senior it security analyst

WENCOR

<div>
 For 68 years, HEICO Corporation, a NYSE traded company, has thrived by serving niche segments of the aviation, defense, space and electronics industries by providing innovative and cost-saving products and services. HEICO&rsquo;s high-energy culture focuses our Team Members on providing high quality products and services to our customer base, which is made up of most of the world&rsquo;s airlines, the defense industry, satellite manufacturers and other electronics companies. Our leadership approach creates a dynamic environment that continually challenges our Team Members to grow professionally and develop in an entrepreneurially-spirited setting.
 
 
 
 ROLE:
 
 The
 
 Senior IT Security Analyst
 
 applies advanced systems analysis techniques and deep cybersecurity operations expertise to protect sensitive and mission-critical systems across HEICO and its subsidiaries. This role serves as a senior technical escalation point for security monitoring and incident response, leads complex investigations, and drives continuous improvement of detection, response, and security hardening capabilities.
 
 
 The Senior IT Security Analyst acts as a trusted advisor and liaison to ensure security operations align with HEICO standards while accounting for subsidiary-specific business needs and technical nuances. The role mentors junior analysts, improves operational rigor (playbooks, automation, metrics), and supports compliance-driven security requirements through disciplined execution and documentation.
 
 
 
 Essential Duties And Responsibilities
 
 
 
 <li>
 Security Monitoring &amp; Triage
 </li>
 <ul>
 <li>
 Analyze and triage security alerts from managed detection and response (MDR) services and internal monitoring platforms; determine severity, scope, and required actions.
 </li>
 <li>
 Serve as an escalation point for high-impact or complex alerts and investigations; provide guidance to junior analysts during active cases.
 </li>
 </ul>
 <li>
 Incident Response Leadership
 </li>
 <ul>
 <li>
 Lead cybersecurity incident investigations, including evidence preservation, containment, eradication, and recovery validation in accordance with established procedures.
 </li>
 <li>
 Coordinate incident communications and technical actions across IT teams, impacted sites, and third-party providers; ensure timely escalation when elevated authorization is required.
 </li>
 <li>
 Perform post-incident reviews, document timelines and lessons learned, and implement improvements to reduce recurrence.
 </li>
 </ul>
 <li>
 Threat Investigation &amp; Analysis
 </li>
 <ul>
 <li>
 Conduct malware and suspicious artifact analysis using investigative tooling (including sandboxing) to determine behavior, impact, and mitigation steps.
 </li>
 <li>
 Perform proactive threat hunting to identify stealthy or low-signal adversary activity and improve detection coverage.
 </li>
 </ul>
 <li>
 Detection Engineering &amp; Security Tool Optimization
 </li>
 <ul>
 <li>
 Evaluate, tune, and optimize EDR/XDR detection logic, response policies, and automated containment actions to improve efficacy and reduce false positives.
 </li>
 <li>
 Enhance alert fidelity and investigative effectiveness through rule refinement, contextual enrichment, telemetry validation, and playbook improvements.
 </li>
 <li>
 Design and maintain application control and endpoint protection policies to strengthen visibility, restrict unauthorized software execution, and address detection or response gaps.
 </li>
 <li>
 Security Automation
 </li>
 <ul>
 <li>
 Develop, test, and implement SOAR/security automation workflows to improve response consistency and enable action when staffing is limited.
 </li>
 <li>
 Identify repetitive analyst tasks and implement automation to increase operational capacity and reduce mean time to respond (MTTR).
 </li>
 </ul>
 <li>
 Incident-Driven Vulnerability Escalation
 </li>
 <ul>
 <li>
 Escalate vulnerabilities or control weaknesses identified during incident response or threat hunting, providing technical impact analysis and attack-path context to the vulnerability management function.
 </li>
 <li>
 Confirm that remediation actions adequately address the specific incident vector or exploited control gap.
 </li>
 </ul>
 <li>
 Control Gap Identification &amp; Advisory
 </li>
 <ul>
 <li>
 Provide operational feedback on control effectiveness based on real-world incident activity and detection gaps (including emerging technology guidance such as AI usage controls).
 </li>
 <li>
 Recommend improvements to technical safeguards or enforcement mechanisms when investigative findings reveal system weaknesses (e.g., SOX and NIST-aligned requirements).
 </li>
 </ul>
 <li>
 Third-Party / MSP Oversight
 </li>
 <ul>
 <li>
 Engage third-party IT providers/MSPs to communicate HEICO security requirements and incident handling expectations (including evidence retention).
 </li>
 <li>
 Assess MSP execution against requirements, identify gaps, and escalate non-compliance through appropriate channels.
 </li>
 </ul>
 <li>
 Business Partnership, Reporting, and Travel
 </li>
 <ul>
 <li>
 Act as a liaison between HEICO Corporate security and supported subsidiaries to maintain alignment on security initiatives, upgrades, and operational expectations.
 </li>
 <li>
 Provide regular operational reporting (risk trends, incident metrics, remediation status, tooling effectiveness).
 </li>
 <li>
 Required quarterly travel to supported out-of-state sites (i.e. quarterly planned visits and additional travel during escalations) to understand environment baselines, strengthen stakeholder relationships, and improve response readiness.
 </li>
 </ul>
 <li>
 On-Call Support
 </li>
 <ul>
 <li>
 Participate in an on-call rotation and respond independently to security events outside standard business hours.
 </li>
 <li>
 Perform other professional cybersecurity duties consistent with the scope and level of the position.
 </li>
 </ul>
 </ul>
</div>

IT Security Operations Analyst

Foxhole Technology

<div>Overview:

Title-Senior Information Security Analyst
Location: Arlington, VA (Remote)
Clearance: Secret
Start: Upon Contract Award 
Foxhole Technology provides robust cybersecurity and IT support capabilities for federal civilian and defense agencies. A recognized leader in navigating technology and security challenges, Foxhole delivers mission-focused innovations to answer evolving and complex needs. Our talented employee-owners provide agile, scalable services and solutions that solve operational gaps, operate critical systems, and protect and secure the enterprise &ndash; across the organization and around the world. 
Foxhole is seeking a Cybersecurity Team Lead (Senior Information Security Analyst). This position will manage and enforce cybersecurity posture, assessments, compliance, and monitoring activities. Using relevant experience, strong problem solving, and customer service skills to ensure the appropriate operational security posture is maintained for information system, integration points, and program by implementing and maintaining security controls in close coordination with the Government.
Job Description:
<ul><li>Lead the design, implementation, and continuous improvement of enterprise cybersecurity frameworks across GovCloud environments, ensuring alignment with DoD security requirements</li><li>
Manage the full Risk Management Framework (RMF) lifecycle, including control selection, tailoring, inheritance, and mapping</li><li>
Architect and sustain automated compliance and continuous monitoring pipelines, enabling real-time RMF evidence generation, vulnerability scanning, AWS security, or equivalent platforms</li><li>
Maintain and govern cybersecurity architecture artifacts, including system security plans, system diagrams, and data flow mappings to support audit readiness and system authorization</li><li>
Direct vulnerability management and remediation programs, including coordination of scanning and POA&amp;M tracking to ensure timely risk mitigation</li><li>
Ensure compliance with DISA STIGs, SRGs, and PPSM requirements through continuous validation, audits, and control assessments</li><li>
Collaborate with Authorizing Officials (AOs), Security Control Assessors (SCAs), and engineering teams to obtain and sustain Authorization to Operate (ATO)</li><li>
Lead the security integration into DevSecOps pipelines, ensuring automated security testing, compliance enforcement, and secure code deployment practices</li><li>
Oversee development and maintenance of key security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Incident Response Plans (IRPs), and Contingency Plans</li><li>
Lead incident response efforts, including detection, analysis, containment, and reporting, ensuring alignment with organizational and regulatory requirements</li><li>
Mentor and guide junior analysts, while communicating security posture, risk metrics, and compliance status effectively to senior leadership and stakeholders</li></ul>
Minimum Requirements:
<ul><li>At least 7 years of experience in cybersecurity, compliance, or RMF program management</li><li>
Hands-on experience managing assessment and authorization activities within eMASS (or similar tool) and implementing RMF controls in GovCloud environment</li><li>
Strong understanding of RMF, DISA STIGs/SRGs, and Cloud Computing SRG</li><li>
Knowledge of FedRAMP, NIST SP 800-53, and CMMC frameworks</li><li>
Experience with vulnerability scanning and compliance validation technologies</li><li>
Strong understanding of cloud security (AWS, OCI, etc.)</li><li>
Ability to work independently, and part of team, in a high-intensity fast=paced environment</li><li>
Familiarity with security best practices and compliance requirements.</li><li>
Excellent troubleshooting and problem-solving skills</li><li>
Active DoD Secret Clearance</li><li>
Continental travel may be required</li></ul>
Desired Experience/Certifications:
<ul><li>Bachelor&rsquo;s (BS) degree in relevant field &ndash; strongly preferred but not required</li><li>
Certifications such as CISSP, CISM, or similar cert is preferred</li><li>
Familiarity with security tools and frameworks such as ACAS, Nessus, cloud-based scanning technologies, etc.</li><li>
Experience supporting FedRAMP accreditations is a plus</li><li>
Knowledge of computer network defense process and procedures</li></ul>
More Information:
<div>
Requirements of position: Think analytically, effective verbal and written communication skills, make decisions, observe/remember details, interpret data, concentrate on tasks, adjust to change, handle stress/emotions. Regular attendance, maintain work schedule, attend meetings, meet deadlines, keyboard/type, handle confidential information, use math/calculations, stay organized, operate office equipment, may direct others. May be exposed to dust/dirt, humidity, and noise</div><div></div><div> 
Foxhole Technology is an Equal Opportunity Employer and makes hiring decisions without regard to race, color, religion, sex (including pregnancy, childbirth and sexual orientation), national origin, age, disability, genetic information, military/veteran status, or any other protected class.</div></div>

Senior Information Security Analyst

TISTA Science and Technology Corporation

<div>Overview:
<div>
TISTA is seeking an experienced Senior Information Security Policy Analyst to join our team that has a strong background in Policy for IT Security and Privacy.</div><div></div><div> 
At TISTA, you&rsquo;ll do meaningful, mission‑driven work that improves lives alongside teammates you trust and leaders who are transparent and supportive. We invest in your learning and internal mobility so you can build a career that keeps advancing. We&rsquo;re proud to serve and hire Veterans, and we put people first in everything we do.</div><div></div><div> 
TISTA associates enjoy above Industry Healthcare Benefits, Remote Working Options, Paid Time Off, Training/Certification opportunities, Healthcare Savings Account &amp; Flexible Savings Account, Paid Life Insurance, Short-term &amp; Long-term Disability, 401K Match, Professional development reimbursement, Employee Assistance Program, Paid Holidays, Military Leave, and much more!</div>
Responsibilities:
<ul><li>Experience in technical writing, specific to security-related documents, policies and procedures.</li><li>
Develop, update, and implement DISC security directives, policies, procedures and plans to support DISC Authority to Operate (ATO).</li><li>
Perform gap analysis of existing policies and procedures.</li><li>
Develop, update, and implement DISC security directives, policies, and procedures to support cloud working group and cloud migrations.</li><li>
Assist in the development and implementation of Departmental Regulations with CPOC.</li><li>
Coordinate with system owners to develop Business Impact Analysis (BIAs).</li><li>
Assist in Disaster Recovery (DR), Business Continuity (BC) &amp; Continuity of Operations (COOP) documentation and activities.</li><li>
Demonstrate strong knowledge of migrating and securing IT systems in the cloud.</li><li>
Experience with High Value Assets (HVA) systems and their security controls.</li><li>
Experience with Privacy related policy and compliance.</li><li>
Experience with developing risk impact assessments and risk mitigation strategies.</li><li>
Strong project management skills and familiarity with standard project management methodologies such as Agile and Scrum.</li><li>
Comfortable leading meetings.</li><li>
Strong familiarity with NIST Special Publications and guidance, specifically 800-53 rev. 4/rev. 5 and the NIST Risk Management Framework.</li><li>
Strong problem solving and analysis skills, self-motivated, leader and able to work and communicate in a team environment.</li></ul>
Qualifications:
<ul><li>A minimum of 5-7 years of demonstrated experience in the Information Security (Cybersecurity or Information Assurance) field.</li><li>
Experience with leading and directing the work of others.</li><li>
Demonstrates proficiency with developing, maintaining and managing Authorizations and Assessments (A&amp;A) and Authority to Operate (ATO) packages.</li><li>
Knowledge of standard concepts, practices, and procedures within program management.</li><li>
Demonstrates proficiency in IT systems cloud migrations and securing systems in the cloud.</li><li>
A holistic understanding and knowledge of the Risk Management Framework (RMF) as defined by National Institute of Technology (NIST) Special Publication (SP) 800-53 (current revision), Recommended Security Controls for Federal Information Systems and NIST SP 800-53A Revision 4, Guide for Assessing the Security Controls in Federal Information Systems.</li><li>
Strong problem-solving and analysis skills, self-motivated, and able to work and communicate in a team environment.</li><li>
Excellent documentation skills &ndash; redacted samples may be requested.</li><li>
Excellent oral and written communication skills.</li></ul><div>
Desired Certifications:</div><ul><li>
Security+</li><li>
Certified Authorization Professional (CAP)</li><li>
Certified in Governance, Risk and Compliance (CGRC)</li><li>
Certified Information Privacy Professional (CIPP)</li><li>
Cloud Certification (Azure, AWS, CCSP, Cloud+, etc.)</li><li>
Certified Information System Security Professional (CISSP)</li><li>
Certified Cloud Security Professional (CCSP)</li><li>
Project Management Professional (PMP)</li></ul><div>
Education:</div><ul><li>
Bachelor&rsquo;s degree or higher in computer science, Information Technology, Information Security, or similar fields.</li></ul><div>
Clearance:</div><ul><li>
The ability to pass a Public Trust Background Investigation.
</li><li>US citizens or permanent residents highly preferred.</li></ul><div>
Location:</div><ul><li>
Remote, USA.</li></ul><div>
Pay Range:</div><ul><li>
The pay for this position ranges from $85,730 to $95,500.</li><li>
The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience, and location.</li><li>
Also, certain positions are eligible for additional forms of compensation, such as bonuses.</li><li>
TISTA associates are eligible to participate in our comprehensive benefits plan! More information can be found here: https://tistatech.com/working-at-tista/</li></ul></div>

Senior Information Security Policy Analyst

GovCIO

<div>Overview:
<div>
GovCIO is currently hiring for a Senior Systems Security Analyst with an active Secret clearance to evaluate actions needed to implement customer security policy by developing plans and implementing solutions. This position will be located in Arlington, VA, and will be a hybrid position.</div>
Responsibilities:
<div><div>
Day-to-Day Responsibilities</div><ul><li>
Reviews security policies, directives, and vulnerability information to determine plans for addressing them.</li><li>
Determines and/or works with others to determine technical solutions for remediating vulnerabilities within a large Enterprise.</li><li>
Leads team to patch and deploy remediations/patches.</li><li>
Tracks and reports on vulnerability remediation.</li><li>
Manages team efforts to address remediations in alignment with customer security policies and timelines.</li><li>
Utilizes the Qualys vulnerability scanning tool to review vulnerabilities in the environment and validate post-deployment vulnerability remediation.</li><li>
Assists technical teams with the identification of baselines, scanning compliance, and performing remediation steps to bring systems into compliance.</li><li>
Works with System ISSOs to develop POAMs, address audit findings, and provide other required information for security documentation and artifacts.</li><li>
Provides technical recommendations to the remediation plan for identified events.</li><li>
Ensures security tools are on all systems, including servers, laptops, and desktops, and works with systems administrators to install them if missing.</li></ul></div>
Qualifications:
<div>
Required Skills and Experience</div><ul><li>
High School with 10+ years of overall systems and/or network vulnerability remediation experience (or commensurate experience)
 
Clearance Required: Active Secret with the ability to obtain and hold DEA suitability</li><li>
Experience in determining and/or working with others to determine technical solutions for remediating vulnerabilities within a large Enterprise</li><li>
5+ years of leadership experience</li><li>
Strong systems and/or network administration experience</li><li>
Hands-on experience remediating vulnerabilities on systems and/or network infrastructure</li><li>
Strong customer-facing and stakeholder communication skills</li></ul><div>
Nice to Have</div><ul><li>
Experience with Qualys</li><li>
Experience with ServiceNow ticketing</li></ul>
Posted Salary Range: USD $145,000.00 - USD $170,000.00 /Yr.</div>

Senior Systems Security Analyst

<div>Title:
SOC Analyst (Evening Shift) / IT Specialist II
KBR has an immediate need for an energetic and dynamic Security Operations Center (SOC) Analyst (evening shift), known as an Active Response Center (ARC) Analyst at EROS, in support of the United States Geological Survey (USGS) Earth Resources Observation &amp; Science (EROS) Center (http://eros.usgs.gov/) near Sioux Falls, SD (http://www.siouxfalls.org). 
This position is an integral part of the EROS Center-wide Information Technology Team (CITT). The role involves working as part of a 24x7 Active Response Center (ARC) team, with responsibility for monitoring the networks for security issues (using SIEM/log analysis toolsets), performing vulnerability scanning, threat intelligence and undertaking security incident response. 
The purpose of this role is to ensure that the EROS Center&rsquo;s information and systems are protected, in accordance with the needs of the business and according to Information Security principles of availability, integrity and confidentiality. 
The ARC operates 24x7 and you will be required to work a shift pattern that covers this. This consists of a mixture of evenings and nights, Monday through Friday and rotation of weekend shifts. This position is being posted as an evening shift, which starts at 4:00 pm to 12:45 am. Occasional travel may be required.
The candidate must have previous 3 years US residency.
This position may be filled by a KBR teammate on the TSSC Contract. 
Education: An AA or BS degree, or a degree in progress for IT related curriculum. Experience may be substituted for Education requirements, as applicable. 
Experience: Minimum of 1 year of directly related technical, professional experience required; additional experience of 4+ years is ideal. 
Experience and/or Education in lieu of these qualifications will be reviewed for applicability to meet these requirements. 
Required Skills:<ul><li>
Monitor the networks for malicious activity using Security Incident and Event Management (SIEM) toolsets. This will include responding to and investigating alerts, the development of new security monitoring use cases, and ensuring all investigative activity is properly documented in our ticketing systems and followed up with relevant support teams. Triage issues escalated to the information security team, and ensure that appropriate follow-up actions are taken by the ARC.</li><li>
Take responsibility for developing and maintaining ARC documentation and processes.</li><li>
Take responsibility for monitoring open source intelligence sources for potential threats against the EROS Center, and ensure appropriate defensive actions are taken with respect to these.</li><li>
Take responsibility for running vulnerability scans against EROS infrastructure, interpreting these and following up issues with relevant support team.</li><li>
Highly motivated individual with a genuine enthusiasm for information security and technology;</li><li>
Willingness to work shifts (including unsociable hours and holidays where these fall into your shift pattern) as part of a 24x7 team.</li><li>
Sound understanding of information security principles and best practices;</li><li>
Good infrastructure and technology experience including demonstrable understanding of security operations;</li><li>
Good communication skills both written and verbal;</li><li>
Good knowledge of security issues inherent in common corporate environments;</li><li>
Ability to prioritize workloads and to know when to seek guidance.</li></ul> 
Other Desired Skills:<ul><li>
Work with 1st line ticketing/triage</li><li>
Experience using Security Incident and Event Management (SIEM) toolsets;</li><li>
Experience using vulnerability scanning tools;</li><li>
Experience identifying and reporting on open source threat intelligence;</li><li>
Proven technical ability in Windows/Unix/Linux/etc;</li><li>
Proven technical ability in Microsoft Windows/Active Directory;</li><li>
Proven technical ability in networking systems;</li><li>
Experience with Amazon cloud hosting platforms;</li><li>
Experience with VMware virtualization;</li><li>
Experience with malware analysis</li></ul> 
The candidate must have previous 3 years US residency.
The candidate must be able to obtain and maintain a national agency check and background investigation after hire to obtain credentials for facility access and user accounts. 
KBR Benefits 
KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&amp;D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development. 
Click here to learn more: KBR Benefits 
This position may be filled by a KBR teammate on the TSSC Contract.
KBR partners with several other companies to fulfill its requirements as a government contractor. The selected subcontracting companies align their benefits as closely as possible to those above.
#LI-EM2
Belong, Connect and Grow at KBR 
 
At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team&rsquo;s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver &ndash; Together.
KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.</div>

SOC Analyst (Evening Shift) / IT Specialist II

Aspirus Health

<div>Compassion. Accountability. Collaboration. Foresight. Joy.
These are the Aspirus Core Values; and we are looking for the BEST around to join us as we demonstrate those values Every. Single. Day.
Aspirus Health in Wausau, WI is seeking an IDENTITY AND ACCESS MANAGEMENT ANALYST - SENIOR to join our INFORMATION TECHNOLOGY team! 
The Senior Identity and Access Management Analyst performs advanced Identity and Access Management (IAM) functions with minimal supervision, leads process improvement initiatives, and serves as a technical expert for complex access management challenges. This role requires the ability to design and implement IAM solutions, lead projects, and provide comprehensive mentorship to junior staff members. Key responsibilities include designing complex user lifecycle management processes, leading access certification programs, managing enterprise privileged access management initiatives, architecting advanced SSO implementations, developing comprehensive compliance reporting, providing tier-3 support for complex issues, and leading medium to large-scale IAM projects, conducting training sessions for clinical and business staff on IAM processes and compliance requirements, developing educational materials and user guides for non-technical stakeholders, and serving as primary point of contact for complex access questions from department leaders. The position emphasizes technical leadership, process innovation, and comprehensive mentorship of team members.
HOURS: Full-Time or 1.0 FTE, 80 hours every 2 weeks. Hybrid.
Experience/Qualifications<ul><li>
Bachelor&rsquo;s degree in information technology, Cybersecurity, Computer Science, or related field; OR Associate's degree with minimum 4 years of relevant experience.</li><li>
Minimum 4 years of experience in identity and access management or related field required.</li><li>
Demonstrated experience leading technical projects.</li><li>
Experience with enterprise directory services and identity governance.</li><li>
Proven track record of process improvement and documentation.</li><li>
One or more relevant professional certifications required (examples: CISSP, Epic Security Administrator, CIAM, Microsoft Identity and Access Administrator, CISM).</li><li>
Epic Security Administrator certification beneficial.</li><li>
Advanced knowledge of Microsoft Active Directory, Microsoft Entra ID, and cloud identity services.</li><li>
Deep understanding of authentication protocols (SAML, OAuth, OIDC).</li><li>
Experience with privileged access management solutions.</li><li>
Advanced proficiency in Microsoft Visio for process documentation.</li><li>
Proficiency in PowerShell and Python scripting for IAM automation and administration tasks.</li><li>
Strong understanding of compliance frameworks (HICP, NIST, HIPAA, SOC).</li><li>
Excellent leadership and project management abilities.</li><li>
Strong analytical and strategic thinking skills.</li><li>
Exceptional written and verbal communication skills.</li><li>
Ability to translate technical concepts for non-technical stakeholders and conduct effective training sessions.</li><li>
Ability to work effectively with autonomy and lead small project teams.</li><li>
Strong mentoring and coaching abilities.</li></ul>
Employee Benefits 
<ul><li>
Full benefits packages available for part- and full-time status.</li><li>
Time away from work accrual.</li><li>
Retirement plans available.</li><li>
Wellness program for employees and their families.</li></ul> 
Our Mission: We heal people, promote health and strengthen communities.
Our Vision: Aspirus is a catalyst for creating healthy, thriving communities, trusted and engaged above all others. 
As an Aspirus team, we demonstrate caring, we plan to impact the future, work with happiness and enthusiasm, recognize our power to make a difference and improve the health of our communities.
Aspirus Health is a nonprofit, community-directed health system based in Wausau, Wisconsin, serving northeastern Minnesota, northern and central Wisconsin and the Upper Peninsula of Michigan. The health system operates 18 hospitals and 130 outpatient locations with nearly 14,000 team members, including 1,300 employed physicians and advanced practice clinicians. For more information visit aspirus.org.
Click here to learn more.</div>

IDENTITY AND ACCESS MANAGEMENT ANALYST - SENIOR - IT

ibex

<div>
 To protect IBEX infrastructure from emerging threats and help organization in achieving business objectives. This position acts as senior level IS resource having strong background of Network and Cyber Security functions. This position will coordinate &amp; will help implementing IT Security Roadmap and security processes for the protection of IBEX Global assets.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Information Security Risk Management &amp; Assessments (Hands-On)
 </li>
 <li>
 Lead and perform end-to-end IT Risk Assessments, including inherent risk identification, control design and evaluation of operating effectivness, residual risk rating and risk treament recommendations.
 </li>
 <li>
 Assess risks across Infrastructure (on-prem, cloud, hybrid), Applications and Systems, data security and privacy, identity and access management, change and configuration management etc.
 </li>
 <li>
 Develop and maintain risk registers, risk heatmaps, and executive-level risk reporting.
 </li>
 <li>
 Support internal and external audits by providing risk documentation and remediation evidence.
 </li>
 <li>
 Supply Chain &amp; Third-Party Risk Management
 </li>
 <li>
 Conduct Supply Chain / Third-Party IT Risk Assessments for vendors, partners, and service providers.
 </li>
 <li>
 Evaluate vendor risks related to Information Security, Data Protection &amp; Privacy, Business Continuity and resilience, sub-contractor and fourth party risks.
 </li>
 <li>
 Review and assess Vendor security questionnaires, independent audit reports such as SOC2, ISO 27001, PCI DSS, Penetration Test Summaries, ISO 42001 for AI Service Providers etc.
 </li>
 <li>
 Collaborate with Procurement, Legal, and Compliance teams to define risk-based onboarding criteria, support contract security clauses, track vendor risk remediation activities etc.
 </li>
 <li>
 AI Risk Assessments &amp; AI System Impact Assessments
 </li>
 <li>
 Lead and perform AI Risk Assessments across AI/ML systems, including but not limited to model risks, data quality and bias risks, secuirty and adversarial risks, privacy and data protection risks, ethical and responsible AI risks etc.
 </li>
 <li>
 Conduct AI System Impact Assessments (AISIAs) to evaluate impact on individuals and customers, regulatory and compliance implications, business and reputational risks etc.
 </li>
 <li>
 Align AI risk activities with relevant frameworks and regulations, such as ISO/IEC 42001 (AI Management Systems), NIST AI Risk Management Framework, Applicable data protection and AI regulations etc.
 </li>
 <li>
 Partner with AI, Data Science, Legal, and Product teams to embed risk controls into AI system lifecycles.
 </li>
 <li>
 Team Leadership &amp; Management
 </li>
 <li>
 Manage, coach, and mentor team members.
 </li>
 <li>
 Review and approve risk assessment deliverables to ensure quality and consistency.
 </li>
 <li>
 Allocate work, set priorities, and track progress against agreed timelines.
 </li>
 <li>
 Provide performance feedback, skill development guidance, and technical direction.
 </li>
 <li>
 Promote standardization of risk assessment methodologies, templates, and reporting.
 </li>
 <li>
 Stakeholder Engagement &amp; Reporting
 </li>
 <li>
 Act as a trusted risk advisor to technology, business, and senior leadership stakeholders.
 </li>
 <li>
 Present risk findings and recommendations to IT leadership, Risk committee, Senior management etc.
 </li>
 <li>
 Support the development of risk policies, standards, and procedures.
 </li>
 <li>
 Drive a culture of risk awareness and accountability across the organization.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 EducationBachelors/Masters Degree in IT/CS/Software Eng./TelecomExperience8 - 12 yearsSkills and Abilities5+ years of hands on experience in IT/Information Security Risk Management
 
 
 Strong understanding of ITRM concepts, methodologies, controls and architectures. Cloud.
 
 
 Hands-on experience with Third-Party/Supply Chain Risk Assessments
 
 
 Knowledge of risk frameworks such as ISO 27005, NIST CSF etc.
 
 
 Strong presentation and communication skillsReporting Time5pm to 2am (PKST)
</div>

Principal, IT Security & Compliance, IT

Search 10000+ Senior it security analyst jobs near you this April. New roles added regularly across leading industries. Apply today.