Serve as an L3 Cybersecurity Engineer.
 </p>
 <p>
  &bull; Perform deep analysis of security incidents to identify the full kill chain.
 </p>
 <p>
  &bull; Create SOC/MDR related use cases and write detections.
 </p>
 <p>
  &bull; Act as a subject matter expert for any cyber alert or incident that occurs.
 </p>
 <p>
  &bull; Conduct L3 level investigations to determine the root cause of any cyber incident or alert.
 </p>
 <p>
  &bull; Work with blue team tools and solutions (EDR, XDR, SIEM, Email Security, DLP, DDoS, WAF, Proxy) and analyse security alerts generated by these tools.
 </p>
 <p>
  &bull; Create cybersecurity use cases for SOC.
 </p>
 <p>
  &bull; Perform malware analysis.
 </p>
 <p>
  &bull; Correlate different log sources and understand logs from various end devices, servers, network devices, and applications.
 </p>
 <p>
  &bull; Implement security solutions in collaboration with respective vendors.
 </p>
 <p>
  &bull; Conduct threat intelligence actions and investigations.
 </p>
 <p>
  &bull; Perform application security checks and reviews, implementing best application security controls.
 </p>
 <p>
  &bull; Manage cloud security for the group and work with cloud security tools (Microsoft Azure).
 </p>
 <p>
  &bull; Work on endpoint security.
 </p>
 <p>
  &bull; Review and manage access control from a security perspective.
 </p>
 <p>
  &bull; Implement security projects.
 </p>
 <p>
  &bull; Conduct in automation using scripting languages and programming to automate day-to-day tasks in cybersecurity, build AI bots, identify patterns in large datasets that could signify malicious activity, and use AI tools to proactively search for threats within a network.
 </p>
 <p>
  &bull; Uphold company values throughout business practices and utilise sound judgment in decision making.
 </p>
 <p>
  &bull; Any other additional duties as may be required by management based on needs of the business.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Requirements:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  &bull; Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
 </p>
 <p>
  &bull; Certification in GIAC DFIR, Blue Team Level 1 and Blue Team Level 2 required.
 </p>
 <p>
  &bull; Relevant certifications (e.g., CISSP, CISM, CISA, CEH) are highly desirable.
 </p>
 <p>
  &bull; A minimum of 5-7 years of experience in a similar role in Cyber Security.
 </p>
 <p>
  &bull; Proven experience as a cybersecurity analyst or similar role, demonstrating progressive
 </p>
 <p>
  responsibilities.
 </p>
 <p>
  &bull; Experience with AI-based cybersecurity tools including Darktrace, Security Copilot, SOAR, Next-gen SIEM, CrowdStrike, AI-based Threat Intel, and Microsoft Security deployment (Defender, Purview DLP,IAM).
 </p>
</div>


Senior Cybersecurity Analyst

Paragon Technology

<div><p><b>Position Summary</b></p><p>
The Junior Information Security Analyst supports senior assessors in executing FISMA security control assessments and preparing assessment documentation. This role focuses on evidence collection, documentation support, and learning IRS assessment processes.</p><p><b>
Key Responsibilities</b></p><ul><li>
Assist with execution of NIST SP 800-53 security control assessments.</li><li>
Support development and maintenance of assessment artifacts (SAP, SAR, SCTM, Action Item Lists).</li><li>
Collect and organize assessment evidence and participate in stakeholder meetings.</li><li>
Support quality control reviews and ensure documentation accuracy and completeness.</li><li>
Participate in knowledge transfer and training activities to build IRS assessment capability.</li></ul><p><b>
Required Qualifications</b></p><ul><li>
1&ndash;3 years of relevant experience in information security, cyber risk management, or IT system administration with a security focus.</li><li>
Experience may include internships, co-ops, or formal cybersecurity training programs.</li></ul><p><b>
Education &amp; Certifications</b></p><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Systems, Computer Science, or related field; Associate degree plus 2 additional years of experience acceptable.</li><li>
CompTIA Security+ CE required.</li><li>
Network+, CEH, or CAP preferred.</li></ul><p><b>
How the Work Gets Done at Paragon</b></p><p>
At Paragon, work is executed through disciplined collaboration, accountability to mission outcomes, and respect for government processes. Analysts lead with preparation and clarity, facilitate structured decision-making forums, and ensure requirements are governed, documented, and traceable from operational need through delivery. The focus is on predictable execution, transparency, and stewardship of government resources.</p><p><b>
Working Conditions</b></p><div><ul><li>
Work is primarily performed in a professional office or government facility environment.</li><li>
Position may require participation in classified discussions consistent with clearance level.</li><li>
Collaboration with geographically dispersed stakeholders is expected.</li><li>
Standard business hours with occasional schedule flexibility to support mission needs.</li></ul></div><p></p><p><b><br>
Why Paragon</b></p><p>
Paragon Technology Group delivers mission-critical outcomes through disciplined execution, professional accountability, and respect for the trust placed in us by our government partners. Team members are empowered to own their work, contribute meaningfully to national defense missions, and operate in an environment that values clarity, predictability, and long-term stewardship.</p></div><p></p>

Junior Information Security Analyst

Cadre5

<div><h1 class="jobSectionHeader"><b>Senior Information Systems Security Officer (ISSO)</b></h1>
<div></div><div>Founded in 1999 in the beautiful Smoky Mountains of East Tennessee, Cadre5 provides innovative technical solutions to our customers locally and nationally. Our Cadre5 Lab Partners division has partnered with the Information Technology Services Directorate (ITSD) at Oak Ridge National Laboratory (ORNL) to recruit a Senior Information System Security Officer. The successful candidate should have a basic understanding of all aspects of cybersecurity. The candidate will collaborate with other teams across the lab, to include Information Technology, Physical Security, Classification Office, Cybersecurity, Lab Enterprise Risk, Lab Internal Audit, and others as appropriate.</div><br>
<div></div>
<div></div><div>ORNL delivers scientific discoveries and technical breakthroughs needed to realize solutions in energy and national security and provides economic benefit to the nation. This premier research institution located near Knoxville in Oak Ridge, TN, addresses national needs through impactful research and world-leading research centers.</div><br>
<div></div>
<div></div><div><b><i>A Q clearance is required; however, an active DOD Top Secret that can become a Q through reciprocity is acceptable. </i></b><b><i>Therefore, a Secret or L, will not work.</i></b><b> </b><b>US citizenship is required.
</b></div>
<div></div><div><b>This is a full-time, permanent position that requires on-site work in</b><b> Oak Ridge Tennessee.</b></div>
<h1 class="jobSectionHeader"><b>Why Cadre5?</b></h1>
<ul><li>Working with highly talented team members</li>
<li>3 weeks&rsquo; vacation</li>
<li>Excellent medical insurance, including employer-paid benefits
</li>
</ul><div></div><div><b>Duties and Responsibilities:</b></div>
<div>The ISSO is a primary stakeholder and facilitator of the continuous monitoring efforts that promote RMF compliance throughout the organization. The ISSO provides direction to IT and infrastructure support personnel on the application of security patches and secure configurations. Routine collaboration and consultation with the ISSM regarding the design, development, integration, and analysis of unclassified information systems. Under general supervision, the candidate is responsible for performing a full range of Information Assurance functions in support of the security needs of the ISSM.</div>
<div></div><div><b>Primary Responsibilities:</b></div>
<ul><li>Provide assistance to the ISSM and CISO in the certification and accreditation (C&amp;A) of systems/networks and implementation of cybersecurity requirements and procedures across the client site.</li>
<li>Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures and as outlined in applicable System Security Plans (SSPs).</li>
<li>Perform documented procedures for authorizing users to access information systems.</li>
<li>Develop and maintain SSPs for system C&amp;A.</li>
<li>Manage Plans of Action and Milestones to closure for information systems under accreditation.</li>
<li>Provide guidance on policies and controls to support appropriate levels of risk, facilitate risk tolerance discussions and decisions, and recommend controls based on industry standards and practices. Escalate questions/concerns/issues to more senior-level staff as required.</li>
<li>Participate in internal/external compliance audits, reviews, self-assessments, assessments, and data calls.</li>
<li>Identify, promote, and make recommendations for process improvements.</li>
<li>Assist with annual self-inspections, system certification testing, periodic security testing, and functional testing on systems/networks.</li>
<li>Ensure compliance of all network equipment with applicable DOE and ORNL requirements</li>
<li>Other duties as assigned for support within the program.</li>
</ul>
<div></div><div><b>Basic Qualifications:</b>
</div><ul><li>Bachelor&rsquo;s degree with 5-8 years of relevant experience (ex. cybersecurity assessments, risk management, cybersecurity policy, and compliance, etc.). An equivalent combination of education and experience may be considered.</li>
<li>Strong analytical and organizational skills as well as problem solving capabilities to understand Cybersecurity risk and exposure (legal, regulatory violations, etc.) to ORNL.</li>
<li>Demonstrated experience implementing compliance frameworks (NIST, etc)</li>
<li>Excellent interpersonal, verbal, written, and presentation communication skills.</li>
<li>Thorough understanding of industry standards and regulations including NIST 800-53, NIST Risk Management Framework, and NIST Cybersecurity Framework (CSF).</li>
<li>Working knowledge of privacy regulations and impacts.</li>
<li>Ability to work independently, meet deadlines, and uphold high ethical standards.</li>
<li>This position requires and an active Department of Energy &quot;Q&quot; or &ldquo;L&rdquo; clearance. A &ldquo;Top Secret (TS)&rdquo; or &ldquo;Secret&rdquo; Department of Defense clearance will also suffice. This requires US Citizenship.</li>
</ul>
<div></div><div><b>Preferred Qualifications:</b>
</div><ul><li><b>Active DOE Q or TS security clearance or equivalent.</b></li>
<li>Bachelor's or Master&rsquo;s degree in information assurance or related field with 10-15 years of relevant experience working in an information security, information technology or information risk management related field.</li>
<li>Cybersecurity certifications (CISSP, CISA, CISM, CRISC, CCSP, SSCP) and Incident Response Certification</li>
<li>Privacy management, cybersecurity, evaluating security controls, identifying control gaps, and mitigating measures along with a strong understanding of business practices and technology concepts.</li>
<li>Highly motivated individual with an enthusiasm for governance, risk and compliance who can communicate benefits and drive success.</li>
<li>Demonstrated background in governance, risk, and compliance.</li>
<li>Experience in obtaining Authority to Operate (ATO) for DOE government systems.</li></ul><br>
<div></div><div><b>Benefits</b></div>
<div></div><div>Cadre5 offers excellent pay and benefits, to include full medical, dental, and vision coverage coupled with 401K match, 15 days PTO, and 10 holidays.</div>
<div> </div><div><b><i>Cadre5 is an equal opportunity employer. All qualified applicants, including individuals with disabilities and protected veterans, are encouraged to apply. Cadre5 is an E-Verify Employer.</i></b></div></div><div></div>

Senior Information Systems Security Officer ISSO

Y-12 National Security Complex

<div><div><div><b>Location: </b>Oak Ridge, TN<br>
<b>Job Title:</b> Information Security Senior Manager<br>
<b>Career Level From: </b>Senior Manager<br>
<b>Career Level To:</b><br>
<b>Job Specialty:</b> Security Operations General</div><br>
<div><div><div><h2 class="jobSectionHeader"><b>What You'll Do</b></h2>
</div><div><div>
The Information Security Senior Manager provides leadership, supervision, and direction to Information Security staff personnel in the performance of their duties and for the greater Safeguards and Security Senior Directorate as it plans and executes a broad range of information protection activities to include programs to conduct Technical Surveillance Countermeasures (TSCM), Operations Security (OPSEC), and Classified Matter Protection &amp; Control (CMPC).</div><br>
<div></div>
<div>
Specifically, the InfoSec Senior Manager duties include:</div>
<ul>
<li>Ensuring the InfoSec team meets all standards and requirements</li>
<li>Oversees and provides guidance and interpretation of security compliance with relevant DOE Orders and requirements in support of operational facilities to control and protect classified matter, Unclassified Controlled Nuclear Information, Controlled Unclassified Information, technical surveillance countermeasures, and to reinforce operations security at the Y-12 National Security Complex</li>
<li>Reviews and ensures quality of work of all staff activities</li>
<li>Prepares and provides briefings to management regarding current and new security programs and upgrades</li>
<li>Prepares updates and reviews procedures; develops and recommends programmatic changes as necessary</li>
<li>Provides classification marking guidance, conducts periodic and special surveys and prepares analytical studies and reports</li>
<li>Develops and institutes corrective action plans and/or security plans to correct deficiencies; oversees, coordinates and follows actions to completion</li>
<li>Conducts assessments and documents areas of non-compliance</li>
<li>Manages and performs other Safeguards and Security related services for the site as needed</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>What You Can Expect</b></h2>
</div><div><div><ul><li>Meaningful work and unique opportunities to support missions vital to national and global security</li>
<li>Top-notch, dedicated colleagues</li>
<li>Generous pay and benefits with a stable organization</li>
<li>Career advancement and professional development programs</li>
<li>Work-life balance fostered through flexible work options and wellness initiatives</li>
</ul></div></div></div><div><div><h2 class="jobSectionHeader"><b>Minimum Job Requirements</b></h2>
</div><div><div><ul><li>Bachelor's degree: Minimum 10 years of relevant experience with 5 years of management experience</li>
</ul></div></div></div><div><div><h2 class="jobSectionHeader"><b>Preferred Job Requirements</b></h2>
</div><div><ul><li>Bachelor's degree in Security Management or a related field</li><li>Effective skills in communication and document preparation</li><li>Broad and thorough technical/functional and management knowledge to resolve multi-discipline, multi-function, or process problems in a component oof a functional area</li><li>In-depth knowledge of Y-12 business and operations support, resources, practices, processes, and policies needed to solve problems and accomplish work</li><li>Demonstrated experience in implementing company policies and skilled in making recommendations on development of new policies</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Why Y-12?</b></h2>
</div><div>You get #morethanajob. We encourage employees to achieve a healthy personal balance among home, work and the community. One of the ways we embrace work-life balance is by offering flexible work arrangements that provide alternatives to the traditional workweek, while still meeting business needs. Top talent and personal commitment mean more to our success than any other factors, so we reward our people with the kinds of benefits that make a positive difference in the quality of their lives. Benefits such as: medical plan, prescription drug plan, vision plan, dental plan, employer matched 401(k) savings plan, disability coverage, education reimbursement and many more. Want to stay healthy and fit but hate the cost of a gym membership? Take advantage of one of our onsite workout facilities and eat healthy in our onsite cafeterias. Much more than a workplace, at Y-12, you can build a career that lasts a lifetime.</div></div><div><div><h2 class="jobSectionHeader"><b>
Notes</b></h2>
</div><div><div>The minimum education and experience for the lowest career level in the job posting range are listed under Minimum Job Requirements. Successful candidates hired into a higher career level than the minimum in the range must meet the requirements listed in the job leveling charts for the career level into which they are being hired.</div><br>
<div></div>
<div>If a range of Career Levels is posted, i.e., Senior Associate to Senior Specialist, internal applicants already in one of the Career Levels would come across at their current Career Level. Internal applicants currently in a lower level Career Level would move to the lowest posted Career Level.</div>
<div></div><div>Requires a Q clearance; however all qualified candidates will be considered regardless of their current clearance status. The ability to obtain and maintain a Department of Energy Q clearance is required.</div><br>
<div></div>
<div>This position may require entry into the Material Access Areas (MAA) and participation in the Human Reliability Program (10 C.F.R. Part 712), which requires successful competition of a DOE counterintelligence evaluation and may include a counterintelligence-scope polygraph examination.</div><br>
<div></div>
<div>This position may be categorized as a &ldquo;designated position&rdquo; identified by 10 C.F.R. Part 709, requiring successful completion of a DOE counterintelligence evaluation that may include a counterintelligence-scope polygraph examination.</div></div></div></div><br>
<div></div>
<div>CNS is a drug-free workplace. Candidates accepting a job offer will be required to pass a pre-placement physical, drug screening and background investigation. As an employee, you may be required to receive and maintain a security clearance from the United States Department of Energy in order to meet eligibility requirements for access to sensitive information or matter. U.S. citizenship is a requirement for security clearance applicants. All employees are subject to being randomly selected for drug testing without advance notification.</div><br>
<div>
CNS is an equal opportunity employer. All qualified applicants will receive consideration for employment based on merit and without regard to race, color, religion, sex, sexual orientation, national origin, protected veteran status or disability.</div></div></div>

Information Security Senior Manager

Etisalat

<div><div><b>BI System Senior Analyst.Enterprise Information Management</b> <b>-</b> <b>(</b><b>250002EF</b><b>)</b></div><div><b>
Description</b><div></div><p><b><br>
Job Purpose</b></p><p>
Facilitate business reporting by analyzing requests; negotiate business users using appropriate methods to facilitate the development of complex analysis, support Business Intelligence team members on technical reporting issues. Ensure maximum utilization of the existing business intelligence tools to support business decision making.</p><p><b>
Report To Position Name</b></p><ul><li>Understand new product&rsquo;s reporting requirement and ensure the appropriate use of business intelligence tools to meet new products reporting requirements.</li><li>Partnering with the business to prepare solid analysis and reporting requirements.</li><li>Assess current and future requirements to plan generic reports and Universes.</li><li>Provide second line of support for Business Intelligence software to ensure the smooth running of reports and universes</li><li>Attend meetings with other company functions necessary to perform duties and aid business and organizational development</li><li>Attend training and to develop relevant knowledge and skills necessary for the effective performance of the role.</li><li>Report and solve major Business Intelligence issues to maintain team productivity.</li></ul><div><br>
</div></div><div><b>
Qualifications</b><div></div><p><b><br>
QUALIFICATIONS_ESSENTIAL</b></p><ul><li>
University Degree in Information Technology field</li><li>
Very Good in Arabic &amp; English (Reading, Writing &amp; Oral).</li></ul><p><b><br>
QUALIFICATIONS_DESIRABLE</b></p><p>
Excellent interpersonal and written/verbal communication skills</p><p>
Strong analytical and problem solving skills</p><p>
In-Depth understanding of telecommunication industry business processes, business analysis and modeling.</p><p><b><br>
EXPERIENCE_ESSENTIAL</b></p><ul><li>
Minimum 6 years of Information Technology Experience.</li><li>
Experience in Business Intelligence domain in telecommunication industry.</li></ul><p><b><br>
EXPERIENCE_DESIRABLE</b></p><p>
Project Management Experience</p><p><b><br>
CERTIFICATIONS_ESSENTIAL</b></p><p>
Teradata Technical Training -Oracle and SQL Server Training</p><div><br>
</div></div><div><b>
Job</b><b>:</b> Senior Analyst</div><div><b>
Organization</b><b>:</b> Etisalat-Misr</div><div>
 Non-Management</div><div><b>
Job Posting</b><b>:</b> 15/Feb/2026, 5:45:59 AM</div></div>

BI System Senior Analyst.Enterprise Information Management

Pearson

<div><p>Advanced Associate, Information Security</p>
<p>Drive Excellence in Data-Driven Security and Integrity</p>
<p><b>Role Overview</b></p>
<p>Are you passionate about safeguarding digital and physical environments, leveraging data to maintain the highest standards of security &amp; integrity? We are seeking an accomplished Security Analyst (Advanced Associate) to champion security across our test centres and remote testing platforms. In this pivotal position, you will utilize advanced Data Forensics, Anomaly Detection, Risk Score Analysis, Web Monitoring, and Integrity Shopping to preserve the credibility and trustworthiness of our global security operations.</p>
<p><b>Key Responsibilities</b></p>
<ul><li>Leverage advanced data forensics and analytics to identify, investigate, and mitigate security threats and incidents, ensuring the integrity and protection of all testing environments.</li>
<li>Conduct web monitoring and analysis to identify emerging threats, suspicious activities, and potential vulnerabilities impacting test centre and remote test security.</li>
<li>Lead initiatives in integrity shopping, proactively assessing and improving security processes to uphold uncompromising standards.</li>
<li>Identify areas of opportunity within existing processes, taking ownership of implementing solutions to enhance efficiency, quality, and security objectives.</li>
<li>Work closely with international vendors and internal stakeholders to monitor progress on global security projects, ensuring alignment with company goals and timely issue resolution.</li>
<li>Serve as an expert spokesperson for quality &amp; security message, raising internal awareness and mindshare around security and integrity best practices.</li>
<li>Co-Own the effective resolution of security issues, acting as an escalation point for complex global projects and collaborating with vendors and channel quality teams to resolve challenges.</li>
<li>Develop, maintain, and communicate efficient security processes, policies, and procedures to all relevant parties, supporting the company&rsquo;s standards for Health &amp; Safety, Security, Quality, and Business Continuity.</li>
<li>Work under minimal supervision in driving impactful change and consistently exceeding security objectives across all domains.</li>
<li>All employees have a responsibility to co-operate in promoting and maintaining a safe and healthy working environment, and to take reasonable care of their own health and safety at work and that of all other staff that may be affected by their acts or omissions</li>
</ul><p><b>Key Activities</b></p>
<ul><li>Identifying and interpret unusual patterns or behaviors in data that may indicate security threats or breaches.</li>
<li>Monitor websites and social media for suspicious content and tag for client action.</li>
<li>Coordinate with stakeholders for timely resolution of flagged issues.</li>
<li>Support global security projects via remote surveillance and video monitoring.</li>
<li>Ensure Security Tickets are managed with turn around time.</li>
<li>Use data analytics and machine learning to investigate and report on flagged test centres.</li>
<li>Assist manager with new global initiatives and projects.</li>
<li>Track target achievement and monitor budget expenses.</li>
<li>Prepare periodic performance reports for test centres.</li>
<li>Run and review Integrity shop reports to ensure corrective measures.</li>
<li>Contribute to the Channel newsletter.</li>
<li>Collaborate with team to improve the Security and Integrity shop program.</li>
</ul><p><b>What We&rsquo;re Looking For</b></p>
<ul><li>Bachelor&rsquo;s degree or above in Information Security, Data Analytics, Forensics or related field (or equivalent experience).</li>
<li><b>Demonstrated experience in security analysis, data forensics, anomaly detection, and web monitoring, preferably within testing or assessment environments.</b></li>
<li>Outstanding analytical, investigative, and problem-solving skills, with proven ability to detect and address complex security risks using data-driven approaches.</li>
<li>Understanding of test centre operations, remote testing protocols, and global security compliance would be an added advantage.</li>
<li><b>Knowledge of Power BI, Power Automate, Macros and other tools</b> .</li>
<li>Exceptional communication and stakeholder management abilities, with aptitude for training, influencing, and raising awareness throughout the organization.</li>
<li>Ability to work collaboratively across international teams and vendors, as well as autonomously when required.</li>
<li>Ability to follow detailed procedures and ensure a high level of accuracy in documentation and data.</li>
<li>High ethical standards, with deep commitment to maintaining organizational integrity and continuous improvement.</li>
</ul><p><b>Why Join Us?</b></p>
<ul><li>Play a critical role in protecting the integrity and security of global assessment programs and make a real difference in the future of education and certification.</li>
<li>Collaborate with a dynamic, international team, and access robust professional development opportunities.</li>
<li>Enjoy a rewarding environment that values innovation, accountability, and excellence.</li>
<li>Competitive compensation and benefits package.</li>
</ul><p><b>Who we are:</b></p>
<p>At Pearson, our purpose is simple: to help people realize the life they imagine through learning. We believe that every learning opportunity is a chance for a personal breakthrough. We are the world's lifelong learning company. For us, learning isn't just what we do. It's who we are. To learn more: We are Pearson.</p>
<p>Pearson is an Equal Opportunity Employer and a member of E-Verify. Employment decisions are based on qualifications, merit and business need. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, age, national origin, protected veteran status, disability status or any other group protected by law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.</p>
<p>If you are an individual with a disability and are unable or limited in your ability to use or access our career site as a result of your disability, you may request reasonable accommodations by emailing TalentExperienceGlobalTeam@grp.pearson.com.</p>
<p><b>Job:</b> Security</p>
<p><b>Job Family:</b> TECHNOLOGY</p>
<p><b>Organization:</b> Assessment &amp; Qualifications</p>
<p><b>Schedule:</b> FULL\_TIME</p>
<p><b>Workplace Type:</b> Hybrid</p>
<p><b>Req ID:</b> 22795</p></div><p></p>

Associate, Information Security

Berkshire Hathaway Specialty Insurance

<div><div><b>Who are we?</b></div><div></div><div><br>
A strategic and trusted insurance partner, Berkshire Hathaway Specialty Insurance (BHSI), provides a broad range of commercial property, casualty and specialty insurance coverages and outstanding service to customers and brokers around the world. Part of Berkshire Hathaway&rsquo;s insurance operations, we bring our solutions to market with our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals, who exude excellent capabilities and strong character.</div><div></div><div><br>
We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. We value diversity of backgrounds, experience, and perspectives and strive to foster an inclusive environment that enables all our team members to bring their best selves to work. We are one team committed to building a culture where every teammate has the opportunity to contribute and be recognized. Want to be part of the team building the finest property, casualty and specialty lines insurance company in the world?</div><div></div><div><br>
Learn more about our unique culture and history.</div><div></div><div><b><br>
Job Opportunity:</b></div><div></div><div><br>
Berkshire Hathaway Specialty Insurance (BHSI) has an exciting opportunity for a new team member to join our Boston-based IT Governance Risk Audit and Compliance (GRAC) team as a Senior IT Compliance Analyst. In this role, the IT Senior Compliance Analyst will take an active role in the execution of our IT audit and compliance framework, while collaborating closely with both internal and external partners. This position offers the chance to make a significant impact, working with external global regulators and collaborating with internal regional legal and compliance leaders across regions from an enterprise-wide vantage point. If you're passionate about driving meaningful change, growing your career, and helping lead an evolving global IT audit and compliance program, we&rsquo;re interested in speaking with you.</div><div></div><div><b><br>
Duties &amp; Responsibilities:</b></div><div></div><div><br>
<ul><li>
Lead in executing IT audit/compliance activities, and follow up with responsible parties regarding outstanding requests, and/or questions.</li><li>
Maintain, organize, and store audit evidence in preparation for upcoming scheduled audits.</li><li>
Conduct audit readiness assessments (i.e., health checks) and assess the effectiveness of current controls and processes in place.</li><li>
Lead in developing, implementing, and executing additional internal IT audit/compliance activities.</li><li>
Coordinate with team members regarding the remediation status of closing out identified audit gaps and ensuring compensating controls are implemented.</li><li>
Review third-party service providers/vendors as part of IT due diligence, including assessing vendor control environment, reviewing SOC reports (i.e., SOC 2 type 2 reports), validating security certifications, identifying control gaps, and ensuring required remediation or compensating controls.</li><li>
Analyze and support compliance with global IT regulatory authorities (i.e., GDPR, CBI, DORA, MAS, APRA, BAFIN, etc.) and coordinate with individuals to ensure controls are in place to meet requirements.</li><li>
Provide support to our offices from both a U.S. and global perspective (i.e., Asia, Middle East, UK, Europe, Australasia, etc.) regarding the fulfillment of external audit requests and obligations.</li><li>
Attend/participate in e-learning training sessions to increase background knowledge of the ever-evolving IT regulatory landscape.</li><li>
Support in AI risk and governance oversight to ensure responsible and compliant use of AI technologies.</li></ul></div><div></div><div><b><br>
Qualifications, Skills and Experience:</b></div><div></div><div><br>
<ul><li>
6+ years of experience working in an IT audit/compliance function with a general understanding (at minimum) in several of the IT audit/compliance topics listed below:</li><li>
Active Directory, password standards, user access provisioning/deprovisioning, user access reviews, change management, batch jobs/backups, disaster recovery, service accounts, patch management, risk assessment.</li><li>
Software development and IT operations knowledge to assess the planning and ongoing maintenance of DevSecOps practices and Application security.</li><li>
Knowledge of cloud governance, cloud technology and cloud security is a plus.</li></ul></div><div><ul><li>
Solid background knowledge of US domestic IT regulations (i.e., SOX, CCPA, PCI, NY-DFS etc.) is recommended.</li><li>
Familiarity with global regulatory frameworks (e.g., GDPR, CBI, DORA, MAS, APRA, BaFin) is preferred but not required.</li><li>
Ability to work in a team-based environment and communicate effectively and efficiently with others domestically and globally.</li><li>
Experience with GRC tools such as Workiva, AuditBoard, ServiceNow, Drata, Vanta, or similar platforms is a plus.</li><li>
AI experience is a plus, including an understanding of AI risks, responsible AI concepts, or emerging AI regulatory requirements.</li><li>
Professional certifications such as CRISC, CISA, CISM, CISSP, or ISO/IEC 27001 Lead Implementer/Lead Auditor (or equivalent) are a plus.</li></ul></div><div></div><div><b><br>
BHSI Offers:</b></div><br>
<div></div><ul><li>
A competitive package and exciting growth opportunities for career-oriented teammates.</li><li>
A dynamic, action oriented, and thoughtful environment centered on always doing the right thing for our customers, teammates and our other stakeholders.</li><li>
A purposely non-bureaucratic organization that embraces simplicity over complexity and emphasizes individual excellence in a team framework.</li><li>
Benefits that support your life and well-being, which include:<ul><li>
Comprehensive Health, Dental and Vision benefits.</li><li>
Disability Insurance (both short-term and long-term).</li><li>
Life Insurance (for you and your family).</li><li>
Accidental Death &amp; Dismemberment Insurance (for you and your family).</li><li>
Flexible Spending Accounts.</li><li>
Health Reimbursement Account.</li><li>
Employee Assistance Program.</li><li>
Retirement Savings 401(k) Plan with Company Match.</li><li>
Generous holiday and Paid Time Off.</li><li>
Tuition Reimbursement.</li><li>
Paid Parental Leave.</li></ul></li></ul><div></div><div><i><br>
The base salary range for this position in Boston is $95,000.00 to $125,000.00, along with annual bonus eligibility. Total compensation for a candidate is determined by their relevant skills, location, and experience. We value our teammates &ndash; both their capabilities and character &ndash; as demonstrated by our amazing culture.</i></div><div></div><div><br>
NOTE: Compensation will be commensurate with experience. This job description is not intended to be all-inclusive. Team Member may perform other related duties as negotiated to meet the ongoing needs of the organization.</div></div>

Senior IT Compliance Analyst

Search 10000+ Senior information security analyst jobs near you this March. New roles added regularly across leading industries. Apply today.