senior information security consultant

Arab Solutions

<div>
 
 Job Title:
 
 Senior IT Security Consultant / Officer
 
 
 
 Engagement Type:
 
 2-Month Contract
 
 
 
 Location:
 
 Qatar
 
 
 
 Position Overview
 
 
 
 We are seeking a highly experienced
 
 Senior IT Security Consultant / Officer
 
 for a short-term 2-month engagement to support cybersecurity governance, compliance alignment, and operational security enhancement within a governmental environment.
 
 
 The ideal candidate will bring deep expertise in cybersecurity operations, GRC implementation, regulatory compliance (NCSA standards), and hands-on technical security capabilities including SOC coordination, penetration testing, and incident response.
 
 
 
 Key Qualifications &amp; Experience
 
 
 
 <ul>
 <li>
 10&ndash;14 years of experience in Cybersecurity
 </li>
 <li>
 8&ndash;10 years of experience in Information Technology and Networks
 </li>
 <li>
 2&ndash;4 years of experience implementing NCSA standards within a governmental entity
 </li>
 <li>
 2&ndash;4 years of experience in Information Security / Cybersecurity operational roles
 </li>
 <li>
 3&ndash;5 years of experience in Governance, Risk &amp; Compliance (GRC)
 </li>
 <li>
 Proven experience with:
 </li>
 <ul>
 <li>
 ISO/IEC 27000
 </li>
 <li>
 ISO 22301
 </li>
 <li>
 Qatar Cybersecurity Framework
 </li>
 <li>
 National Information Assurance
 </li>
 </ul>
 <li>
 Expertise in:
 </li>
 <ul>
 <li>
 SOC monitoring &amp; analysis
 </li>
 <li>
 Penetration Testing
 </li>
 <li>
 Endpoint security analysis
 </li>
 <li>
 Incident response &amp; root cause analysis
 </li>
 </ul>
 <li>
 Fluency in English and Arabic
 </li>
 <li>
 Valid Driving License (Mandatory)
 
 </li>
 </ul>
 
 Required Certifications
 
 
 
 <ul>
 <li>
 Cisco Certified Network Associate
 </li>
 <li>
 ISC2 Cybersecurity Certification (e.g., CISSP, SSCP, etc.)
 </li>
 <li>
 VMware Data Center Virtualization
 </li>
 <li>
 Certified Ethical Hacker
 </li>
 <li>
 ISO 27001 Lead Auditor (Preferred)
 
 
 </li>
 </ul>
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Implement and manage Governance, Risk &amp; Compliance (GRC) processes to ensure regulatory alignment.
 </li>
 <li>
 Lead compliance alignment with ISO 27000 series, ISO 22301, QCSF, and NIA requirements.
 </li>
 <li>
 Conduct penetration testing to identify vulnerabilities across organizational systems.
 </li>
 <li>
 Lead cybersecurity incident response efforts, ensuring rapid containment and recovery.
 </li>
 <li>
 Perform root cause analysis of security incidents and implement corrective actions.
 </li>
 <li>
 Collaborate with SOC teams to enhance monitoring, detection, and incident management capabilities.
 </li>
 <li>
 Review, update, and strengthen cybersecurity policies, procedures, and standards.
 </li>
 <li>
 Support audit readiness, documentation, and regulatory reporting activities.
 
 
 </li>
 </ul>
 Skills: ncsa standards,ethical hacker,cybersecurity,grc,cissp,nia requirements,soc monitoring,analysis,iso 22301,sscp,qcsf
</div>

Senior IT Security Consultant / Officer

Deloitte

<div>Azure AI Senior Consultant 
 
Position Summary 
 
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. 
 
Recruiting for this role ends on 5/29/2026. 
 
Work you'll do 
 
As an Azure AI Senior Consultant, you will be at the forefront with our clients, supporting their AI security needs and helping them secure Artificial Intelligence and Machine Learning solutions on the Microsoft Azure platform. You will: 
<ul><li>
Lead security implementation of Azure AI Services (OpenAI Service, Machine Learning, Cognitive Services, AI Studio), ensuring protection from development to deployment.</li><li>
Design and implement security playbooks for AI models, addressing encryption, access control, data integrity, model scanning, and AI model governance.</li><li>
Develop and enforce security controls for Microsoft Copilot and GitHub Copilot, including data governance, access management, code scanning, and vulnerability detection.</li><li>
Build secure CI/CD pipelines for training, tuning, and deploying Machine Learning and Generative AI models, embedding security throughout the MLOps lifecycle.</li><li>
Manage data security through encryption, tokenization, anonymization, and access control for Azure data stores (e.g., Azure Storage, SQL Database, Cosmos DB, Data Lake).</li><li>
Automate security guardrails via Azure Policies, ARM/Bicep templates, and Terraform modules to ensure consistent security across Azure AI services.</li></ul> 

The team 
 
Our Enterprise Security offering embeds security in all aspects of digital transformation by securing a client's technical backbone while enabling secure digital transformation. Includes security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products. 
 
Qualifications 
 
Required: 
<ul><li>
4+ years of experience in leading technical consulting or architecting security solutions for Azure platforms</li><li>
2+ years of hands-on experience with Microsoft Copilot, GitHub Copilot, and Azure AI Services, including Azure Machine Learning and Azure OpenAI.</li><li>
2+ years of experience implementing and managing security controls in MLOps pipelines, securing AI models from development through deployment.</li><li>
Implementation of at least two cryptographic methods for AI or cloud environments within the last two years.</li><li>
2+ years of experience with AI Security Posture Management (AI-SPM) tools such as Microsoft Defender for Cloud or equivalent third-party tools.</li><li>
1+ years of experience in programming with Python or Java focusing on secure, scalable AI solutions.</li><li>
2+ years of experience in designing, implementing, and securing MLOps pipelines, encompassing model registry security, secure model deployment, and runtime security monitoring for AI models.</li><li>
Ability to travel 20-30%, on average, based on the work you do and the clients and industries/sectors you serve.</li><li>
Limited immigration sponsorship may be available.</li></ul> 

Preferred: 
<ul><li>
Bachelor's degree, accredited, in Computer Science, Cyber Security, Information Security, Engineering, or Information Technology.</li><li>
Microsoft role-based certifications (e.g., Azure AI Engineer Associate, Azure Security Engineer Associate), CCSP, CCSK, CISSP.</li><li>
Experience with Responsible AI Controls (fairness, safety, privacy, transparency).</li><li>
Prior experience developing secure pipelines (CI/CD) for the deployment of AI services in multi-cloud environments.</li><li>
Implementation history using OWASP, NIST, or MITRE ATLAS frameworks for AI/cloud environments.</li><li>
1+ years of experience with AI Firewall solutions such as Azure AI Content Safety/proxy configurations.</li></ul> 
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $118,700 - $218,600 
 
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance. 
 
Information for applicants with a need for accommodation: https://www2.deloitte.com/us/en/pages/careers/articles/join-deloitte-assistance-for-disabled-applicants.html</div>

Azure AI Security Senior Consultant

Proclink

<div>
 
 
 
 Senior Cloud Security Consultant
 
 
 
 
 
 Role Overview
 
 
 
 The Senior Cloud Security Specialist will serve as a lead security advisor within the CoE, supporting government organizations in their journey toward secure and compliant cloud adoption.
 
 
 
 
 
 With deep expertise in both Google Cloud Platform (GCP) and Microsoft Azure, the specialist acts as a trusted advisor, ensuring alignment with Kuwait&rsquo;s National Cybersecurity Strategy, data residency laws, and international best practices.
 
 
 
 
 
 This profile brings a cloud-provider-agnostic approach, focusing on high-level strategic and technical security advisory tailored to the unique regulatory and operational landscape of the Kuwaiti public sector.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Strategic advisory on secure cloud adoption for public sector entities transitioning to or operating in GCP and Azure environments.
 </li>
 <li>
 Evaluate and guide the design of secure cloud landing zones, cloud governance frameworks, and risk mitigation strategies.
 </li>
 <li>
 Assessment of cloud architectures for compliance with national benchmarks and best practices.
 </li>
 <li>
 Guidance on IAM, network segmentation, data protection, incident response, and threat modeling.
 </li>
 <li>
 Ensure alignment with data residency and sovereignty laws in Kuwait.
 </li>
 <li>
 Collaborate with cloud providers and government stakeholders to design secure multi-cloud and hybrid cloud architectures.
 </li>
 <li>
 Create and maintain security reference architectures, policies, and cloud security roadmaps.
 </li>
 <li>
 Contribute to the creation of cloud security standards and playbooks for public entities.
 </li>
 <li>
 Provide mentorship and knowledge transfer to internal security teams and stakeholders.
 </li>
 <li>
 Keep abreast of regional and global cybersecurity developments and cloud-native security capabilities.
 </li>
 </ul>
 
 
 Qualifications
 
 
 <ul>
 <li>
 Over 5 years of experience in cybersecurity, with strong specialization in cloud security.
 </li>
 <li>
 Hands-on expertise in GCP and Azure security tools, configurations, and compliance models.
 </li>
 <li>
 Deep knowledge of cloud security principles including Zero Trust, DevSecOps, and security automation
 </li>
 <li>
 Strong knowledge of global compliance standards including ISO 27001, NIST, and data privacy laws.
 </li>
 <li>
 Professional certifications preferred: Google Cloud Security Engineer, Azure Security Engineer Associate, Certificate of Cloud Security Knowledge (CCSK) or equivalent.
 </li>
 <li>
 Experience working in or advising public sector organizations or regulated industries.
 </li>
 <li>
 Familiarity with GCC and Kuwaiti government cybersecurity policies, particularly CITRA cloud frameworks and Kuwait National Cybersecurity Strategy.
 </li>
 <li>
 Excellent communication and stakeholder management skills in English.
 </li>
 </ul>
 
 
</div>

Senior Cloud Security Consultant

<div>
 
 Introduction
 
 
 
 The Digital Security Senior Managing Consultant will be responsible for assessing and developing customer relationship, security design and implementation of digital security services for our clients in KSA. This requires demonstrating thought leadership, delivery expertise and wide understanding of cloud native as well as hybrid/3rd party security controls.
 
 
 This role mainly focuses on how to assist IBM clients with the transformation in Cloud Security, Identity and Access Management (IAM) and in securing cloud workloads. These cover a range of service models deployed across private, public, hybrid and/or multi-cloud (off and on-prem) environments, and on major hyperscalers such as Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform.
 
 
 You&rsquo;ll engage with clients at early stage and work to understand their business needs from Cybersecurity perspective, apply industry knowledge, and leverage the appropriate business elements and Cybersecurity knowledge to address those needs. In addition, advise clients in understanding the desired future human and non-human Identity and Access Management (IAM) landscape in a hybrid cloud model and work collaboratively with them to develop a roadmap to achieve this goal and become a trusted advisor.
 
 
 
 Your Role And Responsibilities
 
 
 
 Responsible for managing all the activities related to delivering a digital security solution for the duration of their engagement, including but not limited to:
 
 
 <ul>
 <li>
 Consulting &ndash; comfortable in facilitating workshops, giving presentations, producing high quality deliverables and managing large delivery engagements.
 </li>
 <li>
 Leadership - supporting all aspects of the solution, consulting colleagues, the technical team, managing client requirements and linking those requirements to IBM's solution,
 </li>
 <li>
 Creating &amp; delivering the solution element of Cloud &amp; Data Security and IAM proposals, this could be administrative, operational or technical,
 </li>
 <li>
 Supporting the definition and creation of a solution that meets the client&rsquo;s requirements,
 </li>
 <li>
 Understanding the Digital Security Posture of the client, including their drivers and appetite, risk, legal, regulatory and compliance drivers for the client
 </li>
 <li>
 Providing visibility and understanding the functional and non-functional requirements of the solution
 </li>
 <li>
 Assisting client facing colleagues with responding to requests for proposals
 </li>
 <li>
 Detailed knowledge of architecting and delivery of cloud native delivery methods and blueprints, security and deployment models for IaaS, PaaS, and SaaS across one or more hyperscalers.
 </li>
 <li>
 Delivery should centre around adopting agile approach, leveraging automation across infrastructure security via IaC (Infrastructure as a Code) driven approach.
 </li>
 <li>
 Working with global and local teams, help organize project approaches and teams for client delivery.
 </li>
 <li>
 Help resolve program issues as they arise with senior leadership
 </li>
 <li>
 Good understanding of cloud architecture and industry standards are required
 </li>
 <li>
 Establish strong client relationships in key accounts to help progress the Security Services portfolio
 
 
 </li>
 </ul>
 
 Practice &amp; People
 
 
 
 <ul>
 <li>
 Contribute content and advice to the offering development process
 </li>
 <li>
 Help establish capability and skills models for the core domain, partner with wider team to develop expertise
 
 
 </li>
 </ul>
 
 Required Technical And Professional Expertise
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s Degree
 </li>
 <li>
 Cloud Certification in for at least:
 </li>
 <li>
 One hyperscaler, security specialist certifications preferred and
 </li>
 <li>
 one leading security certificate like CISA, CISSP, CISM, etc.
 </li>
 <li>
 Working experience of industry compliance and security standards including KSA NCA ECC, CSA CSM, PCI DSS, ISO 27001, NIST, CIS, etc.
 </li>
 <li>
 Working experience in conducting security architecture and configuration reviews leveraging Zero Trust Security principles to identify security gaps and develop high-quality assessment reports.
 </li>
 <li>
 Extensive knowledge in security solutions such as IAM, Data Protection and Cloud Security Solutions.
 </li>
 <li>
 Develop high-quality security projects design documentation, etc.
 </li>
 <li>
 Working experience on cloud service models (IaaS, PaaS, SaaS etc), infrastructure and technology
 </li>
 <li>
 Background knowledge to KSA NCA ECC and other regulations and standards related to the cloud (e.g. ISO/IEC 27018)
 </li>
 <li>
 Extensive track record in delivering large-scale, complex and multi-year security transformation programs / projects in various capacities (e.g. cloud security architect, senior delivery/technical lead)
 </li>
 <li>
 Experience working across diverse teams to facilitate solutions
 </li>
 <li>
 Readiness to travel 25-50%
 </li>
 <li>
 At least 5 years&rsquo; experience in working in international deployment roles and interlocking with client on hybrid/multi cloud security engagements
 </li>
 <li>
 At least 8 years&rsquo; experience in working with security consulting and/or architecture roles
 </li>
 <li>
 At least 10 years&rsquo; experience overall, across IT and Cyber Security.
 </li>
 <li>
 English: Fluent.
 
 
 </li>
 </ul>
 
 Preferred Technical And Professional Experience
 
 
 
 
 Hiring manager and Recruiter should collaborate to create the relevant verbiage.
 
</div>

Digital Security - Senior Managing Consultant

Sligo Software Solutions Inc.

<div>
 Greetings from
 
 Sligo Software Solutions, Inc.
 
 !!
 
 
 This is
 
 Abhijith
 
 from SLIGO. We have an urgent requirement for
 
 Senior Information Security Engineer
 
 position with our client.
 
 
 
 Title
 
 : Senior Information Security Engineer
 
 
 
 Location
 
 : Tallahassee, Florida
 
 
 
 Duration
 
 : 6 months 1 day(s)
 
 
 
 Client
 
 : Sligo Software Solutions - Florida Department of Corrections
 
 
 
 Job ID:
 
 SLG - 26 - 11830
 
 
 
 Respond by:
 
 03/20/26 2:00 PM
 
 
 Greetings from
 
 Sligo Software Solutions, Inc.
 
 !!
 
 
 
 SLIGO
 
 is a Software Development &amp; IT Consulting company. We have around 100+ IT associates working with our esteemed clients across several domains such as IT, Banking, Healthcare, and Government.
 
 
 We have an urgent requirement for Senior Information Security Engineer position with our client.
 
 
 
 Role:
 
 Senior Information Security Engineer
 
 
 
 Location:
 
 Tallahassee, Florida
 
 
 
 Duration:
 
 6 months 1 day(s)
 
 
 
 Job ID:
 
 SLG - 26 - 11830
 
 
 
 Client:
 
 Sligo Software Solutions - Florida Department of Corrections
 
 
 
 Mandatory Required Qualifications
 
 
 
 A bachelor&rsquo;s or master&rsquo;s degree from an accredited college or university in Computer Science, Information Systems, or other related field, or four (4) years of equivalent work experience is required. Relevant experience may be substituted for education on a year-for-year basis when applicable.
 
 
 
 The Department requires the following experience, skills, and knowledge for this position:
 
 
 
 <ul>
 <li>
 Five (5) years or more of server or network administration experience.
 </li>
 <li>
 Three (3) years or more of information security administration experience in an enterprise environment with 1,000 or more users.
 </li>
 <li>
 Two (2) years or more experience managing technical implementations.
 </li>
 <li>
 Three (3) years or more of SIEM experience.
 </li>
 <li>
 Three (3) years or more of vulnerability management experience.
 </li>
 <li>
 Knowledge of security issues, techniques, and implications across all existing computer platforms. and
 </li>
 <li>
 Experience maintaining and supporting 3rd party antivirus applications.
 
 
 </li>
 </ul>
 
 Preferred Qualifications
 
 
 
 <ul>
 <li>
 Experience working with IDS/IPS systems.
 </li>
 <li>
 Experience using Office 365 Data Loss Prevention (DLP).
 </li>
 <li>
 Preparing status reports and providing management briefings.
 </li>
 <li>
 Knowledge of IT standards in a criminal justice environment.
 </li>
 <li>
 Experience with Microsoft security technologies such as Azure Security Center, Microsoft Defender, and Active Directory; and
 </li>
 <li>
 Familiarity with law enforcement security standards, specifically CJIS, and other relevant state of Florida regulations.
 
 
 </li>
 </ul>
 
 Important Notes:
 
 
 Local candidates are highly preferred. Candidate with prior state exp will be a great pick for this role but not mandatory.
 
</div>

Senior Information Security Engineer

New Venture Research Corporation (NVRC)

<div><div><div><div><div><div><div><div><div><div>Region:</div><div> Honolulu, HI</div></div> 
<div><div>Position:</div><div> Senior Information Security Specialist</div></div> 
<div><div>Posted:</div><div> 03/18/2026</div></div></div></div> 
<div></div>
Job Title: Senior Information Security Specialist
FLSA Classification: Non - Exempt
Employee Status: Part-Time
Location: Honolulu, HI
Salary Range: $68/hr - $77/hr 

Summary
New Venture Research Corporation (NVRC) is a leading provider of innovative technology solutions supporting critical defense programs.
The Senior Information Security Specialist is an advanced technical position providing critical support for Secure Messaging and related operations. The role serves as a senior advisor and operational lead, responsible for ensuring the integrity of command and control (C2) telecommunications through rigorous adherence to National Security Agency (NSA) and Department of Defense (DoD) cryptographic standards. The primary focus involves the management of cryptographic keying material (KEYMAT) as a Local Element (LE) Manager and the administration of high-visibility organizational messaging architectures across SIPR and NIPR networks. The incumbent provides high-level technical continuity, mentorship to junior staff, and expert troubleshooting for complex secure communication systems. 

Key Responsibilities
<ul><li>Serve as an Alternate Local Element (LE) Manager; conduct and witness Two-Person Integrity (TPI) evolutions and sensitive material inventories.</li>
<li>Assume full Local Element Manager responsibilities during periods of primary manager absence to ensure uninterrupted mission support.</li>
<li>Maintain and monitor C2OIX accounts with ORG/ADMIN/Releasor privileges for multiple command entities (including Fleet, Joint Task Force, and Task Force levels).</li>
<li>Oversee I-Gate Messaging Manager accounts and ensure the continued stability of LDMS-to-Outlook configurations.</li>
<li>Direct the localized destruction and residual disposal of Secure Telephone Equipment (STE), ensuring proper documentation and disposal of residue for a high-volume inventory.</li>
<li>Monitor all incoming official message traffic and provide technical assistance for the transition and monitoring of AIG/CAD/TF management to regional teams.</li>
<li>Provide senior-level background knowledge and guidance to N6/N63 staff regarding secure communication protocols and historical system configurations.</li></ul> 

Required Minimum Qualifications
<ul><li>Mastery of Key Management Infrastructure (KMI), TPI requirements, and secure facility access protocols.</li>
<li>Demonstrated experience with DoW messaging platforms, specifically C2OIX, I-Gate, and LDMS.</li>
<li>Ability to perform the physical destruction of telecommunications hardware and manage the logistics of secure disposal.</li></ul> 

Required Education, Certifications, and Length of Experience
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, or related field is preferred. Specialized experience may be used in lieu of degree.
</li><li>15+ years of experience in related role</li>
<li>NAVEDTRA 43462-2A 301 Qualification</li></ul> 

Travel Requirements
Travel up to 10% may be required. 

U.S. Citizenship Requirements
Due to our contractual requirements as U.S. federal government contractor, candidates for this position must be U.S. Citizens. 

Clearance Type Required
Candidates must be able to maintain an active Top Secret/SCI security clearance. 

NVRC is an equal opportunity employer and a VEVRAA contractor dedicated to merit- and value-based employment decisions. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.
We are committed to providing reasonable accommodations for qualified individuals with disabilities per the guidelines set forth by the ADA and the ADAAA. If you require an accommodation to participate in the application or interview process, please contact Human Resources by phone at 256-583-3471.</div></div></div></div></div></div>

Senior Information Security Specialist

Stock Yards Bank & Trust

Stock Yards Bancorp, Inc. (NASDAQ: SYBT), parent company of Stock Yards Bank & Trust Company, with offices in Louisville, Central, Eastern and Northern Kentucky, as well as the Indianapolis, Indiana and Cincinnati, Ohio metropolitan markets.
 
Job Title: Senior Information Security Analyst
 Department: Information Security
 Reports To: Information Security Operations Manager
 FLSA Status: Exempt
 Hours of Operation: Monday – Friday 8:00 AM – 5:00 PM – (Unless otherwise approved)
 45+ hours per week, On-call after hours
 
Organizational Duties and Responsibilities: 
1. Supports the mission, vision, and philosophy of the Bank. Complies willingly with all organizational policies and procedures.
 2. Supports all functions that maintain compliance with regulatory agencies.
 3. Complete relevant annual training upon approval by the Director of Information Security.
 
General Job Summary: 
The Senior Information Security Analyst is responsible for safeguarding the organization's information assets by implementing and managing advanced security measures. The role encompasses vulnerability management, patch management oversight, email security, data loss prevention (DLP), anti-virus and endpoint detection and response (EDR) systems, security monitoring, incident response, and comprehensive reporting. The incumbent is expected to ensure regulatory compliance, mitigate security risks, and enhance the organization's overall security posture through proactive measures and collaboration with cross-functional teams.
 
Essential Duties and Responsibilities:Vulnerability Management: 
<ul>
<li>Conduct regular vulnerability assessments and penetration testing across systems and networks.</li>
<li>Analyze and prioritize vulnerabilities; develop and implement remediation plans.</li>
<li>Collaborate with IT and development teams to address security weaknesses.</li>
<li>Stay current with emerging vulnerabilities and threat landscapes.</li>
</ul>
Patch Management Oversight: 
<ul>
<li>Lead and manage the patch management process for software and hardware components.</li>
<li>Coordinate with system administrators and vendors to ensure timely application of patches.</li>
<li>Develop and enforce patch management policies and procedures.</li>
<li>Monitor patch deployment effectiveness and address implementation issues.</li>
</ul>
Email Security: 
<ul>
<li>Implement and manage email security solutions to protect against phishing, spam, and malware.</li>
<li>Monitor email systems for security threats and respond promptly to incidents.</li>
<li>Develop policies and train staff on secure email practices.</li>
</ul>
Data Loss Prevention (DLP): 
<ul>
<li>Deploy and maintain DLP solutions to prevent unauthorized access or disclosure of sensitive data.</li>
<li>Define and enforce DLP policies; monitor compliance.</li>
<li>Investigate and address DLP alerts and incidents.</li>
</ul>
Anti-Virus/Endpoint Detection and Response (EDR): 
<ul>
<li>Manage anti-virus and EDR systems across all endpoints to detect and mitigate security threats.</li>
<li>Ensure endpoints are protected with up-to-date security software and definitions.</li>
<li>Respond to security alerts from anti-virus and EDR systems; coordinate remediation efforts.</li>
</ul>
Security Monitoring and Incident Response: 
<ul>
<li>Monitor security systems, including SIEM tools and intrusion detection systems.</li>
<li>Analyze security logs to identify potential threats and anomalies.</li>
<li>Perform privilege access management systems, enforcing least privilege principles and monitoring access controls.</li>
<li>Participate in incident response activities, including investigation, containment, and recovery.</li>
<li>Document incidents and implement improvements to prevent recurrence.</li>
</ul>
Reporting: 
<ul>
<li>Prepare detailed security reports for management and stakeholders.</li>
<li>Develop metrics and dashboards to measure the effectiveness of security initiatives.</li>
<li>Communicate security issues and recommendations to technical and non-technical audiences.</li>
</ul>
Compliance and Policy Enforcement: 
<ul>
<li>Ensure adherence to all relevant security policies, standards, and regulatory requirements.</li>
<li>Assist in developing, reviewing, and updating information security policies and procedures.</li>
<li>Support internal and external audits; address compliance gaps.</li>
</ul>
Security Awareness and Training: 
<ul>
<li>Contribute to security awareness programs; develop training materials and deliver presentations.</li>
<li>Educate employees on best practices and emerging threats.</li>
</ul>
Additional Duties: 
<ul>
<li>Evaluate and recommend security technologies and solutions.</li>
<li>Stay informed about cybersecurity trends and best practices.</li>
<li>Mentor junior team members and provide guidance on security matters.</li>
</ul>
Other Functions: 
<ul>
<li>Complete information security projects and implement new tools.</li>
<li>Research new data security trends, keep up-to-date with current events and new threats in data security, and participate in relevant training courses.</li>
<li>Make recommendations to the Director of Information Security to improve network and mainframe security.</li>
<li>Expertise in performing Information Security Analyst(s) or Information Security Operations Manager functions where redundancy is necessary.</li>
<li>Provide assistance to Internal Audit and regulators with IT-related requests.</li>
<li>Complete other job-related duties, and/or projects, as assigned.</li>
</ul>
Working Conditions: 
Office environment with some travel to enterprise locations, company-sponsored events, training, or as directed.
 
Minimum Job Requirements: 
Education: Bachelor's degree in Information Security, Cybersecurity, Computer Science, or a related field. Advanced degrees or relevant certifications are advantageous.
 
Experience: 
<ul>
<li>Minimum of five (5) years of experience in information security with a focus on vulnerability management, patch management, email security, DLP, and endpoint security.</li>
<li>Proven experience with security tools such as vulnerability scanners, SIEM platforms, EDR solutions, and email security systems.</li>
</ul>
Comprehensive Skills: 
Employees are expected to represent the Bank in a professional manner to customers and outside contacts.
 Employees must have excellent interpersonal communication skills, consisting of the ability to write and speak effectively to others. Employees must be a productive team player, with the ability to learn, apply training and comprehend policies and procedures. Employees should also be flexible to changing working situations and able to meet deadlines as they arise.
 
Specific Skills: 
<ul>
<li>Strong understanding of network protocols, operating systems, and database security.</li>
<li>Familiarity with regulatory compliance requirements (e.g., FFIEC, GLBA, PCI DSS).</li>
<li>Proficiency in scripting or programming languages for automation purposes.</li>
<li>Excellent analytical, problem-solving, and organizational skills.</li>
<li>Exceptional communication skills, both verbal and written.</li>
</ul>
Specialized: 
Familiar with Cybersecurity related systems
 
Licenses: 
Professional certifications such as CISSP, SSCP, GIAC, or other related certification(s), or willingness to obtain within one year.
 
Physical requirements: 
The physical demands described here are representative of those that must be met by an employee in order to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
 <ul>
<li>Primarily sedentary work performed in an office environment</li>
<li>Ability to sit for extended periods of time while working at a computer</li>
<li>Frequent use of hands and fingers to operate a computer, keyboard, mouse, and other office equipment</li>
<li>Ability to speak clearly and hear well enough to communicate with clients, team members, and vendors via phone, video, and in person</li>
<li>Visual acuity sufficient to read computer screens, printed documents, and financial data</li>
<li>Occasional standing, walking, bending, or reaching</li>
<li>Ability to lift and carry up to 10–15 pounds occasionally (e.g., files, office supplies)</li>
<li>Ability to lift and carry up to 10–15 pounds occasionally (e.g., files, office supplies)</li>
</ul>
Employees must also have the ability and means to travel as necessary for the purpose of attending training, meetings, and other various business functions.
 
Benefits: 
<ul>
<li>401(K) with a company match of up to 6%</li>
<li>ESOP employer match</li>
<li>Medical insurance</li>
<li>Dental insurance</li>
<li>Vision insurance</li>
<li>Cancer/Disease insurance</li>
<li>Accident insurance</li>
<li>Flexible Spending Accounts</li>
<li>Flexible Savings Accounts</li>
<li>Health Savings Accounts</li>
<li>Bank paid Life/AD&D insurance</li>
<li>Voluntary Life/AD&D insurance</li>
<li>Bank paid Short-Term and Long-Term Disability insurance</li>
<li>Employee Stock Purchase Plan</li>
<li>Employee Assistance Program</li>
</ul>

Senior Information Security Analyst

Search 10000+ Senior information security consultant jobs near you this March. New roles added regularly across leading industries. Apply today.