senior information security analyst

Central New Mexico Community College

<div><div>Compensation:</div>
$78,708 - $100,402<div>
Compensation Type:</div>
Salary<div>
Employment Type:</div>
Regular<div>
Grade:</div>
E10<div>
Position Summary</div>
The Senior Information Security Analyst is tasked with designing, implementing, and maintaining cybersecurity solutions to safeguard our organization's systems, networks, and data from cyber threats, thereby enhancing our security posture. This position provides expert-level technical security risk monitoring, analysis, and incident investigations to protect Central New Mexico Community College&rsquo;s (CNM) sensitive information and infrastructure from cyber threats and attacks. The Cybersecurity Engineer collaborates closely with cross-functional teams and leadership to formalize processes and methodologies, conduct risk assessments, and ensure compliance with regulatory requirements. The Senior Information Security Analyst raises security awareness across the CNM community through ongoing training and education initiatives, engaging staff, faculty, vendors, contractors, students, and the public via various communication channels and leads team efforts as assigned.<div>
Duties &amp; Responsibilities</div><ul><li><div>
Leads operational tasks, incident response, and troubleshooting within the Office of Information Security.</div></li><li><div>
Provides expert-level guidance, training, and leadership to Information Security Office team members.</div></li><li><div>
Utilizes security tools and technologies including firewalls, IDS/IPS, SIEM, antivirus solutions, and encryption.</div></li><li><div>
Monitors security systems and promptly responds to security incidents, including incident triage, containment, eradication, and recovery efforts.</div></li><li><div>
Designs, implements, and maintains cybersecurity solutions such as firewalls, IDS/IPS, SIEM, endpoint protection, access management, and encryption technologies.</div></li><li><div>
Analyzes security logs, event data, and network traffic to identify and investigate potential security incidents and role discovery.</div></li><li><div>
Conducts security risk assessments and audits to identify vulnerabilities and recommend remediation measures.</div></li><li><div>
Performs security assessments of third-party vendors and service providers to ensure compliance with security requirements.</div></li><li><div>
Participates in incident response exercises, tabletop simulations, and security awareness campaigns.</div></li><li><div>
Develops and enforces security policies, procedures, and standards to ensure compliance with regulations and best practices.</div></li><li><div>
Collaborates with IT teams to integrate security controls into software and infrastructure projects.</div></li><li><div>
Engages with business users to understand application data needs and prioritize requirements.</div></li><li><div>
Stays updated with cybersecurity threats, vulnerabilities, and industry trends to mitigate risks proactively.</div></li><li><div>
Provides security awareness training to the CNM user community on data protection best practices.</div></li><li><div>
Participates in the Emergency on-Call rotation for the department and the team.</div></li><li><div>
Provides audit responses, oversees information security administrative and technical controls, and performs forensic analysis of security incidents.</div></li><li><div>
Monitors critical infrastructure and information security threats, providing first response services and delegating remediation tasks.</div></li><li><div>
Maintains technical currency in the evolving threat landscape and contributes to information security incident response teams.</div></li><li><div>
Enforces policies and procedures as appropriate.</div></li><li><div>
Performs other related duties as assigned.</div></li></ul><div>
Minimum Qualifications:</div><ul><li>
Bachelor's degree in computer science, information technology, cybersecurity, or related field</li><li>
AND</li><li>
Five (5) years of current work experience in cybersecurity engineering or related field</li><li>
Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Information Security Manager (CISM), or GIAC Security Expert (GSE) preferred</li><li>
Advanced knowledge of network security principles, firewalls, and intrusion detection/prevention systems (IDS/IPS)</li><li>
Extensive experience with common vulnerability assessment tools (e.g., Nessus, Nmap)</li><li>
Strong quantitative and qualitative analytical abilities</li><li>
Excellent communication, collaboration, and teamwork abilities</li><li>
A combination of education and experience may be substituted for requirements of the position</li></ul><div>
Preferences:</div><ul><li>
5+ years cybersecurity experience</li><li>
CISSP/CISM/GIAC preferred</li><li>
SIEM, incident response, vulnerability management</li><li>
Experience with NIST/CIS frameworks</li><li>
Higher ed/public sector preferred</li><li>
Best consideration date: 4/2/2026</li></ul><div>
EEO STATEMENT:</div><div>
As an EEO employer, Central New Mexico Community College will not discriminate in our employment practices based on an applicant&rsquo;s race, ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, serious medical condition or status as a protected veteran or spousal affiliation. Central New Mexico Community College hires only U.S. citizens and individuals lawfully authorized to work in the U.S.</div></div>

Senior Information Security Analyst

Stock Yards Bank & Trust

Stock Yards Bancorp, Inc. (NASDAQ: SYBT), parent company of Stock Yards Bank & Trust Company, with offices in Louisville, Central, Eastern and Northern Kentucky, as well as the Indianapolis, Indiana and Cincinnati, Ohio metropolitan markets.
 
Job Title: Senior Information Security Analyst
 Department: Information Security
 Reports To: Information Security Operations Manager
 FLSA Status: Exempt
 Hours of Operation: Monday – Friday 8:00 AM – 5:00 PM – (Unless otherwise approved)
 45+ hours per week, On-call after hours
 
Organizational Duties and Responsibilities: 
1. Supports the mission, vision, and philosophy of the Bank. Complies willingly with all organizational policies and procedures.
 2. Supports all functions that maintain compliance with regulatory agencies.
 3. Complete relevant annual training upon approval by the Director of Information Security.
 
General Job Summary: 
The Senior Information Security Analyst is responsible for safeguarding the organization's information assets by implementing and managing advanced security measures. The role encompasses vulnerability management, patch management oversight, email security, data loss prevention (DLP), anti-virus and endpoint detection and response (EDR) systems, security monitoring, incident response, and comprehensive reporting. The incumbent is expected to ensure regulatory compliance, mitigate security risks, and enhance the organization's overall security posture through proactive measures and collaboration with cross-functional teams.
 
Essential Duties and Responsibilities:Vulnerability Management: 
<ul>
<li>Conduct regular vulnerability assessments and penetration testing across systems and networks.</li>
<li>Analyze and prioritize vulnerabilities; develop and implement remediation plans.</li>
<li>Collaborate with IT and development teams to address security weaknesses.</li>
<li>Stay current with emerging vulnerabilities and threat landscapes.</li>
</ul>
Patch Management Oversight: 
<ul>
<li>Lead and manage the patch management process for software and hardware components.</li>
<li>Coordinate with system administrators and vendors to ensure timely application of patches.</li>
<li>Develop and enforce patch management policies and procedures.</li>
<li>Monitor patch deployment effectiveness and address implementation issues.</li>
</ul>
Email Security: 
<ul>
<li>Implement and manage email security solutions to protect against phishing, spam, and malware.</li>
<li>Monitor email systems for security threats and respond promptly to incidents.</li>
<li>Develop policies and train staff on secure email practices.</li>
</ul>
Data Loss Prevention (DLP): 
<ul>
<li>Deploy and maintain DLP solutions to prevent unauthorized access or disclosure of sensitive data.</li>
<li>Define and enforce DLP policies; monitor compliance.</li>
<li>Investigate and address DLP alerts and incidents.</li>
</ul>
Anti-Virus/Endpoint Detection and Response (EDR): 
<ul>
<li>Manage anti-virus and EDR systems across all endpoints to detect and mitigate security threats.</li>
<li>Ensure endpoints are protected with up-to-date security software and definitions.</li>
<li>Respond to security alerts from anti-virus and EDR systems; coordinate remediation efforts.</li>
</ul>
Security Monitoring and Incident Response: 
<ul>
<li>Monitor security systems, including SIEM tools and intrusion detection systems.</li>
<li>Analyze security logs to identify potential threats and anomalies.</li>
<li>Perform privilege access management systems, enforcing least privilege principles and monitoring access controls.</li>
<li>Participate in incident response activities, including investigation, containment, and recovery.</li>
<li>Document incidents and implement improvements to prevent recurrence.</li>
</ul>
Reporting: 
<ul>
<li>Prepare detailed security reports for management and stakeholders.</li>
<li>Develop metrics and dashboards to measure the effectiveness of security initiatives.</li>
<li>Communicate security issues and recommendations to technical and non-technical audiences.</li>
</ul>
Compliance and Policy Enforcement: 
<ul>
<li>Ensure adherence to all relevant security policies, standards, and regulatory requirements.</li>
<li>Assist in developing, reviewing, and updating information security policies and procedures.</li>
<li>Support internal and external audits; address compliance gaps.</li>
</ul>
Security Awareness and Training: 
<ul>
<li>Contribute to security awareness programs; develop training materials and deliver presentations.</li>
<li>Educate employees on best practices and emerging threats.</li>
</ul>
Additional Duties: 
<ul>
<li>Evaluate and recommend security technologies and solutions.</li>
<li>Stay informed about cybersecurity trends and best practices.</li>
<li>Mentor junior team members and provide guidance on security matters.</li>
</ul>
Other Functions: 
<ul>
<li>Complete information security projects and implement new tools.</li>
<li>Research new data security trends, keep up-to-date with current events and new threats in data security, and participate in relevant training courses.</li>
<li>Make recommendations to the Director of Information Security to improve network and mainframe security.</li>
<li>Expertise in performing Information Security Analyst(s) or Information Security Operations Manager functions where redundancy is necessary.</li>
<li>Provide assistance to Internal Audit and regulators with IT-related requests.</li>
<li>Complete other job-related duties, and/or projects, as assigned.</li>
</ul>
Working Conditions: 
Office environment with some travel to enterprise locations, company-sponsored events, training, or as directed.
 
Minimum Job Requirements: 
Education: Bachelor's degree in Information Security, Cybersecurity, Computer Science, or a related field. Advanced degrees or relevant certifications are advantageous.
 
Experience: 
<ul>
<li>Minimum of five (5) years of experience in information security with a focus on vulnerability management, patch management, email security, DLP, and endpoint security.</li>
<li>Proven experience with security tools such as vulnerability scanners, SIEM platforms, EDR solutions, and email security systems.</li>
</ul>
Comprehensive Skills: 
Employees are expected to represent the Bank in a professional manner to customers and outside contacts.
 Employees must have excellent interpersonal communication skills, consisting of the ability to write and speak effectively to others. Employees must be a productive team player, with the ability to learn, apply training and comprehend policies and procedures. Employees should also be flexible to changing working situations and able to meet deadlines as they arise.
 
Specific Skills: 
<ul>
<li>Strong understanding of network protocols, operating systems, and database security.</li>
<li>Familiarity with regulatory compliance requirements (e.g., FFIEC, GLBA, PCI DSS).</li>
<li>Proficiency in scripting or programming languages for automation purposes.</li>
<li>Excellent analytical, problem-solving, and organizational skills.</li>
<li>Exceptional communication skills, both verbal and written.</li>
</ul>
Specialized: 
Familiar with Cybersecurity related systems
 
Licenses: 
Professional certifications such as CISSP, SSCP, GIAC, or other related certification(s), or willingness to obtain within one year.
 
Physical requirements: 
The physical demands described here are representative of those that must be met by an employee in order to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
 <ul>
<li>Primarily sedentary work performed in an office environment</li>
<li>Ability to sit for extended periods of time while working at a computer</li>
<li>Frequent use of hands and fingers to operate a computer, keyboard, mouse, and other office equipment</li>
<li>Ability to speak clearly and hear well enough to communicate with clients, team members, and vendors via phone, video, and in person</li>
<li>Visual acuity sufficient to read computer screens, printed documents, and financial data</li>
<li>Occasional standing, walking, bending, or reaching</li>
<li>Ability to lift and carry up to 10–15 pounds occasionally (e.g., files, office supplies)</li>
<li>Ability to lift and carry up to 10–15 pounds occasionally (e.g., files, office supplies)</li>
</ul>
Employees must also have the ability and means to travel as necessary for the purpose of attending training, meetings, and other various business functions.
 
Benefits: 
<ul>
<li>401(K) with a company match of up to 6%</li>
<li>ESOP employer match</li>
<li>Medical insurance</li>
<li>Dental insurance</li>
<li>Vision insurance</li>
<li>Cancer/Disease insurance</li>
<li>Accident insurance</li>
<li>Flexible Spending Accounts</li>
<li>Flexible Savings Accounts</li>
<li>Health Savings Accounts</li>
<li>Bank paid Life/AD&D insurance</li>
<li>Voluntary Life/AD&D insurance</li>
<li>Bank paid Short-Term and Long-Term Disability insurance</li>
<li>Employee Stock Purchase Plan</li>
<li>Employee Assistance Program</li>
</ul>

Morningstar

<div>The Group:
The Information Security department is responsible for setting enterprise security policies and standards that are designed to protect the confidentiality, integrity and availability of Morningstar information. The security team offers guidance and technical expertise in areas like application security, policies and procedures, disaster recovery and compliance/regulation. We analyze emerging security threats and conduct risk and vulnerability assessments to ensure that our information remains secure. 
The Role:
The Information Security Team is looking for a Senior Analyst Third-Party Vendor Risk Analyst to join the IT Compliance Team. The Senior Third-Party Vendor Risk Analyst will help shape the Information Security Team&rsquo;s third party vendor risk management program. This individual will serve as a subject matter expert for third party vendor risk management, perform vendor risk assessments, propose updates to expand the program&rsquo;s capabilities, increase participation in the program and drive process improvements. This position is based in either our Chicago or Toronto office. 
Responsibilities:<ul><li>
Partner with the business to execute vendor risk assessments</li><li>
Monitor internal SLAs to ensure we provide timely service to our internal stakeholders
</li><li>Serve as a subject matter expert for security vendor risk management</li><li>
Collaborate with the procurement department and other internal stakeholders to improve and expand the vendor risk management program</li><li>
Review third party security documents (SOC2, security policies, data flow diagrams, etc.)</li><li>
Perform contract reviews of proposed changes to security requirements in our third party contracts</li><li>
Liaise with third party vendors as required</li></ul> 
Requirements:<ul><li>
A bachelor&rsquo;s degree and 5+ years&rsquo; experience include 3+ in a vendor risk related role</li><li>
Experience serving as the subject matter expert for security vendor due diligence
</li><li>Experience performing contract review of security terms</li><li>
Familiarity with common compliance standards (SOX, SOC2, PCI-DSS, GDPR etc.)</li><li>
Familiarity with security frameworks (ISO 27001, NIST, etc.) and general security concepts</li><li>
Strong organizational skills and the ability to multitask and switch priorities with short notice</li><li>
Strong business analysis, research and analytical skills</li><li>
Excellent communication skills</li></ul>
Compensation and Benefits
At Morningstar we believe people are at their best when they are at their healthiest. That&rsquo;s why we champion your wellness through a wide range of programs that support all stages of your personal and professional life. Here are some examples of the offerings we provide:<ul><li>
Financial Health<ul><li>
100% 401k match up to 6% of salary</li></ul><ul><li>
Stock Ownership Potential</li><li>
Company provided life insurance - 1x salary + commission</li></ul></li><li>
Physical Health<ul><li>
Comprehensive health benefits (medical/dental/vision) including potential premium discounts and company-provided HSA contributions (up to $500-$2,000 annually) for specific plans and coverages</li><li>
Additional medical Wellness Incentives - up to $300-$600 annual</li><li>
Company-provided long- and short-term disability insurance</li></ul></li><li>
Emotional Health<ul><li>
Trust-Based Time Off</li><li>
6-week Paid Sabbatical Program</li><li>
6-Week Paid Family Caregiving Leave</li><li>
Competitive 8-24 Week Paid Parental Leave</li><li>
Adoption Assistance</li><li>
Leadership Coaching &amp; Formal Mentorship Opportunities</li><li>
Annual Flex Stipend - $1000 annually to cover personal education &amp; well-being expenses
</li><li>Tuition Reimbursement</li></ul></li><li>
Social Health<ul><li>
Charitable Matching Gifts program</li><li>
Dollars for Doers volunteer program</li><li>
Paid volunteering days</li><li>
15+ Employee Resource &amp; Affinity Groups</li></ul></li></ul>
Total Cash Compensation Range
$114,100.00 - 193,975.00 USD Annual
Inclusive of annual base salary and target incentive
Morningstar's hybrid work environment gives you the opportunity to collaborate in-person each week as we've found that we're at our best when we're purposely together on a regular basis. In most of our locations, our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you'll have tools and resources to engage meaningfully with your global colleagues.
001_MstarInc Morningstar Inc. Legal Entity</div>

Senior IT Risk and Compliance Analyst

Airgas

<div>R10087128 Senior Application Security &amp; Compliance Analyst (Open)
Location:
Radnor, PA (Airgas HO) - Management - Digital &amp; IT Airgas
<h2 class="jobSectionHeader">How will you CONTRIBUTE and GROW?
</h2>At Airgas, we are committed to building a diverse and inclusive workplace that embraces the diversity of our employees, our customers, patients, community stakeholders and cultures across the world.
 
 
Airgas is Hiring for a Senior Application Security &amp; Compliance in Radnor, Pennsylvania!
We are looking for you !
<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Systems
</li><li>Candidates must be legally authorized to work in the U.S. without current or future sponsorship.
</li><li>Work schedule: This is a hybrid role requiring three days in the office and two days remote.
</li></ul>Recruiter: Roseanne Khachikyan / Roseanne.Khachikyan@airliquide.com / 424-318-0169
Recruiter Neelam Patel / neelam.patel@airliquide.com / 913.343.5762
The Senior Application Security &amp; Compliance Analyst is the primary internal subject matter expert (SME) responsible for the security and performance optimization of the global Customer Experience (CX) digital ecosystem. This role ensures compliance across core Salesforce products, connected SaaS platforms, and edge delivery infrastructure. They also lead the transition of security and edge management functions to internal operations, acting as the final technical escalation point while balancing robust protection with high-performance CX needs.
<ul><li>SaaS Governance and Configuration: Lead the security configuration and account management for the CX SaaS stack (including Coveo, Contentful, Viamedici, Bynder) and manage Customer Data Architecture (CDA) SaaS integrations to ensure secure data exchange.
</li><li>Application and Infrastructure Security: Lead the end-to-end setup and management of Cloudflare CDN services, overseeing WAF/WAAP, Bot Management, DDoS protection, CDN optimization, and SSL/TLS/DNS management.
</li><li>Application Security Lifecycle and Identity Management: Conduct deep-dive security reviews, coordinate the lifecycle of penetration testing and vulnerability remediation, and directly oversee Okta CIAM implementation, security, and permission model auditing.
</li><li>Compliance and Vendor Transition: Serve as the technical lead for PCI compliance across the CX ecosystem and successfully transition legacy security and CDN management functions from external providers to internal operations.
</li></ul><h2 class="jobSectionHeader">________________________
</h2><h2 class="jobSectionHeader">Are you a MATCH?
</h2>Required Qualifications
<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Systems, or a relevant technical area, or equivalent demonstrated experience.
</li><li>People Management: Proven experience leading teams of senior technical contributors or architects.
</li><li>Platform Expertise: Minimum of 5 years of experience as a Software Solution Architect with a focus on eCommerce or Salesforce technology (Commerce, Marketing, Sales, Data 360, and CPQ).
</li><li>Security Depth: 8+ years of progressive experience in Information Security or Security Engineering, with specific expertise in OWASP Top 10, API security, and Edge Security (Cloudflare/CDN).
</li><li>DevSecOps Tooling: Hands-on experience with GitHub SaaS, SonarQube, and Atlassian Tools.
</li></ul>Preferred Qualifications
<ul><li>Expert-level knowledge of Cloudflare CDN, including WAF/WAAP tuning, Bot Management, and performance optimization.
</li><li>Deep knowledge of security principles in cloud environments (AWS/GCP) and securing complex SaaS solutions.
</li><li>Hands-on experience with security testing tools (vulnerability scanners, SAST, DAST) and SSO protocols (SAML, OAuth).
</li></ul><ul><li>Proven experience securing headless or composable SaaS architectures like Contentful, Coveo, and Bynder.
</li><li>Exceptional ability to articulate complex security and edge delivery risks to non-technical CX stakeholders.
</li></ul>________________________
Benefits
We care about and support our Airgas Families. This is evident not only through our competitive compensation but also through a comprehensive benefits package that includes medical, dental, and vision plans, short-term and long-term disability, life and accidental death and dismemberment (AD&amp;D) insurance, Employee Assistance Program (EAP), pre-tax commuter transportation benefit, parental leave, vacation, sick time, floating holidays, jury duty and funeral/bereavement leave, and paid holidays for all eligible full-time employees.
Additionally, we offer our eligible employees a 401k plan with company matching funds, tuition reimbursement, discounted college tuition for eligible employees&rsquo; dependents, and an Airgas Scholarship Program for dependent children.
Associates who are members of collective bargaining units should review their bargaining agreement to determine whether they are eligible for some or all of the benefits described here and to see any special terms or conditions for eligibility.
_________________________
Your DIFFERENCES enhance our PERFORMANCE
At Airgas, we are committed to building a workplace that embraces the diversity of our employees, our customers, patients, community stakeholders and cultures across the world.
We welcome and consider applications from all qualified applicants, regardless of their race, gender, sexual orientation, religion, disability or any other protected characteristic. We strongly believe a diverse organization opens up opportunities for people to express their talent, both individually and collectively and it helps foster our ability to innovate by living our fundamentals, acting for our success and creating an engaging environment in a changing world.
_________________________
About Airgas
Airgas, an Air Liquide company, is a leading U.S. supplier of industrial, medical and specialty gases, as well as hardgoods and related products; one of the largest U.S. suppliers of safety products; and a leading U.S. supplier of ammonia products and process chemicals. Through the passion and diversity of its 18,000 associates, Airgas fosters a culture of safety, customer success, sustainability and innovation. Airgas associates are empowered to share ideas, take initiative and make decisions.
Airgas is a subsidiary of Air Liquide, a world leader in gases, technologies and services for industry and healthcare. Present in 60 countries with approximately 66,500 employees, Air Liquide serves more than 4 million customers and patients.
Join us for a stimulating experience: At Airgas, you matter and so does the work you do. As a member of our team, you play an important role in the success of your team, making sure our products are created sustainably and delivered safely and efficiently. In turn, you&rsquo;ll find a welcoming workplace where you&rsquo;re valued for who you are and where you can fill your potential while growing a fulfilling career &mdash; whatever path you choose.
_________________________
Equal Employment Opportunity Information 
 
We are an equal opportunity employer. We welcome all qualified applicants regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic.
Airgas, an Air Liquide Company is a Government contractor subject to the Vietnam Era Veterans&rsquo; Readjustment Assistance Act of 1974 and Section 503 of the Rehabilitation Act of 1973.
Airgas does not discriminate against qualified applicants with disabilities, and is committed to providing reasonable accommodations to the known disabilities of such individuals so as to ensure equal access to benefits and privileges of employment. If you are an individual with a disability and would like to request a reasonable accommodation as part of the employment selection process, please contact us by email at us-accommodationrequest@airgas.com.
_________________________
California Privacy Notice</div>

Senior Application Security & Compliance Analyst

Tire Rack

<div>Sr. Information Security GRC Analyst

Location: Tire Rack &ndash; South Bend, IN (On-Site) 
Department: Information Security

Employment Type: Full-Time 
Salary Range: $115,000-$125,000 annually 


About the Role

Tire Rack is seeking a Senior Information Security GRC Analyst to support and advance our Information Security Governance, Risk, and Compliance (GRC) program

.

In this role, you will assess and strengthen IT and security controls across the organization while ensuring alignment with regulatory, statutory, and industry security standards including ISO/IEC 27001:2022, PCI DSS, and internal security policies. 


This position works closely with IT teams, business leaders, and audit stakeholders to identify risk exposures, strengthen control frameworks, support audit readiness, and drive continuous improvement in Tire Rack&rsquo;s overall security posture. 


This role requires a strong mix of technical understanding, risk assessment expertise, and the ability to translate compliance requirements into practical, business-aligned security controls. 


At Tire Rack, we operate with the values of IOOGA &mdash; Integrity, Our People, Our Customers, Growth, and Attitude. 


What You'll Do 


Governance, Risk &amp; Compliance Leadership
<ul><li>
Advise IT and business stakeholders on governance, risk, and compliance requirements by interpreting regulatory, statutory, and security standards and translating them into actionable control recommendations.</li><li>
Lead and support the organization&rsquo;s information security risk management program, including risk identification, assessment, documentation, and monitoring mitigation strategies.</li><li>
Evaluate technology risks and recommend practical mitigation strategies aligned with business objectives.</li></ul>

Controls &amp; Compliance
<ul><li>
Develop and maintain GRC program documentation including:</li><li><ul><li>
Security policies</li><li>
Standards and procedures</li><li>
Risk registers</li><li>
Control inventories</li><li>
Evidence repositories</li></ul>
</li><li>Strengthen internal security controls by identifying opportunities to improve standardization, documentation, and compliance alignment.</li><li>
Define and communicate control expectations, testing procedures, and audit evidence requirements across teams.</li></ul>

Audit &amp; Testing
<ul><li>
Coordinate internal and external audits, including planning, evidence collection, stakeholder coordination, and remediation tracking.</li><li>
Execute security control testing by:</li><li><ul><li>
Defining scope</li><li>
Reviewing and validating evidence</li><li>
Documenting results</li><li>
Identifying deficiencies</li><li>
Tracking remediation through resolution.</li></ul>
</li><li>Manage compliance findings, corrective actions, and risk acceptance documentation.</li></ul> 


Program Improvement
<ul><li>
Support security initiatives and technology projects by embedding governance, risk, and compliance practices into delivery.</li><li>
Track program metrics, audit results, and compliance trends to improve security maturity over time.</li><li>
Provide recommendations to strengthen Tire Rack&rsquo;s overall security and compliance framework.</li><li>
Perform other duties as assigned in support of the Information Security and Technology organization.</li></ul>

What We're Looking For

We are looking for a security professional who brings both technical understanding and risk management expertise while partnering effectively across teams. 


Required Experience
<ul><li>
5&ndash;7 years of experience in IT, cybersecurity, risk management, audit, or compliance roles.</li><li>
Strong knowledge of information security frameworks including:</li><li><ul><li>
ISO/IEC 27001</li><li>
PCI DSS</li><li>
Familiarity with GDPR concepts</li></ul>
</li><li>Understanding of IT environments, systems, and security controls across infrastructure, applications, and data environments.</li></ul>

Skills &amp; Competencies
<ul><li>
Strong analytical and problem-solving abilities with the capacity to identify trends, patterns, and control risks.</li><li>
Ability to evaluate control design and operational effectiveness.</li><li>
Excellent documentation, organization, and attention to detail.</li><li>
Strong communication skills with the ability to explain complex technical or compliance concepts to both technical and non-technical audiences.</li><li>
Ability to work independently while collaborating effectively with cross-functional stakeholders.</li></ul>

Required Certifications (One or more)

Candidates must possess one or more of the following professional certifications, or be able to obtain one within a reasonable period after hire:
<ul><li>
CISA (Certified Information Systems Auditor)</li><li>
CRISC (Certified in Risk and Information Systems Control)</li><li>
CISSP (Certified Information Systems Security Professional)</li><li>
CISM (Certified Information Security Manager)</li><li>
CompTIA Security+</li></ul>

Equivalent or comparable information security, audit, risk, or compliance certifications may also be considered. 


Education
<ul><li>
Bachelor&rsquo;s Degree in Information Systems, Information Technology, Cybersecurity, Risk Management, or a related field.</li></ul>

Work Schedule

Work Days: 
Monday through Friday 
Occasional weekends may be required.

Work Hours: 
8:00 a.m. &ndash; 5:00 p.m. 
Additional hours may be required depending on project or audit needs. 


#HP</div>

Sr. Information Security GRC Analyst

ISSE SERVICES LLC

<div>SENIOR CYBER SECURITY ANALYST III (ISSM) 


This is a HYBRID position, not fully remote.

Only apply if you have a current security clearance. 


Location: Clearfield, UT

The Cybersecurity Analyst is a key member of the Cybersecurity team and works closely with our customers across functional teams to provide compliance assessments and help engineer secure solutions as they are being developed. 


Essential Duties and Job Functions
<ul><li>Assist customers design, engineer, and implement technical solutions</li></ul>
<ul><li>Lead teams of cybersecurity engineers and analysts in developing solutions across multiple DoD programs</li></ul>
<ul><li>Coordinate with Risk Management Framework team to ensure design meets specified requirements</li></ul>
<ul><li>Coordinate with DoD agencies to ensure solutions meet specific security guidelines</li></ul>
<ul><li>Conduct research, review documentation and provide input for Risk Management Framework packages to the Government for review and approval</li></ul>
<ul><li>Review Risk Management Framework documentation for completeness and readiness for certification analysis</li></ul>
<ul><li>Coordinate with the program team to gather artifacts and assist the Government in resolving issues precluding the program from receiving an Authority To Operate</li></ul>
<ul><li>Assist with FISMA compliance audits and provide status updates to the PM</li></ul>
<ul><li>Perform regular STIG and vulnerability analysis in compliance with DoD guidelines</li></ul>
<ul><li>Review compliance with current Cybersecurity policy, regulations, and directives to ensure secure configuration and operation of all operated and maintained IT assets, recommending corrective actions as required</li></ul>
<ul><li>Assist customers developing new system to design and engineer the systems to meet current cyber security requirements and best practices</li></ul> 


Knowledge, Experience and Skills
<ul><li>Minimum seven (7) years of experience in an Information Security position or IT Audit role with a background in performing security risk assessments</li></ul>
<ul><li>Experience with system design across multiple areas of operations (AAA, Operating Systems, network layout and design&hellip;)</li></ul>
<ul><li>Requirements gap analysis/traceability</li></ul>
<ul><li>Proven ability to create and maintain effective documentation, including policies, processes and procedures</li></ul>
<ul><li>Experience drawing Topology, Data Flow, and Boundary diagrams</li></ul>
<ul><li>Strong understanding of security concepts and detailed implementation including using NIST 800-53r4 controls as a framework</li></ul>
<ul><li>Deep understanding of how to tailor security implementation based on mission and threats</li></ul>
<ul><li>Knowledge of security and IT general controls for application development and management</li></ul>
<ul><li>Good communications skills, both verbal and written, as well as the ability to communicate well with people in a variety of positions, roles and levels</li></ul>
<ul><li>Professional, self-motivated and a strong sense of urgency.</li></ul>
<ul><li>Ability to provide technical direction to more junior team members</li></ul>

Required
<ul><li>CISSP, CISSP-ISSEP, CISSP-ISSAP</li></ul>
<ul><li>Active DoD SECRET clearance (ability to gain Top Secret)</li></ul> 


Preferred
<ul><li>BS/BA degree or an equivalent combination of education and experience</li></ul>
<ul><li>Training in Risk Management or IT Audit Methodology strongly desired</li></ul> 
Excellent Benefits Package
<ul><li>
401(k) matching</li></ul>
<ul><li>Dental insurance</li></ul>
<ul><li>Health insurance</li></ul>
<ul><li>Life insurance</li></ul>
<ul><li>Short-term and Long-term disability</li></ul>
<ul><li>Paid time off</li></ul></div>

Senior Cybersecurity Information Analyst

City of Tacoma

<div><div><div><h2 class="jobSectionHeader">Position Description</h2></div> 
<div> 
 
Tacoma Power's Power Shared Services Section is seeking an experienced Physical Senior Security Support Analyst to join their team! In this role you will assist with functions that are critical in safeguarding Tacoma Public Utilities assets and ensuring compliance with federal standards in the energy industry. The successful candidate, preferably holding Certified Protection Professional (CPP) and Physical Security Professional (PSP) certifications, will be the primary Subject Matter Expert for NERC CIP-003-8 and FERC D2 SI physical security requirements.
In this critical position, the Physical Senior Security Support Analyst will be responsible for the meticulous management and regulated documentation of physical security plans, programs, and maps. The role involves ensuring strict adherence to NERC and FERC requirements, particularly NERC CIP-003-8 and FERC D2 SI, to maintain Tacoma Power's compliance and mitigate the risk of substantial monetary penalties. Additionally, the position will provide valuable assistance with other applicable reliability standards, with a notable focus on NERC CIP-006. Join our team and contribute your expertise to the essential mission of protecting our assets and maintaining regulatory compliance in the dynamic energy industry. 
Responsibilities Include: 
Compliance Coordination<ul><li>
Develop, audit, and revise security documents for Tacoma Power&rsquo;s 7 Hydropower Projects, encompassing annual compliance certifications, vulnerability assessments, threat assessments, security plans, and physical security checklists.</li><li>
Serve as the primary reporting expert for security incidents and suspicious activities, adhering to 18 CFR 12.10, and report to the FERC D2SI Security Branch. Coordinate and actively participate in FERC Physical Security Inspections, annual drills, and Emergency Action Plan (EAP) exercises.</li><li>
Collaborate with Tacoma Power's Dam Safety group to provide responses and status reports, ensuring the submission of follow-up reports and recommendations to FERC on physical security-related matters. Manage compliance activities resulting from exercises, inspections, and audits related to physical security recommendations.</li></ul>
Security Plan Maintenance<ul><li>
Manage the maintenance of security processes, policies, plans, and procedures for TPU properties governed by NERC CIP-003-8 federal standards to ensure proper security levels and federal compliance, avoiding financial penalties.</li><li>
Act as the primary subject matter expert in maintaining Tacoma Power's CIP low impact physical security plans, including detailed maps and critical asset inventories, crucial for protecting assets and ensuring compliance.</li><li>
Monitor and respond to the CIP low impact key/lock replacement program in accordance with Tacoma Power Staff Procedure E-4, ensuring effective security measures are consistently upheld.</li></ul></div> 

<div><h2 class="jobSectionHeader">Qualifications</h2></div>
<div><div>Minimum Education* 
Bachelor's degree in business or public administration, criminal justice or directly related field 
 
Minimum Experience* 
4 years of security program administration, including administration and coordination of electronic security systems and/or directly related field 
 
Licensing, Certifications and Other Requirements 
Washington State Driver's License 
 
This position will require individuals to complete annual training and pass a comprehensive personal risk assessment (background check) prior to employment and every five years thereafter as required by federal regulatory requirements (NERC-CIP) 
 
<ul><li>Equivalency: 1 year of experience = 1 year of education</li></ul> 

If you have a less traditional background, we want to hear about your transferrable skills and experience. We value a variety of perspectives and are excited to see what you bring to the table.</div></div>
<div><h2 class="jobSectionHeader">Selection Process &amp; Supplemental Information</h2></div>
<div>This recruitment is being managed by Kye Merritt, if you would like to be notified of similar opportunities or stay connected with things going on at Tacoma Public Utilities and the City of Tacoma, connect with me on LinkedIn!
Compensation &amp; Benefits
Pay Details:
Annual Salary: $98,280.00 - $138,320.00
Employee Benefits | City of Tacoma
Tacoma Power 
Tacoma Power is an almost 100% hydroelectric, municipally-owned public power utility, located in Tacoma. We serve approximately 180,000 customers as one of the three operating divisions of Tacoma Public Utilities, alongside Tacoma Water and Tacoma Rail. As one of the most livable, walkable cities in the country, you'll find that Tacoma is a great fit for all interests with places to bike, run, hike, and explore, the perks of a big city, and the charm of a small town. We welcome you to take a look at our website and discover how the City of Tacoma can make your next career move part of our combined destiny: 
http://www.cityoftacoma.org/ 
https://www.mytpu.org/ 
http://www.traveltacoma.com/
City of Tacoma&rsquo;s Commitment to Diversity, Equity, and Inclusion
A Commitment to Equity &amp; Diversity 
 At the City of Tacoma, we're on a mission to make our workforce as diverse and inclusive as the community we serve. We actively seek out candidates from a wide range of backgrounds and cultures. Join our team at the City of Tacoma and help us build a more vibrant, inclusive, and equitable community for all.
If you have a less traditional background, we want to hear about your transferrable skills and experience. We value a variety of perspectives and are excited to see what you bring to the table.
The Community
Tacoma is centrally located just 32 miles south of the city of Seattle and 31 miles north of the state capital, Olympia. The City of Tacoma is also home to the Port of Tacoma, which is among the largest container ports in the United States. Like most cities in the northwest, Tacoma is surrounded by beautiful nature, offering residents many opportunities for outdoor adventures.
Largely suburban in nature with a small, but dense, urban core, Tacoma is home to numerous institutes of higher learning that attract students from across the country. The University of Washington Tacoma, Pacific Lutheran University, University of Puget Sound, a satellite campus of the Evergreen State College, three community/technical colleges, and several trade and business schools are within Tacoma's geographic area. Downtown's Cultural District is the site of the Washington State History Museum, Museum of Glass, the Tacoma Art Museum, and America's Car Museum.
With its affordable housing and distinctive neighborhoods and business districts, the city has been recognized numerous times as a best city to live in the nation. To see a few of the great things Tacoma has to offer, view this YouTube Video!
View this exciting video to learn more about the City of Tacoma: https://www.youtube.com/watch?v=2n5MWl8KFvI
Application Process
Interested individuals should apply online by completing the application and attaching a resume and cover letter by the closing date and time listed on the job announcement. Applications received without attaching the required materials may not progress in the selection process. Applicants who have the strongest backgrounds related to the responsibilities of this position may be invited to participate in the interview process, which may include a work problem. Appointment is subject to passing a background check.
Get Assistance
For assistance with the application process or questions regarding this job announcement please contact the Human Resources office at (253) 591-5400 by 4:00 p.m. of the closing date of the job announcement.
For technical difficulties using the NEOGOV system, call the applicant support line at 1-855-524-5627 between 6:00a.m. and 5:00 p.m. Pacific Standard Time. This will allow us to assist you before the job announcement closes.
Communication with the City of Tacoma
We primarily communicate via email during the application process. Emails from Tacoma.gov and/or governmentjobs.com should be placed on your safe domain list to ensure that you receive notifications in a timely manner. As a precaution, you may also want to check your junk email folders.
Note: The provisions of this job announcement do not constitute an expressed or implied contract. Any provision contained herein may be modified and/or revoked without notice.</div></div></div>

Physical Security Analyst, Senior

Search 10000+ Senior information security analyst jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 senior information security analyst jobs Near Me

Senior Information Security Analyst

Senior Information Security Analyst

Senior IT Risk and Compliance Analyst

Senior Application Security & Compliance Analyst

Sr. Information Security GRC Analyst

Senior Cybersecurity Information Analyst

Physical Security Analyst, Senior