senior it security analyst

ManpowerGroup

<div><div><b>IT Security Analyst - Contract</b> <b>-</b> <b>0034062</b></div><div>
US-WI-Milwaukee</div><div><b>
Worker Location</b><b>:</b> Hybrid</div><div><b>
Description</b><div></div><p><br>
The SOC Analyst is responsible for monitoring, detecting, and responding to cybersecurity threats within the organization&rsquo;s IT environment. This role serves as the first line of defense in protecting enterprise systems, networks, and data from malicious activity. The analyst will work closely with senior SOC team members to triage alerts, investigate incidents, and escalate issues as needed.</p><div><br>
Making an Impact<br>
<ul><li>Monitor Security Alerts: Continuously review alerts from SIEM tools, firewalls, IDS/IPS, and endpoint protection systems.</li><li>Incident Triage: Analyze and prioritize security events based on severity and potential impact.</li><li>Initial Investigation: Perform basic forensic analysis and gather evidence for suspected security incidents.</li><li>Escalation: Document findings and escalate complex incidents to senior analysts or incident response teams.</li><li>Reporting: Maintain accurate logs and prepare daily/weekly reports on SOC activities.</li><li>Compliance: Ensure adherence to organizational security policies and regulatory requirements.</li></ul></div><div>
Your Typical Day<br>
<ul><li>Work independently or as part of a team</li><li>Participate in compliance reviews / audit evidence gathering</li><li>Quickly self-educate oneself on emerging technologies</li><li>Review security events for threats</li><li>Ensure security vulnerabilities are remediated</li></ul>
Other accountabilities as assigned</div></div><p></p><div><b><br>
Qualifications</b><div></div><div><br>
Required<br>
<ul><li>Minimum of CompTIA A+ certification, prefer CompTIA Security+</li><li>Must prove US citizenship to comply with client requirement</li></ul></div><p></p><p><br>
ManpowerGroup is proud to be an equal opportunity affirmative action workplace. We celebrate diversity and are committed to providing an inclusive environment for all employees. Qualified applicants will receive consideration for employment without regard to race, religion, creed, color, national origin, citizenship, marital status, pregnancy (including childbirth, lactation and related medical conditions), age, gender, gender identity or expression, sexual orientation, protected veteran status, political ideology, ancestry, the presence of any physical, sensory, or mental disabilities, or other legally protected status.</p><p>
A strong commitment is made by each employee and is necessary to ensure equal employment opportunity for all. ManpowerGroup is an inclusive workplace that will recruit, hire, train, and promote persons of all job titles, and ensure all other personnel actions are administered without regard to non-merit-based characteristics of individuals.</p><p>
Reasonable accommodation during the interview process can be provided. Contact talentacquisition@manpowergroup.com for assistance.</p></div><p></p><div><b><br>
Travel</b><b>:</b> No</div><div><b>
Organization</b><b>:</b> ManpowerGroup</div><div><b>
Job</b><b>:</b> Contractor</div></div>

IT Security Analyst - Contract - 0034062

Central New Mexico Community College

<div><div>Compensation:</div>
$78,708 - $100,402<div>
Compensation Type:</div>
Salary<div>
Employment Type:</div>
Regular<div>
Grade:</div>
E10<div>
Position Summary</div>
The Senior Information Security Analyst is tasked with designing, implementing, and maintaining cybersecurity solutions to safeguard our organization's systems, networks, and data from cyber threats, thereby enhancing our security posture. This position provides expert-level technical security risk monitoring, analysis, and incident investigations to protect Central New Mexico Community College&rsquo;s (CNM) sensitive information and infrastructure from cyber threats and attacks. The Cybersecurity Engineer collaborates closely with cross-functional teams and leadership to formalize processes and methodologies, conduct risk assessments, and ensure compliance with regulatory requirements. The Senior Information Security Analyst raises security awareness across the CNM community through ongoing training and education initiatives, engaging staff, faculty, vendors, contractors, students, and the public via various communication channels and leads team efforts as assigned.<div>
Duties &amp; Responsibilities</div><ul><li><div>
Leads operational tasks, incident response, and troubleshooting within the Office of Information Security.</div></li><li><div>
Provides expert-level guidance, training, and leadership to Information Security Office team members.</div></li><li><div>
Utilizes security tools and technologies including firewalls, IDS/IPS, SIEM, antivirus solutions, and encryption.</div></li><li><div>
Monitors security systems and promptly responds to security incidents, including incident triage, containment, eradication, and recovery efforts.</div></li><li><div>
Designs, implements, and maintains cybersecurity solutions such as firewalls, IDS/IPS, SIEM, endpoint protection, access management, and encryption technologies.</div></li><li><div>
Analyzes security logs, event data, and network traffic to identify and investigate potential security incidents and role discovery.</div></li><li><div>
Conducts security risk assessments and audits to identify vulnerabilities and recommend remediation measures.</div></li><li><div>
Performs security assessments of third-party vendors and service providers to ensure compliance with security requirements.</div></li><li><div>
Participates in incident response exercises, tabletop simulations, and security awareness campaigns.</div></li><li><div>
Develops and enforces security policies, procedures, and standards to ensure compliance with regulations and best practices.</div></li><li><div>
Collaborates with IT teams to integrate security controls into software and infrastructure projects.</div></li><li><div>
Engages with business users to understand application data needs and prioritize requirements.</div></li><li><div>
Stays updated with cybersecurity threats, vulnerabilities, and industry trends to mitigate risks proactively.</div></li><li><div>
Provides security awareness training to the CNM user community on data protection best practices.</div></li><li><div>
Participates in the Emergency on-Call rotation for the department and the team.</div></li><li><div>
Provides audit responses, oversees information security administrative and technical controls, and performs forensic analysis of security incidents.</div></li><li><div>
Monitors critical infrastructure and information security threats, providing first response services and delegating remediation tasks.</div></li><li><div>
Maintains technical currency in the evolving threat landscape and contributes to information security incident response teams.</div></li><li><div>
Enforces policies and procedures as appropriate.</div></li><li><div>
Performs other related duties as assigned.</div></li></ul><div>
Minimum Qualifications:</div><ul><li>
Bachelor's degree in computer science, information technology, cybersecurity, or related field</li><li>
AND</li><li>
Five (5) years of current work experience in cybersecurity engineering or related field</li><li>
Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Information Security Manager (CISM), or GIAC Security Expert (GSE) preferred</li><li>
Advanced knowledge of network security principles, firewalls, and intrusion detection/prevention systems (IDS/IPS)</li><li>
Extensive experience with common vulnerability assessment tools (e.g., Nessus, Nmap)</li><li>
Strong quantitative and qualitative analytical abilities</li><li>
Excellent communication, collaboration, and teamwork abilities</li><li>
A combination of education and experience may be substituted for requirements of the position</li></ul><div>
Preferences:</div><ul><li>
5+ years cybersecurity experience</li><li>
CISSP/CISM/GIAC preferred</li><li>
SIEM, incident response, vulnerability management</li><li>
Experience with NIST/CIS frameworks</li><li>
Higher ed/public sector preferred</li><li>
Best consideration date: 4/2/2026</li></ul><div>
EEO STATEMENT:</div><div>
As an EEO employer, Central New Mexico Community College will not discriminate in our employment practices based on an applicant&rsquo;s race, ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, serious medical condition or status as a protected veteran or spousal affiliation. Central New Mexico Community College hires only U.S. citizens and individuals lawfully authorized to work in the U.S.</div></div>

Senior Information Security Analyst

Guilford Technical Community College

<div><div>At Guilford Technical Community College (GTCC), we are dedicated to transforming lives through education and creating a lasting impact on our community. We invite passionate and innovative individuals to join our mission-driven team, where you can enjoy a fulfilling work-life balance and competitive benefits, including a robust pension plan. Our beautiful, well-maintained campuses provide an inspiring environment for both teaching and learning, within an atmosphere of collaboration and excellence. At GTCC, you&rsquo;ll be part of a supportive, dynamic, and inclusive culture committed to delivering exceptional results, making it a truly amazing place to work and thrive.</div><div>
<br>
The ITS Security Administrator/Analyst is responsible for assessing information risk and facilitates remediation of identified vulnerabilities and security events/incidents with the GTCC information, systems and applications. Reports on findings and recommendations for corrective, compensating, detective and preventive actions. Performs vulnerability assessments as assigned utilizing IT security tools and methodologies. Performs assessments of the IT security/risk posture within the IT network, systems and software applications, in addition to assessments within the Vendor Management Program. Identifies opportunities to reduce risk and documents remediation options regarding acceptance or mitigation of risk scenarios. Facilitates and monitors performance of risk remediation tasks, changes related to risk mitigation &amp; reports on findings. Maintains oversight of IT and vendors regarding the security maintenance of their systems and applications. Provides weekly project status reports, including outstanding issues. The IT Security Administrator/Analyst assists in all IT audits, IT risk assessments and regulatory compliance. Performs administration and maintenance of information security systems, make recommendations to implement new information security systems, policies and controls.</div>
Min Salary $56,391.86 Mid Salary We offer a competitive salary package that will be determined based on the candidate's experience level and qualifications related to the job. Compensation will be commensurate with your level of experience. Duties/Functions Difficult Challenges Contacts Education Required
<ul><li>AAS degree in information technology or a related field from a regionally accredited post-secondary institution (or equivalent experience, 5 years of information technology with 3 years of information security).</li><br>
<p></p>
</ul><div>
<br>
<b>Certifications:</b>
</div><ul><li>Individual must be enrolled in or complete an industry-level certification (Security+, CISA, CISM, CISSP, CSSLP) within 6 months of hire date</li></ul>
Education Preferred Experience Required
<ul><li>Minimum of 5 years of Information Technology experience</li>
<li>Minimum of 1 year of Information Security experience</li>
<li>Intermediate use of security tools for forensics, penetration testing and monitoring</li>
</ul>Experience Preferred
<ul><li>8 years of Information Technology experience</li>
<li>3 years of Information Security experience</li>
<li>Experience in an higher educational environment</li>
<li>Experience with Ellucian Colleague ERP security class management</li>
<li>Greater than one year experience in an IT environment with exposure to information security.</li>
</ul>KSA Required
<ul><li>Knowledgeable of Risk Management</li>
<li>Knowledge of federal and NC state regulations relating to privacy and security of information</li>
<li>Ability to conduct security training for staff and end users</li>
<li>Knowledge of security related standards including PCI, NC-IIPS, NIST.</li>
<li>Knowledgeable of current information technology security trends</li>
<li>Knowledge of security related management systems SCCM, O365 Security suite, SIEM.</li>
<li>Strong organizational, communication and interpersonal skills.</li>
<li>Knowledge of network fundamentals OSI model.</li>
</ul>KSA Preferred
<ul><li>Knowledge or experience conducting IT compliance assessments (GLBA, PCI, etc.)</li>
<li>Knowledge of security related tools including SNORT, Tripwire, Nessus, AD, Trend and SCCM, O365, Microsoft Purview, Microsoft Power Automate</li>
<li>Working knowledge of network topologies, servers, network architecture, desktop software, and phone and virtualization solutions.</li>
<li>Knowledge of technical infrastructure, networks, databases and systems in relation to IT Security and IT Risk.</li>
<li>Knowledge or experience with IPS/IDS and SIEM technologies.</li>
<li>Prior experience working within an academic organization preferred.</li>
<li>Ability to research information and document work processes, procedural guidelines as needed to support IT requirements</li>
<li>Ability to assist and author policies and procedural for the department</li>
<li>Proven ability to engage with Senior Management and regulators.</li>
</ul>Department/Job Specific Requirements
<div>The following (compliance) training is required and must be completed within the first 30 days of hire with annual refresher training thereafter:</div><ul>
<li>Ethics</li>
<li>Safety/Shooter on Campus</li>
<li>Personal Information Protection Training (PIP)</li>
<li>Anti-Discrimination/Harassment &amp; Title IX</li>
<li>Other training may be required as determined applicable.</li>
</ul>Physical Demands Posting Type Staff
<div><div>Posting Detail Information
</div><p></p><div><div><div><div><b>Posting Number</b></div> <div>2026-027-REG</div>
</div><br>
<div><div><b>Open Date</b></div> <div>03/19/2026</div>
</div><br>
<div><div><b>Close Date</b></div> <div>04/19/2026</div>
</div><br>
<div><div><b>Open Until Filled</b></div> <div>No</div>
</div><br>
<div><div><b>Special Instructions to Applicants</b></div></div></div></div></div></div><div></div>

Administrator/Analyst, ITS Security

Morningstar

<p></p><div><p><b>The Group:</b>
</p><p>The Information Security department is responsible for setting enterprise security policies and standards that are designed to protect the confidentiality, integrity and availability of Morningstar information. The security team offers guidance and technical expertise in areas like application security, policies and procedures, disaster recovery and compliance/regulation. We analyze emerging security threats and conduct risk and vulnerability assessments to ensure that our information remains secure.</p><p></p><p><b><br>
The Role:</b>
</p><p>The Information Security Team is looking for a Senior Analyst Third-Party Vendor Risk Analyst to join the IT Compliance Team. The Senior Third-Party Vendor Risk Analyst will help shape the Information Security Team&rsquo;s third party vendor risk management program. This individual will serve as a subject matter expert for third party vendor risk management, perform vendor risk assessments, propose updates to expand the program&rsquo;s capabilities, increase participation in the program and drive process improvements. This position is based in either our Chicago or Toronto office.</p><p></p><p><b><br>
Responsibilities:</b></p><ul><li><p>
Partner with the business to execute vendor risk assessments</p></li><li><p>
Monitor internal SLAs to ensure we provide timely service to our internal stakeholders
</p></li><li><p>Serve as a subject matter expert for security vendor risk management</p></li><li><p>
Collaborate with the procurement department and other internal stakeholders to improve and expand the vendor risk management program</p></li><li><p>
Review third party security documents (SOC2, security policies, data flow diagrams, etc.)</p></li><li><p>
Perform contract reviews of proposed changes to security requirements in our third party contracts</p></li><li><p>
Liaise with third party vendors as required</p></li></ul><p><br>
</p><p><b>Requirements:</b></p><ul><li><p>
A bachelor&rsquo;s degree and 5+ years&rsquo; experience include 3+ in a vendor risk related role</p></li><li><p>
Experience serving as the subject matter expert for security vendor due diligence
</p></li><li><p>Experience performing contract review of security terms</p></li><li><p>
Familiarity with common compliance standards (SOX, SOC2, PCI-DSS, GDPR etc.)</p></li><li><p>
Familiarity with security frameworks (ISO 27001, NIST, etc.) and general security concepts</p></li><li><p>
Strong organizational skills and the ability to multitask and switch priorities with short notice</p></li><li><p>
Strong business analysis, research and analytical skills</p></li><li><p>
Excellent communication skills</p></li></ul><p></p><p><b>
Compensation and Benefits</b></p><p>
At Morningstar we believe people are at their best when they are at their healthiest. That&rsquo;s why we champion your wellness through a wide range of programs that support all stages of your personal and professional life. Here are some examples of the offerings we provide:</p><ul><li><p>
Financial Health</p><ul><li><p>
100% 401k match up to 6% of salary</p></li></ul><ul><li><p>
Stock Ownership Potential</p></li><li><p>
Company provided life insurance - 1x salary + commission</p></li></ul></li><li><p>
Physical Health</p><ul><li><p>
Comprehensive health benefits (medical/dental/vision) including potential premium discounts and company-provided HSA contributions (up to $500-$2,000 annually) for specific plans and coverages</p></li><li><p>
Additional medical Wellness Incentives - up to $300-$600 annual</p></li><li><p>
Company-provided long- and short-term disability insurance</p></li></ul></li><li><p>
Emotional Health</p><ul><li><p>
Trust-Based Time Off</p></li><li><p>
6-week Paid Sabbatical Program</p></li><li><p>
6-Week Paid Family Caregiving Leave</p></li><li><p>
Competitive 8-24 Week Paid Parental Leave</p></li><li><p>
Adoption Assistance</p></li><li><p>
Leadership Coaching &amp; Formal Mentorship Opportunities</p></li><li><p>
Annual Flex Stipend - $1000 annually to cover personal education &amp; well-being expenses
</p></li><li><p>Tuition Reimbursement</p></li></ul></li><li><p>
Social Health</p><ul><li><p>
Charitable Matching Gifts program</p></li><li><p>
Dollars for Doers volunteer program</p></li><li><p>
Paid volunteering days</p></li><li><p>
15+ Employee Resource &amp; Affinity Groups</p></li></ul></li></ul><p></p><p><b>
Total Cash Compensation Range</b></p>
$114,100.00 - 193,975.00 USD Annual<p><b>
Inclusive of annual base salary and target incentive</b></p><p>
Morningstar's hybrid work environment gives you the opportunity to collaborate in-person each week as we've found that we're at our best when we're purposely together on a regular basis. In most of our locations, our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you'll have tools and resources to engage meaningfully with your global colleagues.</p><p></p>
001_MstarInc Morningstar Inc. Legal Entity</div>

Senior IT Risk and Compliance Analyst

Bit Development Pvt Ltd

<p><b>Job Title: SOC Analyst &ndash; IT Infrastructure &amp; Network Security</b></p><p>We are seeking a highly motivated SOC Analyst with 1&ndash;3 years of hands-on experience in Security Operations Center (SOC) functions, IT infrastructure security, and network security. The ideal candidate will have strong experience with SIEM platforms, security event analysis, threat detection, and incident response. This role requires close collaboration with IT and Information Security teams to protect the organization&rsquo;s critical assets.</p><p><b>Key Responsibilities</b></p><p><b>1. SIEM Implementation &amp; Continuous Monitoring</b></p><ul><li>Assist in the implementation, configuration, tuning, and optimization of SIEM solutions to improve security event collection, correlation, and visibility.</li><li>Continuously monitor SIEM dashboards and alerts to identify suspicious activities and potential threats.</li></ul><p><b>2. IT Infrastructure &amp; Network Security</b></p><ul><li>Support security initiatives across server infrastructure, applications, and network environments.</li><li>Collaborate with IT teams to assess and strengthen security controls across Data Centers, Cloud (Azure), O365, and On-Premises environments.</li></ul><p><b>3. Security Logging &amp; Monitoring</b></p><ul><li>Develop a strong understanding of logging mechanisms, log sources, and monitoring techniques.</li><li>Ensure accurate log collection, normalization, and retention across all supported environments for effective threat detection and forensic analysis.</li></ul><p><b>4. Security Tools Management</b></p><ul><li>Assist in the administration and maintenance of security tools, including:</li><li>SIEM platforms</li><li>IDS/IPS</li><li>Firewalls</li><li>Endpoint protection solutions</li><li>Vulnerability scanning tools</li></ul><p><b>5. Alert Management &amp; Incident Response Support</b></p><ul><li>Monitor and analyze security alerts from multiple platforms, performing initial triage and prioritization.</li><li>Escalate confirmed or suspected security incidents according to defined procedures.</li><li>Support incident investigations, containment, and remediation efforts in collaboration with Information Security and IT teams.</li><li>Provide timely updates and documentation during incident resolution.</li></ul><p><b>6. Threat Detection &amp; Proactive Security Activities</b></p><ul><li>Participate in proactive threat-hunting activities using available threat intelligence sources.</li><li>Investigate indicators of compromise (IOCs), emerging threats, and potential vulnerabilities within the environment.</li></ul><p><b>Required Qualifications</b></p><ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or a related field.</li><li>2&ndash;4 years of experience working as a SOC Analyst with a focus on IT infrastructure and network security.</li><li>Hands-on experience with SIEM platforms, preferably Wazuh.</li><li>Familiarity with CyberArk, Zabbix, and other SOC-related tools.</li><li>Strong understanding of logging, event correlation, and monitoring across hybrid environments.</li><li>Exposure to administration and monitoring of security tools such as IDS/IPS, firewalls, antivirus, and EDR solutions.</li></ul><p><b>The Ideal Candidate Will Be Able To</b></p><ul><li>Investigate, analyze, and respond to security incidents effectively.</li><li>Perform detailed log analysis and threat detection across multiple security platforms.</li><li>Triage, escalate, and document security incidents in accordance with established procedures.</li><li>Support incident response, recovery, and remediation activities.</li><li>Research and analyze threat intelligence, adversary TTPs using the MITRE ATT&amp;CK framework, and emerging malware trends.</li><li>Track, analyze, and report on newly disclosed CVEs and exploit activity.</li><li>Conduct risk assessments and maintain accurate risk registers.</li></ul><p>Work Location: In person</p>

SOC Analyst – IT Infrastructure & Network Security

Stock Yards Bank & Trust

<b>Stock Yards Bancorp, Inc. (NASDAQ:</b> SYBT), parent company of Stock Yards Bank & Trust Company, with offices in Louisville, Central, Eastern and Northern Kentucky, as well as the Indianapolis, Indiana and Cincinnati, Ohio metropolitan markets.
<br><br>
<b>Job Title:</b> Senior Information Security Analyst
<br><b>Department:</b> Information Security
<br><b>Reports To:</b> Information Security Operations Manager
<br><b>FLSA Status:</b> Exempt
<br><b>Hours of Operation:</b> Monday – Friday 8:00 AM – 5:00 PM – (Unless otherwise approved)
<br>45+ hours per week, On-call after hours
<br><br>
<b>Organizational Duties and Responsibilities:</b><br>
1. Supports the mission, vision, and philosophy of the Bank. Complies willingly with all organizational policies and procedures.
<br>2. Supports all functions that maintain compliance with regulatory agencies.
<br>3. Complete relevant annual training upon approval by the Director of Information Security.
<br><br>
<b>General Job Summary:</b><br>
The Senior Information Security Analyst is responsible for safeguarding the organization's information assets by implementing and managing advanced security measures. The role encompasses vulnerability management, patch management oversight, email security, data loss prevention (DLP), anti-virus and endpoint detection and response (EDR) systems, security monitoring, incident response, and comprehensive reporting. The incumbent is expected to ensure regulatory compliance, mitigate security risks, and enhance the organization's overall security posture through proactive measures and collaboration with cross-functional teams.
<br><br>
<b>Essential Duties and Responsibilities:</b><b>Vulnerability Management:</b><br>
<ul>
<li>Conduct regular vulnerability assessments and penetration testing across systems and networks.</li>
<li>Analyze and prioritize vulnerabilities; develop and implement remediation plans.</li>
<li>Collaborate with IT and development teams to address security weaknesses.</li>
<li>Stay current with emerging vulnerabilities and threat landscapes.</li>
</ul>
<b>Patch Management Oversight:</b><br>
<ul>
<li>Lead and manage the patch management process for software and hardware components.</li>
<li>Coordinate with system administrators and vendors to ensure timely application of patches.</li>
<li>Develop and enforce patch management policies and procedures.</li>
<li>Monitor patch deployment effectiveness and address implementation issues.</li>
</ul>
<b>Email Security:</b><br>
<ul>
<li>Implement and manage email security solutions to protect against phishing, spam, and malware.</li>
<li>Monitor email systems for security threats and respond promptly to incidents.</li>
<li>Develop policies and train staff on secure email practices.</li>
</ul>
<b>Data Loss Prevention (DLP):</b><br>
<ul>
<li>Deploy and maintain DLP solutions to prevent unauthorized access or disclosure of sensitive data.</li>
<li>Define and enforce DLP policies; monitor compliance.</li>
<li>Investigate and address DLP alerts and incidents.</li>
</ul>
<b>Anti-Virus/Endpoint Detection and Response (EDR):</b><br>
<ul>
<li>Manage anti-virus and EDR systems across all endpoints to detect and mitigate security threats.</li>
<li>Ensure endpoints are protected with up-to-date security software and definitions.</li>
<li>Respond to security alerts from anti-virus and EDR systems; coordinate remediation efforts.</li>
</ul>
<b>Security Monitoring and Incident Response:</b><br>
<ul>
<li>Monitor security systems, including SIEM tools and intrusion detection systems.</li>
<li>Analyze security logs to identify potential threats and anomalies.</li>
<li>Perform privilege access management systems, enforcing least privilege principles and monitoring access controls.</li>
<li>Participate in incident response activities, including investigation, containment, and recovery.</li>
<li>Document incidents and implement improvements to prevent recurrence.</li>
</ul>
<b>Reporting:</b><br>
<ul>
<li>Prepare detailed security reports for management and stakeholders.</li>
<li>Develop metrics and dashboards to measure the effectiveness of security initiatives.</li>
<li>Communicate security issues and recommendations to technical and non-technical audiences.</li>
</ul>
<b>Compliance and Policy Enforcement:</b><br>
<ul>
<li>Ensure adherence to all relevant security policies, standards, and regulatory requirements.</li>
<li>Assist in developing, reviewing, and updating information security policies and procedures.</li>
<li>Support internal and external audits; address compliance gaps.</li>
</ul>
<b>Security Awareness and Training:</b><br>
<ul>
<li>Contribute to security awareness programs; develop training materials and deliver presentations.</li>
<li>Educate employees on best practices and emerging threats.</li>
</ul>
<b>Additional Duties:</b><br>
<ul>
<li>Evaluate and recommend security technologies and solutions.</li>
<li>Stay informed about cybersecurity trends and best practices.</li>
<li>Mentor junior team members and provide guidance on security matters.</li>
</ul>
<b>Other Functions:</b><br>
<ul>
<li>Complete information security projects and implement new tools.</li>
<li>Research new data security trends, keep up-to-date with current events and new threats in data security, and participate in relevant training courses.</li>
<li>Make recommendations to the Director of Information Security to improve network and mainframe security.</li>
<li>Expertise in performing Information Security Analyst(s) or Information Security Operations Manager functions where redundancy is necessary.</li>
<li>Provide assistance to Internal Audit and regulators with IT-related requests.</li>
<li>Complete other job-related duties, and/or projects, as assigned.</li>
</ul>
<b>Working Conditions:</b><br>
Office environment with some travel to enterprise locations, company-sponsored events, training, or as directed.
<br><br>
<b>Minimum Job Requirements:</b><br>
<b>Education:</b> Bachelor's degree in Information Security, Cybersecurity, Computer Science, or a related field. Advanced degrees or relevant certifications are advantageous.
<br><br>
<b>Experience:</b><br>
<ul>
<li>Minimum of five (5) years of experience in information security with a focus on vulnerability management, patch management, email security, DLP, and endpoint security.</li>
<li>Proven experience with security tools such as vulnerability scanners, SIEM platforms, EDR solutions, and email security systems.</li>
</ul>
<b>Comprehensive Skills:</b><br>
Employees are expected to represent the Bank in a professional manner to customers and outside contacts.
<br>Employees must have excellent interpersonal communication skills, consisting of the ability to write and speak effectively to others. Employees must be a productive team player, with the ability to learn, apply training and comprehend policies and procedures. Employees should also be flexible to changing working situations and able to meet deadlines as they arise.
<br><br>
<b>Specific Skills:</b><br>
<ul>
<li>Strong understanding of network protocols, operating systems, and database security.</li>
<li>Familiarity with regulatory compliance requirements (e.g., FFIEC, GLBA, PCI DSS).</li>
<li>Proficiency in scripting or programming languages for automation purposes.</li>
<li>Excellent analytical, problem-solving, and organizational skills.</li>
<li>Exceptional communication skills, both verbal and written.</li>
</ul>
<b>Specialized:</b><br>
Familiar with Cybersecurity related systems
<br><br>
<b>Licenses:</b><br>
Professional certifications such as CISSP, SSCP, GIAC, or other related certification(s), or willingness to obtain within one year.
<br><br>
<b>Physical requirements:</b><br>
The physical demands described here are representative of those that must be met by an employee in order to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
<br><ul>
<li>Primarily sedentary work performed in an office environment</li>
<li>Ability to sit for extended periods of time while working at a computer</li>
<li>Frequent use of hands and fingers to operate a computer, keyboard, mouse, and other office equipment</li>
<li>Ability to speak clearly and hear well enough to communicate with clients, team members, and vendors via phone, video, and in person</li>
<li>Visual acuity sufficient to read computer screens, printed documents, and financial data</li>
<li>Occasional standing, walking, bending, or reaching</li>
<li>Ability to lift and carry up to 10–15 pounds occasionally (e.g., files, office supplies)</li>
<li>Ability to lift and carry up to 10–15 pounds occasionally (e.g., files, office supplies)</li>
</ul>
Employees must also have the ability and means to travel as necessary for the purpose of attending training, meetings, and other various business functions.
<br><br>
<b>Benefits:</b><br>
<ul>
<li>401(K) with a company match of up to 6%</li>
<li>ESOP employer match</li>
<li>Medical insurance</li>
<li>Dental insurance</li>
<li>Vision insurance</li>
<li>Cancer/Disease insurance</li>
<li>Accident insurance</li>
<li>Flexible Spending Accounts</li>
<li>Flexible Savings Accounts</li>
<li>Health Savings Accounts</li>
<li>Bank paid Life/AD&D insurance</li>
<li>Voluntary Life/AD&D insurance</li>
<li>Bank paid Short-Term and Long-Term Disability insurance</li>
<li>Employee Stock Purchase Plan</li>
<li>Employee Assistance Program</li>
</ul>


CardWorks Servicing

<div><p><b><i>Join our team - and take the next step in achieving a fulfilling career!</i></b></p><p></p><p><b>
What We Do</b></p><p>
At CardWorks, we aim to help people connect with possibility and opportunity using our financial servicing expertise. Building meaningful, long-term relationships with consumers, our employees, and our clients is what matters most.</p><p></p><p><b>
Who We Are</b></p><div><p>
CardWorks, Inc. is a diversified consumer finance service provider and parent company of CardWorks Servicing, LLC, Merrick Bank and Carson Smithfield, LLC.</p></div><p></p><p>
CardWorks Servicing, LLC provides end-to end operational servicing functions for credit cards, secured cards, and installment loans. We service consumer and small business loans across the credit spectrum and offers backup servicing and due diligence services to capital providers and trustees.</p><p></p><p>
Merrick Bank is an FDIC-insured Utah Industrial Loan Bank. Merrick operates three main business lines: credit cards, recreational lending, and merchant services.</p><p></p><p>
Carson Smithfield, LLC provides a variety of post-charge-off debt recovery services, including digital self-service, IVR, live agent, and external agency management.</p><p></p><p><b>
Position Summary:</b></p><p></p><p>
The Senior Analyst, IT Risk is responsible for supporting and enhancing the organization&rsquo;s technology risk management, audit coordination, and IT control framework. This role partners closely with Internal Audit, Compliance, Technology, and business stakeholders to ensure regulatory readiness, effective control operation, and timely remediation of findings. The ideal candidate has a strong understanding of technology risks, audit processes, IT general controls, and information security principles.</p><p></p><p><b>
Essential Functions:</b></p><p></p><p><b>
Audit &amp; Regulatory Coordination</b></p><ul><li>
Coordinate audit preparation activities&mdash;including scheduling, evidence collection, and stakeholder communication&mdash;for internal audits and regulatory examinations (e.g., FDIC, SOX, SOC, and other technology-focused reviews).</li><li>
Serve as the primary liaison between Internal Audit, IT, and Compliance teams to ensure timely and accurate responses to audit inquiries.</li><li>
Oversee and track remediation activities; validate completion and effectiveness of corrective actions for technology-related audit findings.</li><li>
Participate in readiness assessments and pre-audit walkthroughs to identify issues before formal reviews begin.</li></ul><p></p><p><b>
Technology Risk Assessment &amp; Control Evaluation</b></p><ul><li>
Conduct comprehensive Technology Risk Assessments, identifying inherent and residual risks across infrastructure, applications, security, and cloud environments.</li><li>
Evaluate the design and operating effectiveness of technology controls, including IT General Controls (ITGCs), logical access, change management, operations, and security controls.</li><li>
Perform independent control testing to verify compliance with policies, standards, and regulatory requirements.</li><li>
Advise IT leadership on control gaps, deficiencies, risks, and recommended remediation strategies.</li></ul><p></p><p><b>
Governance, Risk, and Compliance (GRC) Support</b></p><ul><li>
Provide risk insights for new initiatives, technology implementations, cloud migrations, and major IT projects.</li><li>
Support enhancements to the IT risk management framework, control library, and GRC tooling.</li><li>
Monitor emerging technology risks and collaborate with stakeholders to develop mitigating controls.</li><li>
Contribute to the development and maintenance of IT policies, standards, and procedures.</li></ul><p></p><p><b>
Education and Experience:</b></p><p></p><p><b>
Required:</b></p><ul><li>
Bachelor&rsquo;s degree in information technology, Cybersecurity, Risk Management, or related field (or equivalent experience).</li><li>
5-10+ years of experience in IT risk, audit, information security, or technology governance.</li><li>
Strong knowledge of IT controls frameworks (e.g., COBIT, NIST, ISO 27001) and regulatory requirements (SOX, FFIEC, SOC, etc.).</li><li>
Experience working with audit functions and responding to regulatory reviews.</li><li>
Ability to analyze control gaps and articulate risks clearly to technical and non-technical stakeholders.</li></ul><p></p><p><b>
Preferred:</b></p><ul><li>
Professional certifications such as CISA, CRISC, CISSP, CIA, or similar.</li><li>
Experience with GRC platforms (e.g., Archer, ServiceNow GRC, MetricStream).</li><li>
Familiarity with cloud technologies (AWS, Azure, GCP) and related risk assessments.</li><li>
Prior first line Technology experience.</li></ul><p></p><p><b>
Summary of Qualifications:</b></p><ul><li>
Strong analytical and problem-solving skills</li><li>
Excellent communication and documentation abilities</li><li>
Detail-oriented with strong organizational skills</li><li>
Ability to manage multiple concurrent audits and priorities</li><li>
Collaborative mindset with the ability to work across IT, audit, and compliance functions</li><li>
Occasional travel may be required</li></ul><p></p><p>
Ideally, the qualified candidate will work at the following location: Woodbury, NY. A hybrid work model or fully remote model can be considered based on hiring manager decision and priorities of the role.</p><p></p><p>
The salary range for this position, <b>if located in NY Metro/NY State</b> is $122,309 to $135,899. However, please note that the salary range will vary for other geographic areas.</p><p>
#INDHP</p><p></p><p><b>
Our Employee Value Proposition</b></p><ul><li>
Competitive Pay, including a Bonus Target or Variable Pay Incentive Program</li><li>
Benefits Package -Medical, Dental, and Vision (plus much more)</li><li>
401(k) Plan with Company Match</li><li>
Short- &amp; Long-Term Disability</li><li>
Wellness Programs</li><li>
Group Life and AD&amp;D Insurance</li><li>
Paid Vacation, Sick Days and bank Holidays</li><li>
Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition</li></ul><p></p><p><i>
We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location.</i></p><p></p><p><i>
We are an equal opportunity employer, and we evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status or any other legally protected characteristic. We will conduct a thorough background check for all hires in compliance with applicable laws.</i></p></div>

Senior Analyst, IT Risk

Search 10000+ Senior it security analyst jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 senior it security analyst jobs Near Me

IT Security Analyst - Contract - 0034062

Senior Information Security Analyst

Administrator/Analyst, ITS Security

Senior IT Risk and Compliance Analyst

SOC Analyst – IT Infrastructure & Network Security

Senior Information Security Analyst

Senior Analyst, IT Risk