{"@context":"https://schema.org","@type":"ItemList","name":"Senior Associate - Finance: Job Description, Salary, Skills | Job Search","description":"Explore the role of a Senior Associate in Finance, including responsibilities, salary range, and required skills. Find Senior Associate jobs on top job boards.","itemListElement":[{"@type":"ListItem","position":1,"item":{"@type":"JobPosting","title":"Senior Associate, Information Security Analyst","datePosted":"2025-07-22","description":"

Contributes to the effectiveness of security-related operations. Provides programming support and assists in project planning for an operational area in information security. Assists in daily oversight of a security sub-component. Initiates projects intended to improve operations, client satisfaction with operational support, and development of appropriate standards and procedures for assigned operational area. Participates in evaluation, testing and implementation of emerging control technologies, information systems security issues, safeguards, and techniques applicable to assigned operations area. Presents proposed security enhancements to management for approval, funding and implementation. Reviews and analyzes data and information to provide insights, conclusions and actionable recommendations, Produces reports, analyses, findings, etc. Screens and selects tools to automate security administration. Schedules and evaluates vendor security software through testing and discussions with external business users. Contributes to the achievement of related teams' objectives. Bachelor's degree in computer science or a related discipline, or equivalent work experience required. 4-6 years of experience in information security or related technology experience required, experience in the securities or financial services industry is a plus.. BNY Mellon is an Equal Employment Opportunity/Affirmative Action Employer. Minorities/Females/Individuals with Disabilities/Protected Veterans. Our ambition is to build the best global team – one that is representative and inclusive of the diverse talent, clients and communities we work with and serve – and to empower our team to do their best work. We support wellbeing and a balanced life, and offer a range of family-friendly, inclusive employment policies and employee forums.

","hiringOrganization":{"@type":"Organization","name":"BNY","sameAs":"https://www.bny.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Chennai, Tamil Nadu, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":2,"item":{"@type":"JobPosting","title":"Senior Associate, Information Security Analyst","datePosted":"2025-08-12","description":"

Senior Associate, Information Security Analyst

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators and champions of inclusion, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

We’re seeking a future team member for the role of Senior Associate, Information Security Analyst to join our WEALTH SERVICES ENGINEERING SDG team. This role is located in CHENNAI, TN.

In this role, you’ll make an impact in the following ways:

Actively contribute to the organizational Vulnerability Management program
Perform Design reviews and provide approvals to initiatives
Perform Dynamic, Static scans and Software Composition Analysis for a specified inventory of applications
Perform Ethical Hacking for a specified inventory of applications
Provide metrics on Vulnerability reduction and Scan progression
Prepare reports for Senior Management on the current risk posture of the organization
Provide support to audits and client queries on the Vulnerability Management process, procedures and its execution
Provide support to Application Managers and Developers during each Sprint

\n

To be successful in this role, we’re seeking the following:

Bachelor’s or Master’s degree in Computer Science Engineering, OR Electronics and Communications Engineering, OR related discipline
3 to 7 years of work experience in Application Security domain is required.
Should be able to identify security flaws in design, source code and deployed applications with ease
Should have working knowledge of tools such as Microsoft Threat Modeler, HCL AppScan, OpenText Fortify, Sonatype Nexus IQ, Portswigger Burp Suite, OpenText WebInspect
Strong written communication skills
Should have prior experience working in and as a team
Should keep pace with current vulnerability trends by researching on industry standards and best practices

At BNY, our culture speaks for itself, check out the latest BNY news at:

BNY Newsroom

BNY LinkedIn

Here’s a few of our recent awards:

America’s Most Innovative Companies, Fortune, 2025
World’s Most Admired Companies, Fortune 2025
“Most Just Companies”, Just Capital and CNBC, 2025

Our Benefits and Rewards:

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life’s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.

BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.

","hiringOrganization":{"@type":"Organization","name":"BNY","sameAs":"https://www.bny.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Chennai, Tamil Nadu, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":3,"item":{"@type":"JobPosting","title":"Senior Associate Information Security Analyst","datePosted":"2025-08-18","description":"

Make an impact with NTT DATA
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Additional Career Level Description:

Knowledge and application:

Applies learned techniques, as well as company policies and procedures to resolve a variety of issues.

Problem solving:

Works on problems of moderate scope, often varied and nonroutine where analysis requires a review of a variety of factors.
Focuses on providing standard professional advice and creating initial analysis for review.

Interaction:

Builds productive internal/external working relationships to resolve mutual problems by collaborating on procedures or transactions.

Impact:

Work mainly impacts short term team performance and occasionally medium-term goals.
Supports the achievement of goals through own personal effort, assessing own progress.

Accountability:

Exercises some of own judgement and is responsible for meeting own targets, normally receiving little instruction on day-to-day work, general instructions on new assignments.
Manages own impact on cost and profitability.

Workplace type:

On-site Working

About NTT DATA
NTT DATA is a $30+ billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long-term success. We invest over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity. We are also one of the leading providers of digital and AI infrastructure in the world. NTT DATA is part of NTT Group and headquartered in Tokyo.

Equal Opportunity Employer
NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.

","hiringOrganization":{"@type":"Organization","name":"NTT DATA","sameAs":"https://hello.global.ntt/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Mumbai, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":4,"item":{"@type":"JobPosting","title":"Senior Associate Information Security Analyst","datePosted":"2025-08-18","description":"

Additional Career Level Description:

Knowledge and application:

Applies learned techniques, as well as company policies and procedures to resolve a variety of issues.

Problem solving:

Works on problems of moderate scope, often varied and nonroutine where analysis requires a review of a variety of factors.
Focuses on providing standard professional advice and creating initial analysis for review.

Interaction:

Builds productive internal/external working relationships to resolve mutual problems by collaborating on procedures or transactions.

Impact:

Work mainly impacts short term team performance and occasionally medium-term goals.
Supports the achievement of goals through own personal effort, assessing own progress.

Accountability:

Exercises some of own judgement and is responsible for meeting own targets, normally receiving little instruction on day-to-day work, general instructions on new assignments.
Manages own impact on cost and profitability.

Workplace type:

On-site Working

","hiringOrganization":{"@type":"Organization","name":"NTT DATA","sameAs":"https://hello.global.ntt/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Mumbai, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":5,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-07-21","description":"

Itron is innovating new ways for utilities and cities to manage energy and water. We create a more resourceful world to protect essential resources for today and tomorrow. Join us.

Itron is currently looking for a skilled and enthusiastic Information Security Analyst to join our SOC team to primarily assist with the analysis of security alerts and servicing security requests. This person will be a major contributor to network & machine security investigations and provide information from the SOC to security engineers for improving detection and preventative controls.

Responsibilities

Support incident response activities with colleagues throughout the organization and incorporate lessons learned into existing security architectures and practices
Monitor and analyze security events and alerts
Conduct forensic analysis of security-related incidents in a manner consistent with guidance from the organization's counsel or human resources, as the case may be
Participate in threat hunting activities and remain current on emerging cybersecurity threats and mitigation techniques.
Contribute to the development and enhancement of the Information Security Program by collaborating with infrastructure teams to identify gaps and recommend appropriate controls, solutions, policies, and procedures.
Develop tools, utilities, and reports to detect, alert, and report on security issues and policy violations.
Validate security configurations and access to security infrastructure tools, including firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), anti-malware/endpoint protection systems (EDR/HIDS), etc.
Continuously evaluate the organization’s cloud security environment posture, providing regular risk and vulnerability reports, including penetration testing
Validate IT infrastructure and other reference architectures for security best practices, and recommend changes to enhance security and reduce risk where applicable

Requirements

2+ years of experience performing network or system security analysis
Bachelor's degree in related field (Computer Science, Management Information Systems, or Computer Information Systems) or equivalent experience.
Strong problem-solving ability with the desire to take ownership of issues and follow through until resolution
Time management and prioritization skills
Excellent oral and written communication skills
A global perspective on privacy, security, and data protection issues
Actively participate in team discussions to collaborate on goals, creatively solve problems, and further the team’s capabilities
Direct, hands-on experience working with security infrastructure tools such as firewalls, WAFs, endpoint protection, SIEM and log management technology
Knowledge of public cloud configurations and capabilities (Azure preferred, AWS)
Knowledge about MITRE ATT&CK techniques and tactics, and information security and risk management processes and technologies to defend against them

Preferred Skills

Experience automating Microsoft Azure security features and controls
Strong working knowledge of networking concepts, including ports/protocols, Firewalls (Palo Alto, Fortinet, and Cisco), routing and routing protocols, and operating systems (Linux, Windows)
Experience working with PCAP files to support troubleshooting and security/forensic analysis
Experience with email security tools, technologies, and concepts
Familiarity with scripting languages (e.g., Python, PowerShell, Bash)
Knowledge of SIEM Platforms (Microsoft Sentinel and Splunk is a plus)
Knowledge of EDR Platforms (Defender Suite, SentinelOne)
Knowledge of Vulnerability Management platforms (Qualys, Tenable, or Rapid7 is a plus.)
Basic understanding of Docker, Kubernetes, AKS
AZ-900 or more advanced Microsoft Azure certifications (SC-200 is a plus)

What we offer

Opportunity to create a more resourceful world by working on the 21st century's biggest challenges: water, energy, and gas
R&D center with immense growth in the heart of Budapest at Deák Ferenc square
Cutting-edge technologies (Cloud, IoT)
Personal development: English, soft skills, and technical training (Udemy, Pluralsight, etc.)
Benefits: accident and life insurance, private outpatient care support, cafeteria, iPhone with a generous data allowance
Strong culture promoting work-life balance, remote and flexibility

#LI-IB1

The successful candidate's starting salary will be determined based on permissible, non-discriminatory factors such as skills and experience.

Itron is proud to be an Equal Opportunity, Affirmative Action Employer. If you require an accommodation to apply, please contact a recruiting representative at 1-800-635-5461 or email Accessibility@itron.com.

Itron enables utilities and cities to safely, securely and reliably deliver critical infrastructure solutions. We provide smart networks, software, services, meters, and sensors to better manage electricity, gas, water and city services. We are dedicated to creating a more resourceful world.

Itron is committed to building an inclusive and diverse workforce and providing an authentic workplace experience for all employees. If you are excited about this role but your past experiences don't perfectly align with every requirement, we encourage you to apply anyway. In the end, you may be just who we are looking for!

The successful candidate's starting wage will be determined based on permissible, non-discriminatory factors such as skills and experience.

Itron is proud to be an Equal Opportunity Employer. If you require an accommodation to apply, please contact a recruiting representative at 1-800-635-5461 or email Accessibility@itron.com.

Itron is transforming how the world manages energy, water and city services. Our trusted intelligent infrastructure solutions help utilities and cities improve efficiency, build resilience and deliver safe, reliable and affordable service. With edge intelligence, we connect people, data insights and devices so communities can better manage the essential resources they rely on to live. Join us as we create a more resourceful world: www.itron.com

","hiringOrganization":{"@type":"Organization","name":"Itron, Inc.","sameAs":"https://na.itron.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Budapest, Hungary (Local Office)","addressCountry":"Hungary","addressRegion":"Europe"}}}},{"@type":"ListItem","position":6,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-07-19","description":"

Solutions for Today’s Challenges. Vision for Tomorrow’s Opportunities.

Join William Blair, the Premier Global Partnership.

William Blair has delivered trusted advice for nine decades, and we continue to deepen our expertise and relationships across regions, asset classes, and markets throughout North America, Europe, Asia, and Australia.

We are committed to our people and culture, values, clients, and local communities.

What sets us apart is that we are an independent partnership, with employees who have unique experiences, perspectives, and backgrounds. We provide advisory services, strategies, and solutions to meet clients’ evolving needs amid dynamic market conditions and varying industries.

We strive to attract the most qualified, passionate candidates who specialize in investment banking, investment management, private wealth management, and a variety of other business functions.

We work tirelessly to create an inclusive culture and take pride in fostering employees’ professional and personal growth. We empower our people to bring their best thinking each day so we can deliver the tailored, thoughtful work and problem-solving abilities that our clients expect.

Equally, we are proud of our long-term partnerships with the communities in which we live and work, a legacy we inherited from our founder.

We invite you to learn about how we are seeking excellence in everything we do and empowering our clients’ success with passion, creativity, and rigor. For more information, visit williamblair.com.

We're seeking an Information Security Analyst. The qualified candidate will assist in safeguarding the confidentiality and integrity of customer, employee, and business information, ensuring compliance with organizational policies and standards. The Analyst will support day-to-day data analysis and reporting, security awareness, security governance, event/incident investigation, security control assessment, customer due diligence, and other information security related activities. The analyst will work cross functionally to mitigate risks and vulnerabilities across the firm.

Essential Responsibilities

Assist in creating, implementing, and reporting on security awareness campaigns.
Support user awareness training and phishing simulations.
Assist in ensuring compliance with Information Security program, policies, procedures, guidelines, and standards.
Assist in incident response and maintain security documentation.
Monitor metrics in security tools to detect anomalies and trends.
Review data loss prevention alerts for policy compliance.
Perform security governance tasks as needed.
Assist in answering due diligence requests regarding the Firm’s information security program.
Assist with security controls review and mitigation.
Organize and maintain a centralized location for information security documents.

Qualifications

Bachelor's degree in Information Technology or Cybersecurity.
1+ year(s) of Information Security analyst experience.
Familiarity with basic security concepts such as firewalls, malware, authentication, encryption, etc.
Strong interest in cybersecurity and a willingness to learn.
Information Security certifications preferred
Familiarity with data security frameworks.
Strong communication, technical, analytical, and administrative skills.
Microsoft Office knowledge.
Self-motivated, ability to multitask, and demonstrates flexibility.
Effective time management skills with a strong attention to detail.
Project management experience, a plus.
Travel Required: Occasional 0-5%
The role is based in Chicago.
Work is regularly performed in a hybrid environment – with the expectation of being in the Chicago office at least 3 days a week, or more as needed, and from home, and routinely uses standard office equipment.
It may require the maintenance of a home office.

#LI-CH1

#LI-Hybrid

A reasonable estimate of the current base salary range at time of posting is below. Base salary does not include other forms of compensation or benefits. Actual base salary within the specified range is based on several factors, including but not limited to applicant's skills, prior relevant experience, specific degrees and certifications, job responsibilities, market considerations and, if applicable, the location of the position.

This role is eligible for either a discretionary annual bonus (based on company, business unit and individual performance) and/or commission-based incentives.

Our featured benefit offerings include medical, dental and vision coverage, employer paid short & long-term disability and life insurance, 401(k), profit sharing, paid time off, Maven family & fertility benefit, parental leave (including adoption, surrogacy, and foster placement), as well as other voluntary benefits.

Salary Range$60,000—$72,000 USD\n

William Blair is an equal opportunity employer. It complies with all laws and regulations that prohibit discrimination in employment practice because of race, color, religion, creed, ancestry, marital status, gender, age, national origin, sexual orientation, unfavorable discharge from the military service or on the basis of a physical or mental disability that is unrelated to the employee's ability to perform the duties of the job applied for. EOE m/f/d/v

Be aware of hiring scams: William Blair has clear processes and guidelines with regards to recruiting. We do not request personal financial information in connection with an employment application nor does William Blair extend any employment offers without first conducting an interview through one of its registered offices. William Blair does not use instant messaging services such as WhatsApp, Telegram, or iMessage as part of the recruiting or interviewing process.

Note to External Recruiters / Search Firms: William Blair does not accept unsolicited resumes and will not pay for any placement resulting from the receipt of an unsolicited resume. Any unsolicited resumes received will not be considered as a valid submission.

Download William Blair's privacy policies for job applicants:

Contact us should you have any questions or concerns.

","hiringOrganization":{"@type":"Organization","name":"William Blair","sameAs":"https://www.williamblair.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Chicago, Illinois, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":7,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-07-21","description":"

Working at Mercell
At Mercell, we're on a mission to revolutionise public procurement, making it accessible and effortless for everyone involved. Imagine a world where public buyers and visionary suppliers come together seamlessly to make a great deal easier and shape the future. That's what we're all about.

With a dynamic culture built on continuous growth, trust, and collaboration, Mercell offers an environment where your talents can thrive. You will be part of an international environment with ambitious and dedicated colleagues who are passionate about what they do and supported to be themselves.

Your Mission
As an Information Security Analyst at Mercell, you will be part of the Trust & Security team and report to the Head of IT Audit. We are a team of dedicated professionals responsible for ensuring Mercell meets high standards of security, privacy, and regulatory compliance. We support the wider organization by implementing practical controls, managing risks, and enabling secure business operations.

As our new Information Security Analyst, you will have an exciting and impactful role where you'll help drive customer trust, support compliance efforts, and contribute to the continuous improvement of our security practices. You will play a key part in shaping how Mercell manages customer security interactions and meets external expectations around certifications, standards, and risk management.

Core Responsibilities

Lead and support customer due diligence activities, including completing security and compliance sections of RFPs, responding to questionnaires, and participating in customer calls to address security-related inquiries.
Contribute to the maintenance and improvement of IT compliance programs aligned with standards such as ISO/IEC 27001, ISO/IEC 27701, ISAE 3000, SOC 2, and BSI C5.
Manage and execute security and compliance projects independently, ensuring clear organization, timely delivery, and effective communication with stakeholders.
Collaborate cross-functionally across Legal, IT, Engineering, and Compliance teams to drive security initiatives, ideally leveraging experience in a SaaS environment.
Support risk management and incident response processes, including documentation, coordination of follow-ups, and contributing to root cause analysis.

Required Qualifications

Solid understanding of information security and IT compliance frameworks (e.g. ISO/IEC 27001, 27701, SOC 2, ISAE 3000, BSI C5).
Strong organizational skills with the ability to manage multiple projects and priorities effectively.
Previous experience with customers and taking part in customer due diligence activities, completing RFPs, etc.
Clear and professional communication skills, with the ability to work cross-functionally and engage with external stakeholders.
Proficiency with tools such as Jira, Confluence, Google Workspace, etc.

Preferred Qualifications

Experience working in a SaaS or cloud-based environment with a focus on security and compliance.
Exposure to risk assessments, incident response coordination, or audit preparation within an IT or compliance context.
Proficiency with tools such as Jira, Confluence, Google Workspace, etc.

Start date: As soon as possible
Duration: Full Time, Permanent
Workplace type: Flexible working hours / Hybrid remote
Location: Utrecht, the Netherlands
Application Deadline: 10.08.2025. However, do not wait to submit your application - we will read applications and talk to potential candidates as we receive them.

What we Offer
As a growing technology company, we are committed to taking care of our employees through initiatives such as hybrid work to support your work-life balance, health and insurance plans (may differ per country/office), pension plans, paid parental leave, social happenings and competitive salary packages. Please see https://career.mercell.com/post/our-perks-benefits to get more insights on what to expect of perks, benefits and culture when joining Mercell.

Has this sparked your interest?
Then we can't wait to have you join our mission and look forward to receiving your application! If you have any questions for this role, we are happy to chat with you. Please reach out to:
Charles Wilson
IT Director & Security
Email: charles.wilson@mercell.com

We may carry out background checks on applicants to verify information that appears on CVs and other documentation. This background check is carried out by an external party and is not carried out without the consent of the applicant. Current applicants will receive further information about this.

","hiringOrganization":{"@type":"Organization","name":"Mercell","sameAs":"https://www.mercell.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Utrecht, Netherlands","addressCountry":"The Netherlands","addressRegion":"Europe"}}}},{"@type":"ListItem","position":8,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-07-18","description":"

Title: Information Security Analyst

State Role Title: Info Technology Specialist I

Hiring Range: $30.29-$35.19/hourly

Pay Band: 4

Agency: Department of Juvenile Justice

Location: DJJ Training Academy

Agency Website: www.djj.virginia.gov

Recruitment Type: General Public - G

Job Duties

The Virginia Department of Juvenile Justice (DJJ) protects the public by preparing court-involved youth to be successful citizens. DJJ is committed to excellence in public safety by providing effective interventions that improve the lives of youth, strengthening both families and communities within the Commonwealth.

DJJ is seeking an Information Security Analyst. The Information Security Analyst assists in ensuring that a consistent, dependable, and high level of technical security is maintained, and that the Department’s information and IT systems are adequately protected.

The analyst will assist with maintaining the department's KnowBe4 information security awareness training program, maintaining the agency's Nucleus vulnerability management program, maintaining the agency's Information Security Program policies and procedures, and maintaining the agency's governance, risk, and compliance reporting within the Commonwealth's Archer system, and work with the ISO to review and approve information security requests and exceptions.

Minimum Qualifications

General knowledge of information security concepts,
Basic understanding of network architecture, protocols, devices, and services,
Proficiency using basic and advanced information technology solutions,
Good interpersonal skills such as communication and teamwork.

Additional Considerations

Considerable training and/or experience in information technology or related field.

Special Instructions

You will be provided a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to “Your Application” in your account to check the status of your application for this position.

Lay off Policy 1.3: If you have been affected by DHRM Policy 1.3 layoff and possess a valid Interagency Placement Screening Form (Yellow Card) or a Preferential Hiring Form (Blue Card), you must submit the card before the closing date for this position. The Card may be submitted with the state application as an attachment.

DJJ Welcomes Veterans: DJJ is committed to hiring and retaining veterans. If applicable, please submit form DD-214 with your state application. Please include your name and the position number in which you are applying along with the DD-214.

Supplemental Questions: You may be required to respond to position-specific questions at the end of this application. This information may help us evaluate your credentials and qualifications for the job. Failure to respond to any questions may disqualify you from further consideration.

Status Updates/Confirmation: Once you submit your online application, you will instantly receive an application confirmation number. You may use this number to track the status of your application during the recruitment process. Please refer to your account for the status of your application. Updates will not be provided via telephone.

Reasonable accommodations are available to persons with disabilities during application and/or interview processes per the Americans with Disabilities Act. Contact our Human Resources Department for further assistance.

Equal Opportunity Employer: The Department of Juvenile Justice practices fair and equal employment opportunities to all employees and applicants in accordance with applicable laws and regulations. It is our policy to prohibit discrimination on the basis of race, sex, color, national origin, religion, sexual orientation, gender identity, age, veteran status, political affiliation, genetics, or disability in the recruitment, selection, and hiring of its workforce. Qualified individuals with disabilities are encouraged to apply.

Contact Information

Name: Bianca D. Stewart Williams, Talent Acquisition Consultant

Phone: 804-588-4410

Email: djjrecruit@djj.virginia.gov

In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter. Requesting an AHP Letter can be found at AHP Letter or by calling DARS at 800-552-5019.

Note: Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.

","hiringOrganization":{"@type":"Organization","name":"Virginia.gov","sameAs":"https://www.virginia.gov/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"G - K, Hanover, Virginia","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":9,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-07-16","description":"

Greetings from Datamark !!!

Position: Information Security Analyst

Experience: 5+years

Position Overview:

The Information Security Analyst is responsible for the administration of the organization’s information and data security policies and practices of the overall internal security audit program to ensure that the Company is protected in terms of security, compliance and confidentiality.

Primary Responsibilities:

Coordinates and assists with security activities for the enterprise
Operate, maintain, and validate vulnerability scanning of Infrastructure, Applications, and APIs
Information Security Analyst must Review daily threat intelligence.
Ensures compliance to security standards for assigned sites
Schedules and administers internal security audits for Client and Physical Site Audits
Information Security Analyst should Follows up on remediation plans
Support the management and maintenance of security tools with an emphasis on Security Information and Event Monitoring (SIEM) tools.
Assist with the review of technical deployments for risk prior to deployment across the campus.
Information Security Analyst must Recommends risk mitigation solutions based on audit findings
Maintains Security and Compliance Metrics monthly
Assists in the development and delivery of IT risk and security awareness and compliance training programs
Willingness to travel to DATAMARK global sites as necessary
Other duties as assigned

Minimum Qualifications:

Education Requirements:

Bachelor’s degree in Computer Science or related field, experience in lieu of degree can be considered

Field Experience:

At least four years of experience in Information Security

Position Experience:

At least four years of experience in an Information Security Analyst position, or similar position
Demonstrated experience with traditional vulnerability analysis: identify, categorize, prioritize, track, and validate remediation of known vulnerabilities by accountable IT teams

Other Qualifications:

Certification in IT Security required
Knowledge in Information Security policies and practices
Knowledge of third-party auditing and risk assessment methodologies
Experience in an IT Security related environment preferred Required Skills:

Extremely organized and detail oriented.
Capable of holding team members accountable to timely delivery of audit evidences.
Practices and methods of IT strategy, enterprise architecture and security architecture
Excellent analytical and problem-solving abilities to identify and remediate security risks
Team-work mentality to develop security solutions in collaboration with other IT professionals.

Requirements

Nessus / Tenable.IO Scanning and must check for Vulnerability to come up with incidence report

Must have knowledge Vulnerability Patching

EndPoint Detection and Response / EDR

Experience in any Antivirus solution is good

SIEM Tools - SolarWinds (Log Event Manager) is preferred, MS Sentinel

Must have a strong tab on meta data and email Data Loss Prevention / DLP

Must have Knowledge in network security and Vulnerability Management

*Scanning, Vulnerability and Infosec Audit are the key aspects

Compliance Auditing or any other Information Security related Auditing experience can also be considered

Other Qualifications

Knowledge in Information Security policies and practices

Knowledge of third-party auditing and risk assessment methodologies

Experience in an IT Security related environment preferred

Preferred Certifications

Sec+ / CISA / CISM / A+ Cyber

The Information Security Analyst is responsible for Develops and executes security controls, defenses, and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce, and web-based systems. Administers cybersecurity policies to control physical and virtual access to systems. Performs network security audits and testing and evaluates system security configurations to ensure efficacy and compliance with policies and procedures. Conducts penetration testing and vulnerability assessments of applications, operating systems and/or networks. Responds to cybersecurity breaches, identifies intrusions, and isolates, blocks, and removes unauthorized access. Researches and evaluates cybersecurity threats and performs root cause analysis. Assists in the creation and implementation of security solutions. Provides information to management regarding impact on the business caused by theft, destruction, alteration, or denial of access to information and systems.

Responsibilities:

Analyze threats to existing processes and systems and stay updated on evolving threats and vulnerabilities.
Respond to indications of attack or compromise, ensuring timely resolution.
Use security tools and identify automation opportunities.
Evaluate risks using established frameworks and methodologies.
Apply information security, compliance, assurance, and other security practices professionally.
Proactively address and resolve security-related issues.
Identify and implement opportunities to enhance security systems and protocols.
Develop and maintain documentation for best practices, system configurations, and troubleshooting guidelines.
Lead and coordinate security projects to ensure timely completion.
Support team members to promote a collaborative environment.
Contribute to defining and evolving security best practices within the organization.
Conduct or facilitate security awareness training sessions for employees.
Regularly perform vulnerability assessments and recommend mitigation strategies.
Monitor and review security patches for timely applications.
Assist in developing, reviewing, and updating organizational security policies and procedures.
Collaborate with IT departments to integrate security measures into projects and systems.
Configure and fine-tune security tools for improved capabilities.
Ensure compliance with industry regulations and standards, such as SOC-2, ISO27001.
Assist in digital forensics investigations during security incidents.
Evaluate the security postures of third-party vendors and recommend security requirements for contracts.

Required Skills:

Understanding of common Information Security concepts, practices, and procedures.
Understanding of vulnerability analysis, penetration testing, encryption technologies, intrusion detection, incident response.
Proficiency in Microsoft tools such as Azure, Defender, and Office.
Proficiency with the Atlassian suite
Proficiency in Endpoint detection and Response tools such as CrowdStrike or SentinelOne
Experience with vulnerability management tools such as Tenable or Radpi7 InsightVM
Experience with SIEM tools such as Splunk, Rapid7 IDR, Google Chronicle
Excellent attention to detail and strong documentation skills.
Outstanding verbal and written communication skills.
Exceptional problem-solving abilities.

Education & Experience:

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related area of study.
2+ years of relevant experience.
Industry certifications in cyber security incident management preferred.
Experience in analyzing network logs.
Experience in Network Security or Application Security.
Experience with security tools such as EDR, SIEM, EUBA, SOAR.

","hiringOrganization":{"@type":"Organization","name":"Clearwater Analytics","sameAs":"https://www.clearwateranalytics.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Noida Office, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":11,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-08-03","description":"

Symmetrio, a SoluStaff Company, is recruiting for an Information Security Analyst. As an Information Security Analyst, you will be responsible for safeguarding our customer's computer systems, networks, and data from potential security breaches, threats, and vulnerabilities. You will analyze and assess security risks, implement security measures, monitor network activity, and respond to security incidents. Your role will involve collaborating with cross-functional teams, conducting security assessments, developing and implementing security policies, and staying updated with the latest security trends and technologies.

Responsibilities

Monitor computer networks, systems, and applications for potential security incidents and breaches.
Investigate and analyze security breaches, incidents, and vulnerabilities.
Develop and implement incident response plans and procedures to mitigate security risks.
Coordinate and collaborate with internal teams and external stakeholders during security incidents.
Identify and assess potential security risks, threats, and vulnerabilities.
Develop risk mitigation strategies and recommend security controls.
Ensure compliance with relevant security standards, regulations, and best practices.
Stay up to date with the latest security threats, vulnerabilities, and industry trends.
Monitor and analyze security reports, advisories, and alerts from various sources.
Conduct research and analysis to identify emerging security risks and countermeasures.
Provide recommendations and proactive measures to enhance security posture.

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent work experience).
Strong knowledge of information security principles, practices, and technologies.
Experience with security monitoring tools, vulnerability assessment tools, and SIEM solutions.
Familiarity with industry standards and frameworks such as ISO 27001, NIST, and PCI DSS.
Knowledge of network protocols, firewalls, intrusion detection systems, and antivirus software.
Understanding of secure coding practices and application security.
Ability to analyze complex security issues and provide effective solutions.
Excellent communication and interpersonal skills.
Professional certifications such as CISSP, CISM, or GIAC certifications are a plus.

Benefits

Health Care Plan (Medical, Dental & Vision)
401k Retirement Plan (4% match)
Paid Time Off (Vacation, Sick & Public Holidays)

","hiringOrganization":{"@type":"Organization","name":"Symmetrio","sameAs":"https://www.symmetrio.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"United States - Remote","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":12,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-08-07","description":"

About this role:

Wells Fargo is seeking an Information Security Analyst.

In this role, you will:

Participate and identify security risks companywide and ensure that appropriate data security procedures and products are implemented
Maintain an awareness of bank security policies and government regulations pertaining to information security
Review the development, testing, and implementation of security plans, products, and control techniques
Develop and implement security standards, procedures, and guidelines for multiple platforms and diverse systems environments
Investigate and recommend appropriate corrective actions for data security incidents
Identify regulatory changes that will affect information security policy, standards, procedures, and recommend appropriate changes
Provide security consulting and project management services on highly complex information security projects and issues
Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals
Interact with internal customers
Receive direction from leaders and exercise independent judgment while developing the knowledge to understand function, policies, procedures, and compliance requirements

Required Qualifications:

2+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

Ability to make timely and independent decisions while working in a fast-paced and results-driven environment
Must have leadership skills, to be resilient and drive changes.
Any one Information Security certification (Security +, CISSP, CIAM) or IAM vendor based certifications (Cyberark, Oracle, IBM)
Knowledge and understanding of service delivery including SLAs/KPIs
Exposure on escalation processes/matrix and ability to prioritize tasks
Basic troubleshooting skills over UNIX / Database / Mainframe / Active Directory.
Ability to collaborate effectively with different teams, accept challenging assignments and foster robust working relationships with teams.
Knowledge sharing to help the team explore ideas and make them successful.

Job Expectations:

Provides Identity and Access administration within Application/Active directory/Mainframe environment as per requests submitted through various request methods.
Provides basic technical support for routine security-related issues.
Responds to related problem tickets.
Provides on-call 24/7 Access Management/Production support as required or scheduled by management.
Performs periodic review of existing documentation to ensure current understanding of processes and procedures making updates/changes as necessary.
Identifies ways to streamline and automate access management processes to ensure consistency, reduce errors, reduce cycle time, and minimize audit/gap issues.
Performs tasks/projects that is assigned/recommended by Immediate Manager

Posting End Date:

13 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

Greetings from Datamark !!!

Position: Information Security Analyst

Experience: 5+years

Position Overview:

Primary Responsibilities:

Coordinates and assists with security activities for the enterprise
Operate, maintain, and validate vulnerability scanning of Infrastructure, Applications, and APIs
Information Security Analyst must Review daily threat intelligence.
Ensures compliance to security standards for assigned sites
Schedules and administers internal security audits for Client and Physical Site Audits
Information Security Analyst should Follows up on remediation plans
Support the management and maintenance of security tools with an emphasis on Security Information and Event Monitoring (SIEM) tools.
Assist with the review of technical deployments for risk prior to deployment across the campus.
Information Security Analyst must Recommends risk mitigation solutions based on audit findings
Maintains Security and Compliance Metrics monthly
Assists in the development and delivery of IT risk and security awareness and compliance training programs
Willingness to travel to DATAMARK global sites as necessary
Other duties as assigned

Minimum Qualifications:

Education Requirements:

Bachelor’s degree in Computer Science or related field, experience in lieu of degree can be considered

Field Experience:

At least four years of experience in Information Security

Position Experience:

At least four years of experience in an Information Security Analyst position, or similar position
Demonstrated experience with traditional vulnerability analysis: identify, categorize, prioritize, track, and validate remediation of known vulnerabilities by accountable IT teams

Other Qualifications:

Certification in IT Security required
Knowledge in Information Security policies and practices
Knowledge of third-party auditing and risk assessment methodologies
Experience in an IT Security related environment preferred Required Skills:

Extremely organized and detail oriented.
Capable of holding team members accountable to timely delivery of audit evidences.
Practices and methods of IT strategy, enterprise architecture and security architecture
Excellent analytical and problem-solving abilities to identify and remediate security risks
Team-work mentality to develop security solutions in collaboration with other IT professionals.

Requirements

Nessus / Tenable.IO Scanning and must check for Vulnerability to come up with incidence report

Must have knowledge Vulnerability Patching

EndPoint Detection and Response / EDR

Experience in any Antivirus solution is good

SIEM Tools - SolarWinds (Log Event Manager) is preferred, MS Sentinel

Must have a strong tab on meta data and email Data Loss Prevention / DLP

Must have Knowledge in network security and Vulnerability Management

*Scanning, Vulnerability and Infosec Audit are the key aspects

Compliance Auditing or any other Information Security related Auditing experience can also be considered

Other Qualifications

Knowledge in Information Security policies and practices

Knowledge of third-party auditing and risk assessment methodologies

Experience in an IT Security related environment preferred

Preferred Certifications

Sec+ / CISA / CISM / A+ Cyber

","hiringOrganization":{"@type":"Organization","name":"Datamark, Inc.","sameAs":"https://www.datamark.net/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Chennai, Tamil Nadu, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":14,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-08-05","description":"ASSYST is seeking an experienced Information Security Analyst to support our government customer based in Tallahassee, Florida. \n \nLocation: On-site in Tallahassee, Florida \n \nBackground: \nInformation Security Analyst is responsible for interpreting state mandates such as rules or statutes in addition to the FBI CJIS Security policy and drafting appropriate policies, procedures or implementations to comply with those rules as it relates to the client's ecosystem. The information security team researches, troubleshoots, provides support and configures security controls daily. \n \nScope of work:\n<ul>\n\t<li>The Security Analyst to work under the direction of Network Supervisor to assist in developing Continuity of Operation (COOP) and Disaster Recovery (DR) plans for all identified agency systems. </li>\n\t<li>The Security Analyst is expected to work with our staff to perform research, policy creation, conduct tabletop exercises and support staff in transferring knowledge in these areas.</li>\n</ul>\nJob responsibilities:\n\n<ul>\n\t<li>Establishing and continuously enhancing the COOP programs, plans and processes </li>\n\t<li>Establishing and continuously enhancing the DR programs, plans and processes </li>\n\t<li>Establishing and continuously enhancing the Risk Management programs, plans, and processes </li>\n\t<li>Research mandates, regulations and rules for Information Security requirements for the agency.</li>\n\t<li>Conduct interviews and information gathering meetings.</li>\n\t<li>Lead tabletop exercises relating to COOP, Risk Management and DR in conjunction with the Information Security Manager.</li>\n\t<li>Establish applicable security policies and best practices.</li>\n</ul>\nRequired Skills:\n\n<ul>\n\t<li>Minimum of 5 years of IT work experience with demonstrated knowledge in architecture design, software development, database management systems and systems integration in multi-platform environments.</li>\n\t<li>Experience drafting policies, disaster recovery and continuity of operations plans.</li>\n\t<li>Experience in information gathering sessions for technical requirements and leading technical tabletop exercises.</li>\n\t<li>Bachelor’s Degree in Computer Science, Information Systems, Business Administration, or other related field or equivalent work experience;</li>\n</ul>\nASSYST is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, disability, military status, national origin or any other characteristic protected under federal, state, or applicable local law ","hiringOrganization":{"@type":"Organization","name":"ASSYST","sameAs":"https://www.assyst.net/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Tallahassee, Florida","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":15,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-08-05","description":"

Are you passionate about cyber threat detection and response? We are seeking a Cybersecurity Analyst to monitor, analyze, and triage security alerts, ensuring a proactive defense against evolving threats in a Digital Retail Bank (DRB) environment. This role involves SIEM monitoring, incident handling, vulnerability management, and compliance enforcement to maintain the highest security standards. If you have experience in threat intelligence, log analysis, and security policy implementation, this is the perfect opportunity to contribute to a dynamic and cutting-edge cybersecurity team.

Responsibilities

Threat Monitoring & Detection:

Monitor and analyze SIEM alerts to detect potential security incidents.
Conduct log analysis from firewalls, servers, applications, and endpoint security tools.
Develop and refine correlation rules and use cases to improve threat detection.
Utilize threat intelligence sources to enhance anomaly detection and response.

Incident Response:

Perform initial triage and incident handling to assess potential threats.
Conduct root cause analysis to determine the impact and scope of security events.
Maintain detailed incident documentation for compliance and reporting purposes.

Vulnerability Management:

Perform vulnerability scanning and risk assessment to identify security gaps.
Support penetration testing efforts and assist in remediation strategies.
Develop and implement risk mitigation plans to reduce attack vectors.

Security Policy & Compliance:

Ensure adherence to regulatory security frameworks (PCI DSS, ISO 27001, SBP regulations).
Conduct security awareness training for internal teams.
Monitor compliance with security policies and recommend necessary improvements.

Research & Continuous Improvement:

Stay updated on emerging threats, attack techniques, and cybersecurity trends.
Continuously optimize SIEM correlation rules and fine-tune detection mechanisms.
Enhance security operations processes to improve efficiency.

Collaboration & Third-Party Security:

Work closely with internal security teams and third-party service providers to correlate threat intelligence.
Collaborate with IT and business units to enhance overall cyber resilience.

Requirements

Bachelor’s degree in Computer Science, IT, Cybersecurity, or a related field.
4-6 years of experience in infrastructure security, SIEM monitoring, or threat intelligence.
Strong understanding of network protocols, firewalls, VPNs, IDS/IPS, and endpoint security.
Proficiency in using SIEM solutions (QRadar, Splunk, ArcSight, Wazuh, etc.).
Expertise in vulnerability assessment, threat modeling, and risk analysis.
Hands-on experience with security tools (Metasploit, Burp Suite, Nessus, etc.).
Experience in policy development, security guidelines, and compliance frameworks.
Proficiency in scripting languages (Python, PowerShell, SPL, SQL) for security automation.

Professional certifications such as CISSP, CEH, OSCP, or vendor-specific security credentials are a plus.

Objectives & KPIs

Mean Time to Detect (MTTD): Average time taken to detect, analyze, and escalate security incidents.
Incident Resolution Rate: Percentage of incidents resolved within predefined SLAs.
Alert Accuracy: Ratio of false positives vs. true positives identified in SIEM alerts.
SIEM Optimization: Percentage of correlation rules and use cases updated or improved.
Root Cause Analysis (RCA) Completion: Percentage of incidents with a thorough RCA report.
Rule Tuning Frequency: Regular enhancements to improve SIEM efficiency and reduce unnecessary alerts.
Regulatory Compliance: Percentage of adherence to SBP regulations, PCI DSS, ISO 27001, and security standards.

","hiringOrganization":{"@type":"Organization","name":"HugoBank","sameAs":"https://www.hugobank.com.pk/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Karachi, Sindh, Pakistan","addressCountry":"Pakistan","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":16,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-08-06","description":"

About OnlineSales.ai
Built by ex-Amazon ad-tech experts, OnlineSales.ai offers a future-proof Retail Media Operating System - boosting Retailer’s profitability by 7% of Sales! We are an Enterprise B2B SaaS startup, based out of Pune India. With OnlineSales.ai's platform, Retailers activate and delight 10x more Brands by offering an omni-channel media buying experience, advanced targeting, analytics & 2x better ROAS. Tier 1 Retailers and Marketplaces globally are accelerating their Monetization strategy with OnlineSales.ai and are innovating ahead of the market by at least 2 years.

About the Role

This is a full-time on-site role in Pune for a Senior Information Security Analyst at OnlineSales.ai. As a Senior Security Analyst, you will take a leading role in safeguarding our digital infrastructure and ensuring our systems are future-proof against potential threats. You'll dive deep into all aspects of security, from managing our VPC and firewall configurations to detecting and mitigating fraudulent traffic. This role is crucial for setting up, maintaining, and evolving our security frameworks to keep pace with industry advancements and regulatory requirements.

What will you do @OnlineSales?

Develop and enforce policies and procedures to ensure the protection of IT infrastructure and data.

Lead compliance activities related to SOC 2, ISO 27001, GDPR, and CCPA.
Analyze and improve existing security systems and propose strategic solutions for long-term security improvements.
Conduct security assessments and audits, and manage remediation plans.
Collaborate with IT and development teams to integrate security measures into network architectures and cloud services.
Monitor security vulnerabilities and threat intelligence to anticipate and mitigate potential threats.
Manage incident response

You will be a great fit, if you have:

Minimum of 3 years of experience in a cybersecurity role with hands-on experience in compliance and operational security.
Strong understanding of network security, VPC management, firewalls, and intrusion detection systems.
Proven track record in handling SOC 2, ISO 27001, GDPR, and CCPA compliance.
Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
Certifications such as CISSP, CISM, or similar will be highly regarded.

Why OnlineSales.ai?

Startup-y. We believe Startup is a mindset. It’s about being scrappy, being nimble, solving tough problems with constrained resources, and more. It’s about working hard and playing hard
Enterprise SaaS. Opportunity to work with an Enterprise Product SaaS firm with aspirations of growing 10x across the globe
AI-led Retail Tech. We are working to digitize & democratize one of the most exciting and growing verticals - Retail Tech leveraging data, machine learning, and automation (culmination of ad-tech, mar-tech, and analytics for Retail vertical)
Meaningful work. This is not just a job. You can find a job anywhere. This is a place for the bold to get paid who make a real impact on business
No red tape. Say goodbye to pointless meetings or political hoops to jump through. We’re scrappy, believe in autonomy, and empower our teams to do whatever it takes to do the unthinkable
Problem Solving. We ignite the best in you. We exist not only to deliver meaningful innovation but to ignite and inspire the creative problem-solver in you
Quirky & fun. Enjoy new skills and hobbies like being a quiz master, playing board games, trying your hands on percussion, playing Djembe, and spreading love within the org!

","hiringOrganization":{"@type":"Organization","name":"OnlineSales.ai","sameAs":"https://osmos.onlinesales.ai/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Pune, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":17,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-08-09","description":"

Compensation:

$68,495.00-$87,298.00

Compensation Type:

Salary

Employment Type:

Regular

Grade:

E09

Position Summary

The Information Security Analyst provides technical security risk monitoring and risk analysis, and incident investigations of security incidents to protect Central New Mexico Community College’s (CNM) sensitive information and infrastructure from the full spectrum of cyber threats, attacks, and threat actors. The Information Security Analyst will closely consult and collaborate with cross-functional teams and leadership to formalize processes and methodologies to build and enhance the security function. The position fosters an environment to provide for the security measures, conduct risk assessments, and ensure compliance with all regulatory requirements. This role heightens security awareness across the entire CNM Community including, but not limited to, staff, faculty, vendors, contractors, students, and the public through ongoing training and education using all available communication channels.

Duties & Responsibilities

Monitor and configure security systems, including firewalls, IDS/IPS, SIEM, and antivirus solutions to detect security threats and unauthorized access protecting confidentiality of information.
Monitors and configures security systems including firewalls, IDS/IPS, SIEM, and endpoint antivirus solutions to detect security threats and ensure confidentiality, integrity, and availability.
Analyzes security logs, event data, and network traffic to identify and investigate potential security incidents, role discovery, and segregation of duties.
Conducts vulnerability assessments and penetration testing to identify and remediate security vulnerabilities.
Maintains a secure and audit-ready environment with minimal security breaches and audit findings.
Develops and adheres to security policies, procedures, and standards, ensuring role-based security and compliance with regulations.
Collaborates with cross-functional IT teams to implement and maintain security controls, access management, configurations, and patches.
Engages with business users to understand application data needs and provide recommendations and solutions.
Participates in incident response activities, including triage, containment, remediation, eradication, and recovery efforts.
Provides security awareness training and guidance to the CNM user community on data protection and cybersecurity hygiene.
Stays updated on the latest cybersecurity threats, incidents, vulnerabilities, best practices, and industry trends.
Supports security audits, assessments, and compliance initiatives to ensure regulatory adherence.
Participates in the emergency on-call rotation, executing daily monitoring of critical infrastructure.
Reviews measurement statistics and takes action to prevent and improve security posture.
Conducts periodic scanning for vulnerabilities, develops action plans, and tracks completion.
Configures and monitors Next Generation Firewalls, IPS/IDS, CASB, and other advanced security systems.
Oversees technology management of CNM's environment, managing remote, data, and physical access.
Perform other related duties as assigned.

Minimum Qualifications:

Associate degree

AND

Three (3) years of related experience
Certification in a Cybersecurity Related Discipline, a CompTIA Security+ is preferred

This position requires basic knowledge of network security principles, firewalls, and intrusion detection/prevention systems (IDS/IPS)
A combination of education and experience may be substituted for requirements of the position

Best Consideration Date/Posting Close Date: 8/15/2025

EEO STATEMENT:

As an EEO employer, Central New Mexico Community College will not discriminate in our employment practices based on an applicant’s race, ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, serious medical condition or status as a protected veteran or spousal affiliation. Central New Mexico Community College hires only U.S. citizens and individuals lawfully authorized to work in the U.S.

","hiringOrganization":{"@type":"Organization","name":"Central New Mexico Community College","sameAs":"https://www.cnm.edu/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"CNM Main Campus, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":18,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-08-16","description":"

Solutions for Today’s Challenges. Vision for Tomorrow’s Opportunities.

Join William Blair, the Premier Global Partnership.

We are committed to our people and culture, values, clients, and local communities.

We strive to attract the most qualified, passionate candidates who specialize in investment banking, investment management, private wealth management, and a variety of other business functions.

Equally, we are proud of our long-term partnerships with the communities in which we live and work, a legacy we inherited from our founder.

We invite you to learn about how we are seeking excellence in everything we do and empowering our clients’ success with passion, creativity, and rigor. For more information, visit williamblair.com.

Essential Responsibilities

Assist in creating, implementing, and reporting on security awareness campaigns.
Support user awareness training and phishing simulations.
Assist in ensuring compliance with Information Security program, policies, procedures, guidelines, and standards.
Assist in incident response and maintain security documentation.
Monitor metrics in security tools to detect anomalies and trends.
Review data loss prevention alerts for policy compliance.
Perform security governance tasks as needed.
Assist in answering due diligence requests regarding the Firm’s information security program.
Assist with security controls review and mitigation.
Organize and maintain a centralized location for information security documents.

Qualifications

Bachelor's degree in Information Technology or Cybersecurity.
1+ year(s) of Information Security analyst experience.
Familiarity with basic security concepts such as firewalls, malware, authentication, encryption, etc.
Strong interest in cybersecurity and a willingness to learn.
Information Security certifications preferred
Familiarity with data security frameworks.
Strong communication, technical, analytical, and administrative skills.
Microsoft Office knowledge.
Self-motivated, ability to multitask, and demonstrates flexibility.
Effective time management skills with a strong attention to detail.
Project management experience, a plus.
Travel Required: Occasional 0-5%
The role is based in Chicago.
Work is regularly performed in a hybrid environment – with the expectation of being in the Chicago office at least 3 days a week, or more as needed, and from home, and routinely uses standard office equipment.
It may require the maintenance of a home office.

#LI-CH1

#LI-Hybrid

This role is eligible for either a discretionary annual bonus (based on company, business unit and individual performance) and/or commission-based incentives.

Salary Range$60,000—$72,000 USD\n

Download William Blair's privacy policies for job applicants:

Contact us should you have any questions or concerns.

","hiringOrganization":{"@type":"Organization","name":"William Blair","sameAs":"https://www.williamblair.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Chicago, Illinois, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":19,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-08-18","description":"

📝 Company Mission

Our mission is to give the world access to the best products by empowering great brands to reach their growth potential.

💼 About Wayflyer

Today's consumer brands need a capital provider that keeps pace with their growth ambitions. Traditional financing options are slow, cumbersome and often out of reach. That's why we built Wayflyer.

Our unique technology allows us to assess businesses in minutes, generate financing offers that reflect their growth potential and send funds in as little as 24 hours.

Since launching in April 2020, we've deployed over $4.5bn to thousands of brands worldwide, backed by Tier 1 banks like J.P. Morgan. We've become a trusted financing partner for some amazing brands, like True Classic, Little Words Project and Kekoa Foods.

Teams at Wayflyer are truly cross-functional. You'll be collaborating with ambitious colleagues from around the world - all striving to deliver on a huge opportunity. Check out this video to hear directly from them.

💛 Culture & Values at Wayflyer

At Wayflyer, we value being sound people, excellent operators, and ambitious overachievers, working together with integrity, creativity, and bold optimism to deliver exceptional results. To learn more, please visit our website.

🚀 Your Role at a Glance: The key ways you'll bring value to the team

Take ownership of security tasks such as risk management and security reviews of SaaS tools and new system implementations
Deliver Information Security Awareness training, establish a security-focused culture, and implement activities to promote this culture throughout the organization
Recommend and implement security improvements to existing processes and Wayflyer's SaaS tool stack
Manage, update, and communicate security policies and documentation in line with ISO 27001 standards
Respond to day-to-day security questions and incidents from across the organization
Support compliance initiatives and security audits, including SOC 2 Type II certification maintenance
Conduct security risk assessments for new business requirements and system changes
Work closely with IT Teams, TPRM, and Legal departments to ensure safety and compliance
Implement and maintain security controls including access management, encryption protocols, and monitoring systems
Collaborate with cross-functional teams to integrate security best practices into development workflows
Monitor and respond to security events using our logging and monitoring infrastructure
Assist in developing Information Security metrics and distribute the metrics to relevant stakeholders

🔨 What Makes You a Great Fit

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field, or equivalent practical experience
2-3 years of professional experience in Information Security
Experience with SOC 2 Type II or ISO 27001 audits and compliance frameworks
Strong understanding of security best practices including encryption, access controls, and network security
Knowledge of cloud security principles, preferably AWS
Experience with security tools and technologies such as vulnerability scanning, GRC, SIEM, and monitoring platforms
Understanding of risk management frameworks and security assessment methodologies
Familiarity with regulatory requirements including GDPR, Data Protection Act 2018, and PCI-DSS
Strong problem-solving skills and attention to detail
Excellent communication abilities and proven track record of successful team collaboration
Experience with policy development and documentation
Understanding of secure software development practices and DevSecOps principles

How You’ll Stand Out

Given what we do, experience in financial services, fintech, and business-to-business organizations is particularly valuable to us.
You have enough knowledge and experience to independently deliver well scoped security projects within a team. You understand the importance of security and make security-related decisions with support from your teammates.
You're amazing at prioritization. You make sure you're not spread too thin while also giving teams the support they need. You spend your time on the things that make a positive difference.
You're always looking to learn and grow, on a personal and professional level. And you're always looking to help others learn and grow by sharing your own knowledge and experience.
You know why diversity, equality, inclusion and belonging matters, and speak up when we can do better.
This role reports directly to the Director of Corporate IT and Information Security and will be based in the EU/UK due to timezone requirements.

🤝 What to Expect After You Apply

You can expect to hear from a member of our Talent Acquisition team soon. If we believe you're a good fit, the first step will be a conversation with a recruiter who will guide you through the next stages of the process. The full interview process, which includes meeting the Hiring Manager and completing a case study or interview loop, typically takes approximately four to six weeks.

🏖️The Perks of Being at Wayflyer

🌴 Time Off That Matters

Recharge with 25 days of paid annual leave, plus public holidays.

🧘 Your Wellbeing

Access support and resources to support your wellbeing, including our Wellbeing @ Wayflyer ERG.

🫀 Comprehensive Health & Protection

Stay covered with private healthcare, life insurance, and critical illness cover.

👵 Secure Your Future with Our Pension Plan

Our pension plan helps you build a strong foundation for tomorrow, starting today.

🍼 Family-First Policies

We offer generous parental and adoptive leave, including 6 months of paid leave for Primary Caregivers and 3 months of paid leave for Secondary Caregivers.

💰 Share in Our Success

With our equity scheme, you're not just an employee; you're a stakeholder in our journey.

🌴 Work From Abroad!

Enjoy the freedom to work remotely from anywhere in the world for up to 60 calendar days a year.

📍Global Offices and Working Policy

🇮🇪 Dublin, Our Buzzing HQ

Our headquarters operates a hybrid model. The number of in-office days depends on your team, but the majority of teams and our SLT are typically in 3-4 days per week, giving you valuable exposure to senior leadership.

🇬🇧 London, One Big Family

Home to around 30 employees, our brand-new London office also runs on a hybrid model. You’ll often find our CEO working alongside the team with regular visits.

🇦🇺 Sydney, Small but Mighty

Our close-knit Sydney office has around 20 employees and follows a flexible hybrid model, fostering strong collaboration.

🇺🇸 Atlanta, New York & Charlotte, Stateside Collaboration

Each of our US offices has 8-10 employees and operates with a flexible hybrid approach, blending in-person connection with remote freedom.

🌍 Remote, Across the US & Europe

The majority of our Tech org works remotely across the UK and Europe, coming together throughout the year for off-sites, company kick off and technical kick off. We also have a growing number of remote team members across the US.

💡 How We Handle Your Personal Data

By submitting your application, you acknowledge that Wayflyer Limited will process your personal data for the purpose of evaluating your suitability for the role. Such processing is based on the need to take steps prior to entering into a potential employment agreement. To learn more about how we handle your personal data, you can contact our privacy team at privacy@wayflyer.com or review our privacy notice at https://wayflyer.com/privacy-notice.

","hiringOrganization":{"@type":"Organization","name":"Wayflyer","sameAs":"https://www.wayflyer.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Spain","addressCountry":"Spain","addressRegion":"Europe"}}}},{"@type":"ListItem","position":20,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-08-14","description":"

This experienced Information Security Analyst will report to the Division Director of Information Security for Tarkett North America and Tarkett Sports, and will contribute to and execute cyber-security vision, strategy, and transformation programs while working in a remote and flexible work environment.

What you’ll do:

Contribute to and drive specified components of the Division Information Security Plan, interfacing with Division and Global Teams
Research and address cybersecurity issues / incidents in close partnership with Network, Infrastructure, Global SOC team, and the Division Director of Information Security
Support and facilitate the annual NIST CSF assessment process and CMMC compliance including issue tracking and gap solutions: from consulting through implementation assurance / testing
Facilitate pen testing / vulnerability scan remediation and tracking, providing solutions / consulting to Infrastructure teams
Manage OT vulnerability monitoring and remediation in coordination with Engineering teams
Security assessment and consulting for Division Level Initiatives such as Power BI and core ERP implementations / upgrades
Manage and maintain IT supply chain security processes including vendor assessment and SAAS / application inventory management
Contribute as a security assessor and thought leader for solutions such as IAM, SASE, Zero-Trust
Assist Director to support cybersecurity communication, awareness, and training plans for IT and end users
Develop, monitor, and maintain KPIs and SLA’s in coordination with the Division Director
Maintain an in-depth and current technical knowledge of industry cyber and information security trends
Develop relationships as a trusted partner to Network, Infrastructure, and Global teams

Education and Experience:

• Bachelor’s Degree required

• 5+ years of experience in IT

• Certifications such as CISSP, CCSP, CISM / demonstrated commitment to professional

development

• Will have experience working in a large manufacturing and distribution company, within IT in a security analyst role or similar, ideally with distributed and global teams.

• Understanding of cybersecurity / privacy frameworks / standards such as: NIST, CMMC, ISO, SOC2, GDPR, HIPAA, PCI etc.

• Experience with penetration testing, vulnerability assessments, and coordinating remediation

• Application and development security – DevSecOps, secure SDLC

• Infrastructure / Network security – NGFW, SASE, Zero-Trust, EDR, micro-segmentation, Identity & Access Mgmt.

• Cloud security – Azure, AWS, or Google

• Resilience during security crises and events

• Organized with attention to detail

• Excellent analytical, logical thinking, and problem-solving skills

• Excellent verbal and written communication skills

What We Offer

A commitment that Safety is #1
Competitive benefits, pay, and retirement plan options!
Career growth, stability, and flexible work arrangements.

Responsible Manufacturing – Protecting Our Planet for the Future

We utilize renewable energy and a closed loop recycled water process.
We are committed to reducing greenhouse emissions and water consumption.
We are the only flooring company recognized by the Asthma and Allergy foundation.

Who we are:

With a history of 140 years, Tarkett is a worldwide leader in innovative flooring and sport surface solutions with 12,000 employees and 34 industrial sites. Offering a wide range of products including vinyl, linoleum, rubber, carpet, wood, laminate, artificial turf, and athletic tracks. The Group serves customers in more than 100 countries across the globe.

Committed to change the game with circular economy and to reducing its carbon footprint, the Group has implemented an eco-innovation strategy based on Cradle to Cradle® principles, fully aligned with its Tarkett Human-Conscious Design® approach.

Tarkett is listed on Euronext (Compartment B, ISIN FR0004188670, ticker: TKTT). www.tarkett-group.com

Tarkett is an equal opportunity employer. We value diversity in backgrounds and in experiences and promote an inclusive workplace where all employees can perform at their best.

","hiringOrganization":{"@type":"Organization","name":"Tarkett","sameAs":"https://www.tarkett-group.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"US01 - Solon, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":21,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-08-15","description":"

ABOUT ALEUT FEDERAL

At Aleut Federal, we believe the company and its mission is just as important as the job you are applying for. Aleut Federal is an Alaskan Native-owned enterprise whose purpose is to support our “Shareholders,” the Unangax, the indigenous people of the Aleutian Islands of Alaska. People are at the core of everything we do. We support our Shareholders by providing excellent service and quality results to our Clients, the various branches of the federal government. We engage in our local markets, so community service is embedded into our process.

Our culture nurtures the strength of our workforce through mentorship and coaching, providing opportunities for growth, and competitive benefits. We support and encourage diversity, inclusion, and accountability at every level.

The Aleut Federal motto is “We are One” because we truly believe that with one heart, one mind, and one purpose, we can accomplish our mission and be an organization anyone would be proud to be a part of.

POSITION SUMMARY

The Information Security Analyst provides expert-level cybersecurity oversight and technical support to protect AF TENCAP’s multi-domain information systems and networks. This role develops and maintains accreditation packages, conducts vulnerability assessments, and coordinates with internal teams, leadership, and external agencies to ensure full compliance with DoD and Air Force cybersecurity directives. Operating with a high degree of autonomy, the analyst advises leadership on risk mitigation strategies, drives security process improvements, and ensures operational readiness of systems at all classification levels. A constant focus on IT security vigilance, incident response, and COMSEC responsibilities is critical to safeguarding AF TENCAP’s mission and information assets.

ESSENTIAL JOB FUNCTIONS

Develop, maintain, and manage system certification and accreditation packages in accordance with DoD, AF, and intelligence community cybersecurity requirements, including RMF, NIST SP 800-53, ICD 503, and DoDI 8510.01.
Analyze system vulnerabilities, interpret risk assessment results, and recommend remediation strategies to leadership.
Oversee vulnerability scanning, patch management compliance, and configuration control processes across all AF TENCAP systems.
Lead incident response efforts, coordinate investigations, document findings, and ensure timely resolution of security events.
Manage and safeguard COMSEC material, including keying cryptographic equipment, accounting for and inventorying materials, destroying superseded keys, and training designated personnel in COMSEC procedures in accordance with DAFMAN 17-1302-0.
Advise leadership and system owners on security-related impacts of new technologies, system modifications, and operational changes.
Consult with program managers, system administrators, and network teams to ensure integrated security controls and continuous monitoring are maintained.
Educate and train personnel on information assurance principles, security best practices, and AF TENCAP-specific cybersecurity requirements.
Conduct weekly audit reviews of system logs, security tools, and intrusion detection/prevention systems, documenting anomalies and corrective actions.
Coordinate with external agencies and accreditation authorities to ensure security packages are approved and remain current.
Operate with a high degree of autonomy, proactively identifying risks, implementing safeguards, and adapting to evolving mission and threat environments.

EDUCATION/TRAINING

High School Diploma.
Hold and maintain an 8570 IAT II compliant certification (Sec+).

EXPERIENCE

5+ years of Information Security experience (May be substituted for bachelor’s degree in relevant field and 1 year of relevant experience)
Experience performing vulnerability scanning and incident response.
Experience supporting COMSEC equipment and keying procedures.
Experience with SCAP and ACAS tools.

SKILLS/ABILITIES

Strong communication and problem-solving skills.
Familiarity with RMF, NIST SP 800-53, ICD 503, and DoDI 8510.01

PHYSICAL DEMANDS

Must be able to sit for prolonged periods
Must be able to bend, stoop, kneel, and/or squat
Must be able to perform repetitive tasks or motions for prolonged periods
Must have sufficient physical strength, balance, hand-eye coordination, and stamina to complete various tasks.

WORK ENVIRONMENT

This is an Onsite position that requires work to be performed onsite at a customer location.
Working indoors in an office or home office environment.

SPECIAL REQUIREMENTS

Must have or be able to obtain and maintain a Top Secret/SCI clearance.
Must be able to be cleared for base or site access.
Must be a US Citizen.

Locations: This position will be expected to perform duties at the customer facility within Colorado Springs.   

Rate: $94,500 – 105,000 (final rate based on experience)

Closing Date: We will be accepting applications for this position until 5 September 2025.  

Aleut offers the following benefits to eligible employees:   

Health insurance  
Dental/Vision Insurance   
Paid Time Off  
Short- and Long-Term Disability   
Life insurance   
401k, and match

EEO Statement:  

Aleut Federal, LLC provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or genetics. In addition to federal law requirements, AF complies with applicable state and local laws governing nondiscrimination in employment in every location where the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. AF prohibits workplace harassment based on race, color, sex, religion, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status.

#aae

#CJ

","hiringOrganization":{"@type":"Organization","name":"Aleut Federal","sameAs":"https://www.aleutfederal.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Colorado Springs, Colorado, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":22,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-08-15","description":"

ABOUT ALEUT FEDERAL

POSITION SUMMARY

ESSENTIAL JOB FUNCTIONS

Develop, maintain, and manage system certification and accreditation packages in accordance with DoD, AF, and intelligence community cybersecurity requirements, including RMF, NIST SP 800-53, ICD 503, and DoDI 8510.01.
Analyze system vulnerabilities, interpret risk assessment results, and recommend remediation strategies to leadership.
Oversee vulnerability scanning, patch management compliance, and configuration control processes across all AF TENCAP systems.
Lead incident response efforts, coordinate investigations, document findings, and ensure timely resolution of security events.
Manage and safeguard COMSEC material, including keying cryptographic equipment, accounting for and inventorying materials, destroying superseded keys, and training designated personnel in COMSEC procedures in accordance with DAFMAN 17-1302-0.
Advise leadership and system owners on security-related impacts of new technologies, system modifications, and operational changes.
Consult with program managers, system administrators, and network teams to ensure integrated security controls and continuous monitoring are maintained.
Educate and train personnel on information assurance principles, security best practices, and AF TENCAP-specific cybersecurity requirements.
Conduct weekly audit reviews of system logs, security tools, and intrusion detection/prevention systems, documenting anomalies and corrective actions.
Coordinate with external agencies and accreditation authorities to ensure security packages are approved and remain current.
Operate with a high degree of autonomy, proactively identifying risks, implementing safeguards, and adapting to evolving mission and threat environments.

EDUCATION/TRAINING

High School Diploma.
Hold and maintain an 8570 IAT II compliant certification (Sec+).

EXPERIENCE

5+ years of Information Security experience (May be substituted for bachelor’s degree in relevant field and 1 year of relevant experience)
Experience performing vulnerability scanning and incident response.
Experience supporting COMSEC equipment and keying procedures.
Experience with SCAP and ACAS tools.

SKILLS/ABILITIES

Strong communication and problem-solving skills.
Familiarity with RMF, NIST SP 800-53, ICD 503, and DoDI 8510.01

PHYSICAL DEMANDS

Must be able to sit for prolonged periods
Must be able to bend, stoop, kneel, and/or squat
Must be able to perform repetitive tasks or motions for prolonged periods
Must have sufficient physical strength, balance, hand-eye coordination, and stamina to complete various tasks.

WORK ENVIRONMENT

This is an Onsite position that requires work to be performed onsite at a customer location.
Working indoors in an office or home office environment.

SPECIAL REQUIREMENTS

Must have or be able to obtain and maintain a Top Secret/SCI clearance.
Must be able to be cleared for base or site access.
Must be a US Citizen.

Locations: This position will be expected to perform duties at the customer facility within Colorado Springs.   

Rate: $94,500 – 105,000 (final rate based on experience)

Closing Date: We will be accepting applications for this position until 5 September 2025.  

Aleut offers the following benefits to eligible employees:   

Health insurance  
Dental/Vision Insurance   
Paid Time Off  
Short- and Long-Term Disability   
Life insurance   
401k, and match

EEO Statement:  

#aae

#CJ

","hiringOrganization":{"@type":"Organization","name":"Aleut Federal","sameAs":"https://www.aleutfederal.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Colorado Springs, Colorado, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":23,"item":{"@type":"JobPosting","title":"Information Security Analyst","datePosted":"2025-08-20","description":"

About the Company

Valon’s mission is to empower every homeowner. We believe the journey of home ownership starts when you get your keys, but lasts far beyond. We’re creating a world where home ownership comes with ease, security, and financial know-how. Our growing team of engineers, operators, product enthusiasts, and experienced servicing professionals are leveraging technology to fundamentally improve the homeownership experience. Through mortgage servicing—the process of paying off one’s mortgage—Valon is taking the first step in transforming the industry one homeowner, and lender, at a time.

ABOUT THE TEAM

Our customers entrust us with some of their most sensitive and personal financial information, and it is the ultimate mission of Valon’s Security team to ensure we have sound programs, processes, and automation in place to safeguard our customers’ data. The Security team protects the infrastructure and data for processing billions of dollars of mortgage loans. We work cross-functionally with product, engineering, IT, legal, and more to enable security throughout the organization and engage with internal and external assessors to continuously evaluate Valon’s security posture.

ABOUT THE ROLE

We are seeking a motivated Information Security Analyst to join our growing team! As a key security member at Valon, you will play a critical role in ensuring the security of our organization's systems, cloud infrastructure, products and data. This role will be working closely with the CISO and the Security team, and is responsible for ensuring the company’s technical controls meet security compliance requirements, managing risks and remediation, supporting operational and monitoring efforts, and driving program management activities. The ideal candidate has a strong foundation in security principles, an eye for detail, a proactive approach to problem-solving, and the ability to collaborate with cross-functional teams to ensure we protect our most critical assets to uphold trust with our customers and stakeholders.

RESPONSIBILITIES

Assist in implementing and maintaining compliance with frameworks (SOC 2, NIST CSF, CIS) and regulatory requirements (NYDFS, GLBA, Safeguards, CCPA and related)
Support internal and external security audits and exams, including evidence gathering and remediation tracking
Review, manage, and monitor security policies for compliance
Manage and coordinate remediation for vulnerability, security, and compliance issues across stakeholders
Conduct security risk assessments and monitoring
Support on-call and operational security activities including monitoring security alerts, investigating incidents, vendor security reviews, security awareness and training, and other tasks
Manage and track security metrics, KPIs and reporting
Manage security policies, standards, and procedures
Maintain customer facing security documentation and informational assets

IDEAL BACKGROUND

Minimum of 2-3 years as a security analyst or security program manager with relevant responsibilities and background
What skills are needed to succeed in this role?

Security compliance including security frameworks/certifications (SOC 2, NIST CSF, CIS, ISO) and regulatory requirements (NYDFS, GLBA, Safeguards, CCPA and related)
Security controls development
Risk and issue remediation
Security reviews / risk assessments
Vulnerability management
Security policies, standards and procedures
Good program and project management skills
Ability to organize and prioritize work in a dynamic and fast paced environment
Ability to work independently with some direction

Great to Have (but not required)

Relevant security certifications based on career experience (CompTIA Security+, CC, SSCP or related), or seasoned career level (CISSP, CISM, CRISC or related)
Cloud environments - GCP is a plus
Knowledge of other security domains (Access management, Detection & Response, Vulnerability Management, Cloud Security, Logging & Monitoring) is a plus
Startup environments exposure, or environments building from the ground up

Location: US (Remote) or NYC office (Hybrid - onsite)

Throughout the interview process, please remember that emails will only be from valon.com emails. We won't ever be asking for any personally identifiable information during the interview process itself. Please reach out to talent@valon.com if you have any requests to verify the authenticity of an outreach.\n \nValon is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws. Valon makes hiring decisions based solely on qualifications, merit, and business needs at the time.","hiringOrganization":{"@type":"Organization","name":"Valon","sameAs":"https://valon.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Remote"}}}},{"@type":"ListItem","position":24,"item":{"@type":"JobPosting","title":"Senior Associate Managed Services Information Security Analyst","datePosted":"2025-07-16","description":"

Additional Career Level Description:

Knowledge and application:

Applies learned techniques, as well as company policies and procedures to resolve a variety of issues.

Problem solving:

Works on problems of moderate scope, often varied and nonroutine where analysis requires a review of a variety of factors.
Focuses on providing standard professional advice and creating initial analysis for review.

Interaction:

Builds productive internal/external working relationships to resolve mutual problems by collaborating on procedures or transactions.

Impact:

Work mainly impacts short term team performance and occasionally medium-term goals.
Supports the achievement of goals through own personal effort, assessing own progress.

Accountability:

Exercises some of own judgement and is responsible for meeting own targets, normally receiving little instruction on day-to-day work, general instructions on new assignments.
Manages own impact on cost and profitability.

Workplace type:

Hybrid Working

","hiringOrganization":{"@type":"Organization","name":"NTT DATA","sameAs":"https://hello.global.ntt/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"hyderabad, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":25,"item":{"@type":"JobPosting","title":"Information Security Analyst II","datePosted":"2025-07-20","description":"

\"I can succeed as an Information Security Analyst II.\" 

The Information Security Group, within ITG has an opening for an Information Security Analyst II, who will work on Identity Access Management (IAM) initiatives. As one of our IAM Security Analysts, you’ll protect us from access related risk by enabling the right access to the right people at the right time. Your insight will help mitigate risk by using data to influence change in our organization. By examining our systems and procedures, you’ll assist us in uncovering potential risks as we evolve, simplify and accelerate. Our compliant and continuous process improvements need your perspective and input.

“I am the right person Capital Group is looking for.” 

Partner and collaborate with Business and IT groups to ensure IAM controls are implemented and compliant.

Drive Customer Experience excellence in IAM Operations and Service delivery.

Participates in IAM automation and Data analytic initiatives using AI/ML and process improvements to enhance our controls.

Through collaboration with internal, and external stakeholders, leverage IAM operational and governance risk reporting (eg. SLA/KPI’s) to derive insights to meet IAM controls and protect Capital Group’s data.

Communicate on a regular basis to IAM management relating to IAM risk issues, Operational performance and Business/IT initiatives.

 Qualifications:

2+ years’ experience in an analyst role within IAM/Risk Security related function

Strong verbal and written communication skills and the ability to effectively communicate with IAM Leadership and Business groups

Ability to provide appropriate solutions using technical depth in risk and data to be able to analyze large and complex data sets.

Experience implementing or utilizing Identity and Access Management frameworks (e.g. NIST*)

Technology (AWS Cloud, CISSP, PowerBI, CoPilot, GenAI, Snowflake etc.) a plus.

‎

San Antonio Base Salary Range: $81,249-$129,998

‎

Orange County Base Salary Range: $98,869-$158,190

‎

In addition to a highly competitive base salary, per plan guidelines, restrictions and vesting requirements, you also will be eligible for an individual annual performance bonus, plus Capital’s annual profitability bonus plus a retirement plan where Capital contributes 15% of your eligible earnings.

You can learn more about our compensation and benefits here.

* Temporary positions in Canada and the United States are excluded from the above mentioned compensation and benefit plans.

We are an equal opportunity employer, which means we comply with all federal, state and local laws that prohibit discrimination when making all decisions about employment. As equal opportunity employers, our policies prohibit unlawful discrimination on the basis of race, religion, color, national origin, ancestry, sex (including gender and gender identity), pregnancy, childbirth and related medical conditions, age, physical or mental disability, medical condition, genetic information, marital status, sexual orientation, citizenship status, AIDS/HIV status, political activities or affiliations, military or veteran status, status as a victim of domestic violence, assault or stalking or any other characteristic protected by federal, state or local law.

","hiringOrganization":{"@type":"Organization","name":"Capital Group","sameAs":"https://www.capitalgroup.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Irvine, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":26,"item":{"@type":"JobPosting","title":"Senior Information Security Analyst","datePosted":"2025-07-15","description":"

DLA Piper is, at its core, bold, exceptional, collaborative and supportive. Our people are the backbone, heart and soul of our firm. Wherever you are in your professional journey, DLA Piper is a place you can engage in meaningful work and grow your career. Let’s see what we can achieve. Together.

Summary

The Senior Information Security Analyst is responsible for identifying, investigating, and addressing both internal and external threats. This position requires a deep understanding of various threats, attacks, and malware to develop effective detection and protection measures for the enterprise. The position will collaborate with the IT department to maintain security controls, which includes tuning detection systems, updating control policies, and automating processes. Additionally, this role involves directly managing relationships with our security operations vendors and providing technical leadership and mentorship to a team of security analysts. This position plays a critical role in driving initiatives for advanced threat detection, incident response, and vulnerability management, which are vital for maintaining a proactive and robust security posture. The ideal candidate will combine extensive technical expertise in Security Operations (SecOps) with proven leadership skills, enabling them to enhance our security strategy and effectively respond to the evolving threat landscape.

Location

This position can sit in our Baltimore, Reston, or Washington, DC office and offers a hybrid work schedule.

Responsibilities 

Mentoring and guiding Information Security Analysts.
Responsible for evaluating the effectiveness of and improving various information security program functions at the Firm.
Reviewing Security Incident and Event Management (SIEM) systems, which includes regular reporting of metrics and summaries regarding ongoing investigations and ticket tracking,
Performing alert triage, which involves investigating and analyzing security incidents, identifying root causes, and developing appropriate mitigation strategies.
Ensuring effective Endpoint Threat Detection, including EDR capabilities, traditional antivirus, asset management, and familiarity with baseline and configuration management tools.
Managing Next Generation Firewalls and/or Intrusion Detection/Prevention Systems (IDS/IPS).
Engaging in Threat Hunting and utilizing Threat Intelligence.
Utilizing malware sandbox technologies and interpreting the results.
Overseeing Incident Response tools, processes, and capabilities.
Possessing experience or a deep understanding of vulnerability and configuration management.
Conducting independent project work.

Desired Skills  

Communication Skills: Proficient in both verbal and written communication, with the ability to convey technical information to non-technical audiences. Analytical Skills: Strong analytical abilities with a keen attention to detail, essential for identifying and addressing security events. SIEM Proficiency: Skilled in identifying, triaging, and analyzing security events using Security Information and Event Management systems. Incident Response Knowledge: Deep understanding of incident response processes and methodologies. Scripting Experience: Familiarity with scripting languages to automate security operations and enhance the incident response process. Attacker Methodology: Demonstrated understanding of the methodologies used by attackers, which supports proactive defense measures. Intrusion Detection: Solid grasp of intrusion detection systems, AI-based attack detection and prevention strategies, and SOC (Security Operations Center) operations. Cloud Security: Knowledge of cloud infrastructure and security considerations in a cloud environment. Core Infrastructure Knowledge: Familiarity with core infrastructure components such as DNS, Active Directory, and Exchange. Security Tools Experience: Prior experience with security tools like Microsoft Defender, CrowdStrike, and Palo Alto Networks is desirable. Professional Services Background: Experience in professional services sectors such as legal, finance, or consulting is preferred. These competencies are critical for effectively managing security operations and responding to incidents in a dynamic environment.

Minimum Education  

Bachelor's Degree in Information Security, Cybersecurity or similar fields.

Preferred Education

Master's Degree in Information Security, Cybersecurity or similar fields.

Certificates

Professional-level industry certification (e.g. CISSP, GIAC, SANS, etc.) preferred.

Minimum Years of Experience 

7 years of experience working within Cybersecurity field

Essential Job Expectations

While the specific job requirements of a DLA Piper position may vary depending upon scope of the job and area of specialty, there are certain universal requirements that are expected of all DLA Piper employees, which include but are not limited to:  

Effectively communicate, verbally and in writing, with clients, lawyers, business professionals, and third parties.
Produce deliverables, answer phone calls, and reply to correspondence in an efficient and responsive manner.
Provide timely, accurate, and quality work product.
Successfully meet deadlines, expectations, and perform work duties as required.
Foster positive work relationships.
Comply with all firm policies and practices.
Engage in both physical and sedentary activity, such as (a) working at a computer for extended periods of time, including on-screen reading and typing; (b) participating in digital/virtual conference calls; (c) participating in meetings as needed.
Ability to work under pressure and manage competing demands in a fast-paced environment.
Perform all other duties, tasks or projects as assigned.

Our employees are expected to embrace and uphold our firm values as a part of our DLA Piper culture. We are committed to excellence in how we represent our clients and develop our people.  

Physical Demands

Sedentary work: Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met.  

Work Environment  

The individual selected for this position may have the opportunity for a hybrid work arrangement comprised of remote and in-office work, the requirement for which will be determined in coordination with the hiring manager or supervisor and may be modified in the firm’s discretion in the future.

Disclaimer  

The purpose of this job description is to provide a concise statement of the work elements and to organize and present the information in a standardized way. It is not intended to describe all the elements of the work that may be performed by every individual in this classification, nor should it serve as the sole criteria for personnel decisions and actions. The job duties, requirements, and expectations for this position may be modified at the Firm’s discretion at any time. This job description does not change the at-will nature of employment.

Application Process   
Applicants must apply directly online instead of sending application materials via email.

Accommodation  

Reasonable accommodations may be made upon request to permit individuals with a disability to perform the essential functions and responsibilities of the position or to participate in the job selection process. If you have a request for an accommodation during the application process, please contact careers@us.dlapiper.com.

Agency applications will not be considered.   

No immigration sponsorship is available for this position.  

The firm’s expected hiring range for this position is $92,637 - $144,364 per year depending on the candidate’s geographic market location.

The compensation offered for employment will also be dependent on other factors including the candidate’s experience, skills, educational and professional background, and overall qualifications. We offer a comprehensive package of benefits including medical/dental/vision insurance, and 401(k).

#LI-KS1

#LI-Hybrid

DLA Piper is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Job applicant poster viewing center.

","hiringOrganization":{"@type":"Organization","name":"DLA Piper","sameAs":"https://www.dlapiper.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Washington DC, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":27,"item":{"@type":"JobPosting","title":"Information Security Analyst Advisor","datePosted":"2025-07-16","description":"

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Secret

Clearance Level Must Be Able to Obtain:

Top Secret

Public Trust/Other Required:

None

Job Family:

Information Security

Job Qualifications:

Skills:

CISSP, Computer Security Incident Response, Information Security

Certifications:

None

Experience:

5 + years of related experience

US Citizenship Required:

Yes

Job Description:

GDIT has an exciting opportunity to support U.S. Army Europe as an Information Security Analyst Advisor on our EMITS Program Team in Wiesbaden Germany.

YOUR IMPACT

Own your opportunity to work alongside federal civilian agencies. Make an impact by providing services that help the government ensure the well being of U.S. citizens.

JOB DESCRIPTION

The Information Security Analyst Advisor will be responsible for assisting the ISSM in ensuring that a Certification and Accreditation package is prepared and maintained in accordance with (IAW) the DoDI 8510.01 Risk Management Framework (RMF) for DoD Information Technology (IT). They are also tasked with verifying systems in APMS and process each accreditation package in eMASS under the RMF. The Information Systems Analyst Advisor will also be responsible

HOW YOU WILL MAKE AN IMPACT:

Collect artifacts and develop/refine COOP/DRP; System Security Plans and Standard Operating Procedures as needed to ensure compliance with NIST SP 800-53 and CNSSI 1253.
Ensure all IA/Cybersecurity Controls for assessment and authorization are met and ultimate submission of package to the AO for an Approval to Operate on all Software and Hardware.
Perform Security Control Assessor (SCA-V) duties
Perform RMF Assessment and Authorization (A&A) validations.
Perform pre-validation A&A that includes performance of A&A testing and vulnerability scanning in order to validate IA policy; regulation; Security Technical Implementation Guide (STIG); and Best Business Practice (BBP) compliance
Perform vulnerability scanning using tools such as the DISA Gold Disk Scan and ACAS Scanner.
Generate Evaluation Risk Reports and scorecards.
Performs Computer Security Incident Response activities for a large organization; coordinates with other government agencies to record and report incidents.
Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediation.
Recognizes potential; successful; and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information.
Evaluate firewall change requests and assess organizational risk.
Communicates alerts to agencies regarding intrusions and compromises to their network infrastructure; applications and operating systems.
Assists with implementation of counter-measures or mitigating controls.
Ensures the integrity and protection of networks; systems; and applications by technical enforcement of organizational security policies; through monitoring of vulnerability scanning devices.
Performs periodic and on-demand system audits and vulnerability assessments; including user accounts; application access; file system and external Web integrity scans to determine compliance.
Prepares incident reports of analysis methodology and results.
Provides guidance and work leadership to less-experienced technical staff members; and may have supervisory responsibilities.
May serve as a technical team or task leader.
Maintains current knowledge of relevant technology as assigned.
Participates in special projects as required.

WHAT YOU'LL NEED TO SUCCEED:

Security Clearance Required: Active Secret with SSBI Clearance Required - Must be eligible for Top Secret
Education: Bachelors Degree in Computer Science or a related technical discipline; or the equivalent combination of education; professional training or work experience.
Experience: 8-10 years of related experience in data security administration. 2 or more years direct C&A/A&A experience. Two or more years direct C&A/A&A experience required. Experience performing as an ACA/SCA-V.
Certification: IAM & IAT Level III certification required (CISSP/CISM/GSLC). ITIL Foundation required within 90 days of hire.
This position may occasionally require some physical activity; lifting objects; bending; crouching down (i.e. to troubleshoot equipment); and long periods of sitting.
Must be approved for German TESA.

GDIT IS YOUR PLACE:

Mission and People focused company.
401K with company match.
Comprehensive health and wellness packages.
Internal mobility team dedicated to helping you own your career.
Professional growth opportunities including paid education and certifications.
Cutting-edge technology you can learn from.
Rest and recharge with paid vacation and holidays.

#dpost #cjobs #cjpost #isdcj #GDITRecruiter #gditarmy

The likely salary range for this position is $106,250 - $143,750. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Total compensation for international positions varies by tax, social security, and immigration statuses, as well as location. Generally, an international assignment may include allowances, premium uplifts, and/or relocation or transportation benefits, above base salary range noted.

Scheduled Weekly Hours:

Travel Required:

Less than 10%

Telecommuting Options:

Onsite

Work Location:

DEU Wiesbaden - Wiesbaden Army Airfield (APC180)

Additional Work Locations:

Total Rewards at GDIT:

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.

Join our Talent Community to stay up to date on our career opportunities and events at

gdit.com/tc.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans","hiringOrganization":{"@type":"Organization","name":"General Dynamics Information Technology","sameAs":"https://www.gdit.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"DEU Wiesbaden - Wiesbaden Army Airfield (APC180), United States","addressCountry":"Germany","addressRegion":"Europe"}}}},{"@type":"ListItem","position":28,"item":{"@type":"JobPosting","title":"Senior Information Security Analyst","datePosted":"2025-07-15","description":"

Role Summary:

We are looking for an experienced Senior Cyber Security Analyst to lead and coordinate ISO 27001:2022 initiatives and continuous ISMS improvement activities in close collaboration with stakeholders and teams based in different countries where ELCA Group is present. The ideal candidate will play a key role in managing internal controls, internal & external audits, documentation, and reviews, while also supporting broader security and privacy-related responsibilities.

Key Responsibilities:

Develop and maintain a comprehensive catalogue of ISO 27001 security controls, ensuring alignment with the organization’s risk posture, compliance requirements, and business objectives.
Coordinate with Swiss teams and internal stakeholders to define, document, and formalize ISO 27001 internal controls.
Continuously assess and verify the effectiveness of internal controls and collect related evidence.
Ensure timely follow-up with control Owners; escalate as needed for resolution.
Manage the lifecycle of internal and external audit findings, including assignment of responsibilities and action plans.
Prepare audit evidence, liaise with auditors, and organize audit schedules and planning activities.
Plan, schedule, and execute internal audits in alignment with ISO/IEC 27001:2022 requirements.
Maintain and continuously improve the Information Security Management System (ISMS) and Integrated Management System (IMS) documentation.
Responsible for the preparation of periodic Management Review Meetings.
Contribute to additional cybersecurity, privacy, or compliance-related projects or initiatives as required.

Profile Requirements:

Degree in Computer Science, Information Systems, or related discipline.
Minimum 5 years of experience in IT, with at least 2 years in IT Security.
4+ years of hands-on experience in IT auditing or in the implementation/maintenance of ISO 27001 ISMS.
Experience in working with multinational teams or global companies.
Relevant certifications preferred (e.g., CISA, PECB ISO 27001:2022 Implementer or Auditor).
Broad understanding of IT Security principles; some technical security exposure is a plus.
Familiarity with GDPR and privacy regulations.
Basic project management knowledge and strong organizational skills.
Excellent interpersonal, communication, and negotiation skills for effective collaboration and follow-ups.
Fluent in English and French (written and spoken).

What We Offer:

Opportunity to work in a multinational and dynamic environment.
Exposure to enterprise-grade security frameworks and international audits.
Growth opportunities in the fields of cybersecurity, compliance, and data privacy.

","hiringOrganization":{"@type":"Organization","name":"ELCA Group","sameAs":"https://www.elca.ch/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Mauritius","addressCountry":"Mauritius","addressRegion":"Africa"}}}},{"@type":"ListItem","position":29,"item":{"@type":"JobPosting","title":"Information Security Analyst - Journeyman","datePosted":"2025-07-02","description":"

SMX is seeking an Information Security Analyst to support the Navy's Risk Management Framework (RMF) processes. You'll help achieve and maintain Authority to Operate (ATO) for all supported systems, conduct network monitoring, vulnerability management, incident response, security enforcement, and threat analysis, and perform compliance auditing.

We're looking for a collaborative Cybersecurity Analyst with a strong foundation in the following areas:

\n
DoD information systems (IS), network administration, systems administration, and cybersecurity
\n
\n
IS management
\n
\n
Enterprise Mission Assurance Support Service (eMASS)
\n
\n
Navy’s RMF processes and POA&M tracking and resolution
\n
\n
Navy’s Security Assessment and Authorization (SAA) policies
\n
\n
Knowledge of system functions, security policies, and technical security safeguards
\n
\n
Assessing vulnerabilities within DoD Infrastructure and developing mitigation plans
\n

In this role, you will design, implement, and engage in projects involving legacy, current, and next-generation physical security, cybersecurity, telecommunications, and electronics systems for Navy Region Southwest (NRSW). You'll be responsible for maintaining compliance with RMF and other Department of Defense (DoD) cybersecurity standards, as well as managing daily vulnerability assessments and remediation tracking across various DoD IT systems and infrastructure.

Direct experience with Navy Electronic Security Systems (NESS) Lenel systems, including security cameras, network switches, routers, and Voice over Internet Protocol (VoIP), is highly desired. The ideal candidate will apply their technical expertise to support cyber integration efforts, ensuring alignment between legacy systems and state-of-the-art technologies across multiple DoD entities.

This is a hybrid role with the primary work location at a government site in San Diego, CA.

A DoD secret security clearance is required which requires US citizenship for work on DoD contracts.

Essential Duties & Responsibilities

Candidate to support design, implementation and management of security systems within
Candidate to prepare, categorize, select, implement, assess and authorize risks per National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) guidelines
Candidate will perform duties to assist with Assured Compliance Assessment Solution (ACAS) scans, Cyber Security Risk Management Framework (RMF)
Support day-to-day vulnerability management and remediation tracking
Help prepare and update security documentation including POA&Ms and ATO artifacts
Provide basic incident response support and cyber hygiene practices
Candidate may assist with technical documentation, network diagrams, inventory control documentation, and security documentation
Assist in maintaining compliance with RMF and other DoD cybersecurity frameworks
collaborate with Government Project Leads (GPL) and Security Managers to integrate security measures into systems throughout the development lifecycle
Assess existing and potential system vulnerabilities and propose mitigation strategies

Required Skills & Experience

Active Security Clearance Required: Secret
BA/BS in Computer Science or an IT discipline\n
- No degree may be substituted with plus six (6) additional years of related experience or
- Associate degree plus four (4) years of related experience
\n
Experience with NIST RMF, NIST 800-53, STIGs protocols and guidelines
DoD 8140 compliant certification: minimum CompTia Security +
3+ years of relevant DoD cybersecurity or IT security experience
Knowledge of Windows operating environments and Microsoft Windows Server 2008/2012

Desired Skills & Experience

Masters in Computer Science, Information Systems, Cybersecurity, or similar
Assured Compliance Assessment Solution (ACAS) Administrator highly desired
Enterprise Mission Assurance Support Service (eMASS) administrator highly desired
Knowledge of Local Area Network (LAN) infrastructure and Architectures
Understanding of C5I systems
8-12 years of relevant DoD cybersecurity or IT security experience

Application Deadline: July 28, 2025

#CJPOST #LI-KK1 #LI-HYBRID

\n\n\n

\n\n

The SMX salary determination process takes into account a number of factors, including but not limited to, geographic location, Federal Government contract labor categories, relevant prior work experience, specific skills, education and certifications. At SMX, one of our Core Values is to Invest in Our People so we offer a competitive mix of compensation, learning & development opportunities, and benefits. Some key components of our robust benefits include health insurance, paid leave, and retirement.

The proposed salary for this position is:$86,000—$143,200 USD

At SMX®, we are a team of technical and domain experts dedicated to enabling your mission. From priority national security initiatives for the DoD to highly assured and compliant solutions for healthcare, we understand that digital transformation is key to your future success.

We share your vision for the future and strive to accelerate your impact on the world. We bring both cutting edge technology and an expansive view of what’s possible to every engagement. Our delivery model and unique approaches harness our deep technical and domain knowledge, providing forward-looking insights and practical solutions to power secure mission acceleration.

SMX is an Equal Opportunity employer including disabilities and veterans.

\n\n

Selected applicant may be subject to a background investigation and/or education verification.

","hiringOrganization":{"@type":"Organization","name":"SMX","sameAs":"https://www.smxtech.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"San Diego, CA","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":30,"item":{"@type":"JobPosting","title":"Information Security Analyst II","datePosted":"2025-07-21","description":"

Tower Research Capital is a leading quantitative trading firm founded in 1998. Tower has built its business on a high-performance platform and independent trading teams. We have a 25+ year track record of innovation and a reputation for discovering unique market opportunities.

Tower is home to some of the world’s best systematic trading and engineering talent. We empower portfolio managers to build their teams and strategies independently while providing the economies of scale that come from a large, global organization.

Engineers thrive at Tower while developing electronic trading infrastructure at a world class level. Our engineers solve challenging problems in the realms of low-latency programming, FPGA technology, hardware acceleration and machine learning. Our ongoing investment in top engineering talent and technology ensures our platform remains unmatched in terms of functionality, scalability and performance.

At Tower, every employee plays a role in our success. Our Business Support teams are essential to building and maintaining the platform that powers everything we do — combining market access, data, compute, and research infrastructure with risk management, compliance, and a full suite of business services. Our Business Support teams enable our trading and engineering teams to perform at their best.

At Tower, employees will find a stimulating, results-oriented environment where highly intelligent and motivated colleagues inspire each other to reach their greatest potential.

As part of the Global Cybersecurity team, individual(s) will work to continually improve the security posture and service by monitoring, identifying and correcting security gaps and countermeasures.

Location: Gurgaon, India

Team: Global Security Operations

Shift Timing: 6:00 AM IST – 3:00 PM IST with rotational weekend support as part of 24x7 operations

Responsibilities

Monitoring alerts for potential security incidents and requests for information. This includes, but not limited to monitoring of real-time channels, tools, dashboards, periodic reports, chat sessions, and tickets.
Following incident-specific procedures to perform basic triage of said potential security incidents to determine their nature and priority and eliminate obvious false positives and process requests for information.
Investigate and validate alerts to determine scope, impact, and root cause using available telemetry and threat intelligence.
Escalate confirmed incidents with comprehensive evidence, impact assessment, and recommended containment/remediation actions.
Coordinating with stakeholders with supporting third party security service providers to triage alerts, events or incidents.
Monitoring and analyzing Security Information and Event Management (SIEM) to identify security issues for remediation.
Write detection content, correlation rules, and queries in SIEM platforms to improve threat detection capabilities.
Contribute to incident response playbooks, runbooks, and process improvements.
Participate in threat hunting activities, adversary emulation exercises, and purple teaming efforts.
Maintain accurate and detailed documentation of investigations, incidents, and actions in ticketing systems.
Stay informed of current threat landscape, attacker tactics (MITRE ATT&CK), and vulnerabilities relevant to Tower’s environment.
Interfacing with a variety of customers/users in a polite, positive, and professional manner.

Requirements

Bachelor’s Degree in Computer Science / Information Security / Information Technology
3+ years of hands-on experience in a Security Operations Center (SOC) or threat detection/incident response role in a mid to large-scale organization.
Proven track record and experience of the following in a highly complex and global organization:

Performing triage of potential security incidents
Experience with the technologies including, but not limited to SIEM, EDR/NDR/XDR, Web proxies, Vulnerability assessment tool,IDS/IPS, Network/Host based firewalls, data leakage prevention (DLP).
Solid understanding of:

Linux OS, Windows OS and MAC OS
TCP/IP, DNS, HTTP/HTTPS, and other common network protocols
Malware behavior and attacker techniques (MITRE ATT&CK)
Common attack vectors including phishing, malware, lateral movement, data exfiltration

Early shift to provide round the clock support along with alternating weekend shift

Soft Skills & Work Traits

Strong analytical, investigative, and troubleshooting skills.
Effective written and verbal communication skills; able to translate complex security issues into actionable guidance.
Organized, detail-oriented, and capable of managing multiple priorities under pressure.
Passionate about security, continuous learning, and operational excellence.
Comfortable working in a rotating shift model including weekend support as needed.
A strong desire to understand the what / why / how of security incidents.

Benefits:

Tower’s headquarters are in the historic Equitable Building, right in the heart of NYC’s Financial District and our impact is global, with over a dozen offices around the world.

At Tower, we believe work should be both challenging and enjoyable. That is why we foster a culture where smart, driven people thrive – without the egos. Our open concept workplace, casual dress code, and well-stocked kitchens reflect the value we place on a friendly, collaborative environment where everyone is respected, and great ideas win.

Our benefits include:

Generous paid time off policies
Savings plans and other financial wellness tools available in each region
Hybrid working opportunities
Free breakfast, lunch and snacks daily
In-office wellness experiences and reimbursement for select wellness expenses (e.g., gym, personal training and more)
Volunteer opportunities and charitable giving
Social events, happy hours, treats and celebrations throughout the year
Workshops and continuous learning opportunities

At Tower, you’ll find a collaborative and welcoming culture, a diverse team and a workplace that values both performance and enjoyment. No unnecessary hierarchy. No ego. Just great people doing great work – together.

Tower Research Capital is an equal opportunity employer.

","hiringOrganization":{"@type":"Organization","name":"Tower Research Capital","sameAs":"https://www.tower-research.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Gurgaon","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":31,"item":{"@type":"JobPosting","title":"Sr. Information Security Analyst","datePosted":"2025-08-08","description":"

Develop and enforce policies and procedures to ensure the protection of IT infrastructure and data.

Lead compliance activities related to SOC 2, ISO 27001, GDPR, and CCPA.
Analyze and improve existing security systems and propose strategic solutions for long-term security improvements.
Conduct security assessments and audits, and manage remediation plans.
Collaborate with IT and development teams to integrate security measures into network architectures and cloud services.
Monitor security vulnerabilities and threat intelligence to anticipate and mitigate potential threats.
Manage incident response

You will be a great fit, if you have:

Minimum of 3 years of experience in a cybersecurity role with hands-on experience in compliance and operational security.
Strong understanding of network security, VPC management, firewalls, and intrusion detection systems.
Proven track record in handling SOC 2, ISO 27001, GDPR, and CCPA compliance.
Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
Certifications such as CISSP, CISM, or similar will be highly regarded.

Why OnlineSales.ai?

Startup-y. We believe Startup is a mindset. It’s about being scrappy, being nimble, solving tough problems with constrained resources, and more. It’s about working hard and playing hard
Enterprise SaaS. Opportunity to work with an Enterprise Product SaaS firm with aspirations of growing 10x across the globe
AI-led Retail Tech. We are working to digitize & democratize one of the most exciting and growing verticals - Retail Tech leveraging data, machine learning, and automation (culmination of ad-tech, mar-tech, and analytics for Retail vertical)
Meaningful work. This is not just a job. You can find a job anywhere. This is a place for the bold to get paid who make a real impact on business
No red tape. Say goodbye to pointless meetings or political hoops to jump through. We’re scrappy, believe in autonomy, and empower our teams to do whatever it takes to do the unthinkable
Problem Solving. We ignite the best in you. We exist not only to deliver meaningful innovation but to ignite and inspire the creative problem-solver in you
Quirky & fun. Enjoy new skills and hobbies like being a quiz master, playing board games, trying your hands on percussion, playing Djembe, and spreading love within the org!

","hiringOrganization":{"@type":"Organization","name":"OnlineSales.ai","sameAs":"https://osmos.onlinesales.ai/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Pune, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":32,"item":{"@type":"JobPosting","title":"Lead Information Security Analyst","datePosted":"2025-08-05","description":"

About this role:

Wells Fargo is seeking Lead Information Security Analyst.

In this role, you will:

Provide advanced information security consultation for all aspects of information security compliance policy, risk management, and remediation
Direct information security risk assessment and research, and recommend remediation plans and strategies
Influence stakeholders on net new or on material changes to an asset to influence control decisions
Provide consulting on security risk assessment and research, and recommend remediation plans and strategies
Act as more experienced lead to the organization to develop security risk awareness and mitigating actions
Consult the organization on complex security issues and findings
Manage the most complex and critical information assets
Evaluate and interpret internal and companywide information security policies, processes, standards, and participate with more experienced leaders in decision making on information security
Serve as information security lead to advise on the development and delivery of Information Security Education and Awareness
Collaborate and consult with peers, colleagues, and mid-level to more experienced managers to resolve issues and achieve goals
Lead projects and teams
Coordinate with vendor manager on third party assets to manage information security risks
Serve as a mentor to less experienced staff

Required Qualifications:

5+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Posting End Date:

11 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

About this role:

Wells Fargo is seeking a Senior Information Security Analyst.

In this role, you will:

Perform issue lifecycle management, understand control gaps, develop controls and documentation for IAM
Perform remediation of security assessment review issues, complex ad hoc data, and reporting to support information security risk management
Provide guidance and direction in reviewing assessment findings and mitigating controls to optimize information security
Identify and direct information asset portfolio reconciliations and certifications
Provide advanced data aggregation and data of information security risk exposure
Develop and deliver Information Security Education Awareness and Training in accordance with the Enterprise Information Security Program standards
Review draft and proposed control standards for business impact and recommend modifications or clarifications as required
Conduct security control testing and consultation with stakeholders
Evaluate and interpret internal and Enterprise Information Security policies, processes and standards, and provide recommendations to improve them
Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals
Interact with internal customers
Serve as a mentor to less experienced staff

Required Qualifications:

4+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

4+ years of Experience in Risk and controls, controls testing, IT audits.
4+ yrs of experience in tech risk and controls, tech audits, ITGC, controls testing, operational risk framework, design effectiveness and operating effectiveness.
Work location - Bangalore / Hyderabad

Posting End Date:

30 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"110380-IND-BENGALURU-INTL BLR Twr-1&2 CARNATION, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":34,"item":{"@type":"JobPosting","title":"Senior Information Security Analyst","datePosted":"2025-08-07","description":"The Company:
VeSync is a portfolio company with brands that cover different categories of health & wellness products. We wouldn’t be surprised if you have one of our Levoit air purifiers in your living room or a COSORI air fryer whipping up healthy and delicious meals for you every night.
We’re a young and energetic company, we’ve had tremendous success, and we are constantly growing our team. As we garner more industry attention – just check out our accomplishments and awards by CES Innovation, iF Design, IGA, and Red Dot – we also need driven and talented people to join our team.
That brings us to you, and what you’ll be joining. Our teams are smart and diligent and take ownership of their work – they’re confident in their work but know how to collaborate with open ears and a spirit of learning. If you’re down-to-earth, approachable, and easy to strike up a conversation with, this may be a great fit for you.
Check out our brands:levoit.com | cosori.com | etekcity.com
The Opportunity:
Information Security Planning • Develop and implement comprehensive information security plans to safeguard the security of company data and assets, including on-premise and cloud environments. • Thoroughly analyze the company's business processes and data characteristics, and combine industry best practices and frameworks such as NIST Cybersecurity Framework (CSF)to create customized security plans, ensuring the confidentiality, integrity, and availability of information assets in various scenarios.
Policy Development and Compliance • Create security policies and ensure that the company's operations are in strict compliance with industry standards (e.g., ISO 27001, NIST, GDPR) and regulatory requirements. • Continuously monitor industry trends and regulatory changes, and adjust security policies in a timely manner to provide a solid security and compliance framework for the company's business operations. • Experience with OneTrust, Drata or similiar tools
System, Network and Cloud Security • Maintain and enhance security measures for systems, networks , and public cloud platforms (e.g., AWS, Azure, GCP) to prevent potential threats. • Utilize advanced technical means and tools to conduct real - time monitoring and risk early warning of systems, networks, and cloud environments, promptly detect and block various attack behaviors, and ensure the stable and secure operation of IT infrastructure. • Familiar with AWS security suites • Familiar with security scorecards, SIEM tools and dashboards (Splunk, QRadar, Rapid7, Wazhu)
Security Monitoring and Incident Response • Monitor security events in real - time, respond promptly to emergencies, and effectively mitigate risks. • Build an efficient security monitoring platform, use intelligent analysis technology to promptly capture abnormal behaviors, activate emergency response plans, and minimize the impact of security incidents. • Conduct re/blue team exercise
Security Awareness and Training • Develop and deliver security training programs to enhance employees' security awareness and encourage their adherence to best practices. • Design targeted training courses according to the needs of different positions and use diverse training methods to ensure that employees have a deep understanding of and implement security requirements.
Access Control and Identity Management • Oversee user access controls, regularly review permissions, and ensure secure identity management. • Implement a strict access control mechanism, Conduct regular audits of user permissions, and use reliable identity management systems to prevent unauthorized access and ensure the security of company resources.
Risk Assessment and Management • Conduct comprehensive risk assessments, identify vulnerabilities, and implement effective mitigation strategies. • Use scientific risk assessment methods and frameworks such as NIST CSF to evaluate potential threats and vulnerabilities, formulate corresponding mitigation measures based on the assessment results, and continuously improve the company's security defense capabilities. • Develop KPIs and metrics
Documentation and Mentorship • Document Cyber Security controls, detection rules and playbooks • Mentoring team members

\n

What you bring to the role:

Bachelor’s degree in Information Security, Computer Science, or a related field.
8+ years of experience in information security, with a strong background in security event analysis, incident response, vulnerability management, and risk assessment.
Hands-on experience with public cloud security (e.g., AWS, Azure, GCP), including cloud-native security tools and best practices.
Familiarity with security regulatory compliance standards and frameworks such as NIST CSF, ISO 27001, and CIS.
Knowledge of network security principles, intrusion detection/prevention systems (IDS/IPS), firewalls, and endpoint protection.
Understanding these aspects is essential for ensuring the company's security compliance and building a robust security defense system.
Strong analytical and problem - solving skills, with the ability to quickly identify and mitigate security threats.
Relevant security certifications such as CISSP, CISM, CEH are a plus.

Location:

This is an on-site, office-based role in Tustin, CA.

Salary:

Starting at $125K

Perks and Benefits:

100% covered Medical/Dental/Vision insurance for employee AND spouse + dependents!
401K with 4% employer match (eligible after 90 days of employment) and immediate 100% vesting
Generous PTO policy + paid holidays
Life Insurance
Voluntary Life Insurance
Disability Insurance
Critical Illness Coverage
Accident Insurance
Healthcare FSA
Dependent Care FSA
Travel Assistance Program
Employee Assistance Program (EAP)
Fully stocked kitchen

","hiringOrganization":{"@type":"Organization","name":"VeSync","sameAs":"https://www.vesync.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Tustin, CA","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":35,"item":{"@type":"JobPosting","title":"Information Security Analyst - Journeyman","datePosted":"2025-08-11","description":"

We're looking for a collaborative Cybersecurity Analyst with a strong foundation in the following areas:

\n
DoD information systems (IS), network administration, systems administration, and cybersecurity
\n
\n
IS management
\n
\n
Enterprise Mission Assurance Support Service (eMASS)
\n
\n
Navy’s RMF processes and POA&M tracking and resolution
\n
\n
Navy’s Security Assessment and Authorization (SAA) policies
\n
\n
Knowledge of system functions, security policies, and technical security safeguards
\n
\n
Assessing vulnerabilities within DoD Infrastructure and developing mitigation plans
\n

This is a hybrid role with the primary work location at a government site in San Diego, CA.

A DoD secret security clearance is required which requires US citizenship for work on DoD contracts.

Essential Duties & Responsibilities

Candidate to support design, implementation and management of security systems within
Candidate to prepare, categorize, select, implement, assess and authorize risks per National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) guidelines
Candidate will perform duties to assist with Assured Compliance Assessment Solution (ACAS) scans, Cyber Security Risk Management Framework (RMF)
Support day-to-day vulnerability management and remediation tracking
Help prepare and update security documentation including POA&Ms and ATO artifacts
Provide basic incident response support and cyber hygiene practices
Candidate may assist with technical documentation, network diagrams, inventory control documentation, and security documentation
Assist in maintaining compliance with RMF and other DoD cybersecurity frameworks
collaborate with Government Project Leads (GPL) and Security Managers to integrate security measures into systems throughout the development lifecycle
Assess existing and potential system vulnerabilities and propose mitigation strategies

Required Skills & Experience

Active Security Clearance Required: Secret
BA/BS in Computer Science or an IT discipline\n
- No degree may be substituted with plus six (6) additional years of related experience or
- Associate degree plus four (4) years of related experience
\n
Experience with NIST RMF, NIST 800-53, STIGs protocols and guidelines
DoD 8140 compliant certification: minimum CompTia Security +
3+ years of relevant DoD cybersecurity or IT security experience
Knowledge of Windows operating environments and Microsoft Windows Server 2008/2012

Desired Skills & Experience

Masters in Computer Science, Information Systems, Cybersecurity, or similar
Assured Compliance Assessment Solution (ACAS) Administrator highly desired
Enterprise Mission Assurance Support Service (eMASS) administrator highly desired
Knowledge of Local Area Network (LAN) infrastructure and Architectures
Understanding of C5I systems
8-12 years of relevant DoD cybersecurity or IT security experience

Application Deadline: August 22, 2025

#CJPOST #LI-KK1 #LI-HYBRID

\n\n\n

\n\n

The proposed salary for this position is:$86,000—$143,200 USD

SMX is an Equal Opportunity employer including disabilities and veterans.

\n\n

Selected applicant may be subject to a background investigation and/or education verification.

","hiringOrganization":{"@type":"Organization","name":"SMX","sameAs":"https://www.smxtech.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"San Diego, CA","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":36,"item":{"@type":"JobPosting","title":"Information Security Analyst (GRC)","datePosted":"2025-08-14","description":"

Job title: Information Security Analyst (GRC)

Location: UK or Ireland - with flexible working arrangements

Package: Annual Company Bonus, Company Pension Plan, Healthcare Allowance, Life Assurance.

About iNIZIO

At Inizio, we're a global team driven by a shared purpose: to reimagine health. Formed in 2022 through the coming together of Ashfield and Huntsworth, we unite decades of experience with cutting-edge capabilities to deliver impactful solutions across the commercialization journey - from discovery to post-launch. Our global network of over 10,000 experts operates across 50 countries, supporting clients with strategic insight, medical excellence, creative engagement, and real-world delivery. We work with the world's leading health and life sciences businesses to solve complex challenges and drive meaningful outcomes for our clients and patients.

What sets Inizio apart is our people - and we believe everyone should have the opportunity to thrive. Here, you're encouraged to reimagine your possibilities: to grow, to be curious and to make real change happen. It's a place where your individuality is valued, your development is supported, and your ambition is celebrated. If you're ready to push boundaries and accelerate your career, Inizio is the best place to be.

About the role

We are looking for a Security Analyst with expertise in data governance and data security to help safeguard our information assets across cloud and on-premise environments. You'll support the implementation and ongoing enhancement of policies, controls, and monitoring frameworks that ensure compliance with internal standards, regulatory requirements, and industry best practices.

Here's what you'll be doing:

Data Security Operations

Monitor and analyze data access logs for anomalies and unauthorised activities.
Implement and conduct regular data classification and access reviews across our teams.
Implement and enforce data loss prevention (DLP) and encryption controls.
Coordinate vulnerability assessments and remediation related to sensitive data.

Governance & Compliance

Support the development and enforcement of data governance frameworks, including policies, standards, and classification schemes.
Ensure alignment with GDPR, HIPAA, CCPA, and other relevant data protection regulations.
Collaborate with legal, compliance, and data owners to assess data handling risks.
Participate in audits and assist with responses to regulatory inquiries and findings.

Risk Management

Help complete third-party risk reviews and audits.
Provide input to risk assessments and risk registers.
Track and remediate risks related to data storage, sharing, and processing.
Maintain up-to-date records of data flows, repositories, and critical data assets.

Security Tools, Monitoring, Reporting

Experience with cloud security and GRC tools. Configure alerts and automate controls to detect data security violations.
Create risk-based reporting and dashboards.
Partner with the Security Operations Centre (SOC) to respond to incidents involving sensitive data.

About you:

Bachelor's degree in Information Security, Computer Science, or a related field.
3+ years of experience in an information security or data governance role within a global business.
Working knowledge of data protection regulations and frameworks (e.g., NIST, ISO 27K, GDPR).
Familiarity with data governance tools and DLP platforms.
Security certifications such as CISSP, CISM, CISA, CIPP/E, ISO 27001 Lead Implementer.
Experience with cloud platforms (e.g., AWS, Azure, Google Cloud) and securing SaaS environments.

Our Pledge

At Inizio, we value inclusivity, recognize the power of diversity and inspire the next generation of change-makers. We are an equal opportunities employer. We believe in creating a dynamic work environment that values diversity, equity and inclusion. We aim to recruit from a diverse slate of candidates and foster an environment that provides the right conditions for long-term success. We welcome all applications regardless of race, color, religion or belief, gender, gender identity, age, national origin, marital status, military veteran status, genetic information, sexual orientation and physical or mental disability.

Artificial Intelligence

Inizio may use AI technologies to support certain aspects of our recruitment process, but all hiring decisions at Inizio are made by our human recruiting team. We are committed to fair, inclusive, and human-led hiring practices.

#LI-DT1 #LI-HYBRID

Don't meet every job requirement? That's okay! Our company is dedicated to building a diverse, inclusive, and authentic workplace. If you're excited about this role, but your experience doesn't perfectly fit every qualification, we encourage you to apply anyway. You may be just the right person for this role or others.

","hiringOrganization":{"@type":"Organization","name":"Inizio","sameAs":"https://inizio.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Dublin, Ireland","addressCountry":"Ireland","addressRegion":"Europe"}}}},{"@type":"ListItem","position":37,"item":{"@type":"JobPosting","title":"Information Security Analyst (GRC)","datePosted":"2025-08-14","description":"

Job title: Information Security Analyst (GRC)

Location: UK or Ireland - with flexible working arrangements

Package: Annual Company Bonus, Company Pension Plan, PMI, Life Assurance, Critical Illness.

About iNIZIO

About the role

Here's what you'll be doing:

Data Security Operations

Monitor and analyze data access logs for anomalies and unauthorised activities.
Implement and conduct regular data classification and access reviews across our teams.
Implement and enforce data loss prevention (DLP) and encryption controls.
Coordinate vulnerability assessments and remediation related to sensitive data.

Governance & Compliance

Support the development and enforcement of data governance frameworks, including policies, standards, and classification schemes.
Ensure alignment with GDPR, HIPAA, CCPA, and other relevant data protection regulations.
Collaborate with legal, compliance, and data owners to assess data handling risks.
Participate in audits and assist with responses to regulatory inquiries and findings.

Risk Management

Help complete third-party risk reviews and audits.
Provide input to risk assessments and risk registers.
Track and remediate risks related to data storage, sharing, and processing.
Maintain up-to-date records of data flows, repositories, and critical data assets.

Security Tools, Monitoring, Reporting

Experience with cloud security and GRC tools. Configure alerts and automate controls to detect data security violations.
Create risk-based reporting and dashboards.
Partner with the Security Operations Centre (SOC) to respond to incidents involving sensitive data.

About you:

Bachelor's degree in Information Security, Computer Science, or a related field.
3+ years of experience in an information security or data governance role within a global business.
Working knowledge of data protection regulations and frameworks (e.g., NIST, ISO 27K, GDPR).
Familiarity with data governance tools and DLP platforms.
Security certifications such as CISSP, CISM, CISA, CIPP/E, ISO 27001 Lead Implementer.
Experience with cloud platforms (e.g., AWS, Azure, Google Cloud) and securing SaaS environments.

Our Pledge

Artificial Intelligence

#LI-DT1 #LI-REMOTE

","hiringOrganization":{"@type":"Organization","name":"Inizio","sameAs":"https://inizio.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"London, United Kingdom","addressCountry":"United Kingdom","addressRegion":"Europe"}}}},{"@type":"ListItem","position":38,"item":{"@type":"JobPosting","title":"Information Security Analyst, AS","datePosted":"2025-08-18","description":"

Job Description:

Job Title: Information Security Analyst

Location: Mumbai, India

Corporate Title: Associate

Role Description

Corporate Bank (CB), Investment Bank (IB) and Operations (Ops) Technology

Risk Function:

The first line Tech Risk function for business divisions CB, IB and Ops at Deutsche Bank sits within the Divisional Control Office. CB and IB front-to-back have the largest footprint as a risk bearing function within the banking divisions and you will be part of a dynamic team which is consistently in demand for providing insights, assessments and managing Information Technology (IT) and Information Systems (IS) risks on behalf of the business.

As part of the team, you will join the Bank’s journey and contribute towards our strategic goal of managing technology risk within appetite whilst enabling adoption of emerging and new technologies for business growth.

CB Divisional CISO (D-CISO) Office:

The CB Divisional CISO is a part of the larger CB, IB and Ops Tech Risk functioin and has the ultimate responsibility for the operational aspects of ensuring compliance to Deutsche Bank’s Information Security Principles.
The Divisional CISO Office supports the Div. CISO in this task. In this role the candidate will assist all of our business divisions by evaluating and mitigating information security risks in order to meet both audit and regulatory requirements.

What we’ll offer you

As part of our flexible scheme, here are just some of the benefits that you’ll enjoy

Best in class leave policy
Gender neutral parental leaves
100% reimbursement under childcare assistance benefit (gender neutral)
Sponsorship for Industry relevant certifications and education
Employee Assistance Program for you and your family members
Comprehensive Hospitalization Insurance for you and your dependents
Accident and Term life Insurance
Complementary Health screening for 35 yrs. and above

Your key responsibilities

Information Security Officer (ISO) The ISO is a manager aligned to an application (Application ISO) both together hereafter referred to as ‘area of responsibility’. The ISO has the responsibility for ensuring the compliance with the Group Information Security requirements in their area of responsibility.

Key ISO Responsibilities comprise but not limited to:

To ensure Information Security risk assessments and compliance evaluations for assigned IT assets are performed
To provide sufficient information related to the business context, information sensitivity and nature of usage of an application, including identification and implementation of controls for identified Information Security risks in their area of responsibility
To identify and describe application and business process dependencies (upstream and downstream) for integrity and availability evaluations, including changes
To agree assessment results and track remediation, including follow-ups and mitigating actions
To resolve data quality issues pertaining to the application portfolio
To support Identity and Access management functions with regard to application recertification (including selection and onboarding to central recertification platform), user groups and entitlements including their functional conflicts.
To cooperate with the D-ISO / D-CISO to address requests for policy interpretation, guidance and advice, to ensure creation of divisional policies in accordance with the IS Policy Governance and to support policy authors by raising questions to the policy advisory team
Analyze the root cause for delays or incorrect processing and propose sustainable solutions
Generate MIS for multiple IS topics and to assist senior management identify risks
Support the wider D-CISO office where required
Any adhoc analysis and presentations
Identify areas for improvement in processes in terms of both efficiency and quality

The Segregation of Duties (SoD) Manager acts as the single point of contact for the Divisions or Functions or other stakeholders with regard to any SoD related questions or issues in their area of responsibility.

Key responsibilities of the SoD Manager comprise:

To design and implement SoD Rules (for applications) in close collaboration with the ISO as well as other SoD Managers or stakeholders who may be affected by these rules. This includes the regular review of these rules and any necessary amendments
To assess and remediate any SoD violations detected within their area of responsibility by either revoking inappropriate access or ensuring adequate compensating controls or exception handling procedures
To assess the impact of inappropriate access on business operations and identify if there are indications for improper use of this access
To act as the single point of contact for the Divisions or Functions or other stakeholders with regard to any SoD related questions or issues in their area of responsibility
Liaise and coordinate with Central SoD Governance team and attend SoD forums

Your skills and experience

Skills Profile:

Experience as IT and/or IS analyst – ideally in a Banking environment
Proficiency in Microsoft Office applications (Excel, PowerPoint, Word, etc.)
Very good communication skills in English (verbal and written) with ability to articulate / engage with Senior stakeholders (a must)
Strong analytical skills and ability to transform complex issues into efficient solutions
General Project Management skills
Desire to work in a fast paced, challenging multi-cultural environment and with ability to work in a global team
Self-motivated, critical thinking and good understanding of major business and risk processes

Experience/qualifications:

Good university graduate or post-graduate degree with Information Security, Risk Management and Governance
Experience in banking industry with a strong sense of accountability and integrity
Prior experience in a risk environment (e.g. in BISO, ORM, Audit, Data Privacy)
Good understanding of major business and operational risk processes.
Certifications such as ISO27001-LA/LI, CISM, CISSP etc.is a plus
Experience in banking industry with a strong sense of accountability and integrity

How we’ll support you

Training and development to help you excel in your career
Coaching and support from experts in your team
A culture of continuous learning to aid progression
A range of flexible benefits that you can tailor to suit your needs

About us and our teams

Please visit our company website for further information:

https://www.db.com/company/company.htm

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

","hiringOrganization":{"@type":"Organization","name":"Deutsche Bank","sameAs":"https://www.db.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Pune - Business Bay, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":39,"item":{"@type":"JobPosting","title":"Associate Information Security Analyst","datePosted":"2025-08-18","description":"

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we've helped over 700,000 clients on their path to a brighter future.

While we're proud of what we've already accomplished, we're searching for new collaborators to help us get to the next level! If you're looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you.

What you’ll do as an Associate Information Security Analyst

Join our IT Engineering department as an Information Security Analyst. You'll work with our Information Security team, which manages our SaaS applications, identity providers, and endpoint security for both Windows and Mac systems.

In this role, your primary focus will be on security reviews. Using established standard operating procedures (SOPs), you'll review security events and escalate any suspicious incidents to our Information Security Analysts and Engineers for deeper investigation. You'll also support our Data Loss Prevention and Insider Risk mitigation efforts by gathering and assessing data related to access logs and data movement.

Who you are

We're looking for a motivated and curious individual who is excited to start or grow their career in cybersecurity. This role is a great fit for a recent college graduate in the Chicagoland area or someone with a few years of experience. You're a self-starter who can manage multiple priorities and has a strong sense of urgency.

You'll thrive in this role if you're a quick learner and are ready to take on new challenges. You're capable of diving deep into technical details when needed, but can also easily switch gears to meet business needs. We want someone who can quickly grasp complex technical concepts and translate them into measurable business outcomes.

What We Look For

Required:

\n
A minimum of 2 years of experience in a cybersecurity or IT role, or a recent college graduate with a degree in a relevant field.
\n
\n
Knowledge of cybersecurity and privacy principles.
\n
\n
Experience with reviewing user activity and system logs.
\n
\n
Familiarity with SIEM tools, including building queries, dashboards, and alerts.
\n
\n
Experience documenting security breaches and other key metrics.
\n

Preferred:

\n
Experience with Platform and Endpoint Data Loss Prevention (DLP) tools.
\n
\n
Experience with eDiscovery tools.
\n
\n
Familiarity with assessing the effectiveness of security controls and analyzing logs for potential threats.
\n
\n
Knowledge of SASE/SSE (Secure Access Service Edge/Security Service Edge) and Zero Trust security architecture.
\n
\n
General awareness of endpoint security tools, including SecOps, EDR (Endpoint Detection and Response), and vulnerability management.
\n

The base annual salary range is listed below. This role is eligible for additional incentives, including an annual bonus.

Base Salary Range$60,000—$75,000 USD

Why Join Us?

While you make a difference for others, we’ll work to make a difference for you, providing an uplifting, collaborative work environment and benefits that reflect your value to us. For eligible full-time employees, we offer:

Considerable employer contributions for health, dental, and vision programs
Generous PTO, paid holidays, and paid parental leave
401(k) matching program
Merit advancement opportunities
Career development & training

And finally, our team spirit and culture! We cultivate an environment of community, connection, and belonging across our entire organization.

Beyond Finance does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job positions. No fee will be paid to their parties who submit unsolicited candidates directly to Beyond Finance employees or the Beyond Finance HR team. No placement fee will be paid to any third party unless such a request has been made by the Beyond HR team.

","hiringOrganization":{"@type":"Organization","name":"Beyond Finance","sameAs":"https://www.beyondfinance.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Chicago, IL","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":40,"item":{"@type":"JobPosting","title":"Senior Information Security Analyst","datePosted":"2025-08-14","description":"

Our mission at Netguru is to help entrepreneurs and innovators shape the world through beautiful software. We care about trust, taking ownership, and transparency. As a Certified B Corporation®, we offer a safe, inclusive, and productive environment for all team members, and we’re always open to feedback. If you want to work from home and be a full-time employee, great! We want to create the right opportunities for you.

Over the past ten years, Netguru has changed the way people bank, listen to music, learn languages, and rent bicycles. Some of their clients include Fortune 500 companies and startups like solarisBank or senseFly . Netguru works with the largest brands in the world, such as Volkswagen, IKEA or Keller Williams.

Currently we're looking for Senior Information Security Analyst located in Poland.

Salary:

PLN 12,100-16,700 gross (Employment Contract).

Responsibilites:

Safeguard confidentiality, integrity, and availability of company, employee, and client data.
Ensure compliance with laws, regulations, and internal security standards.
Implement and coordinate security controls, policies, and procedures in cooperation with stakeholders.
Detect, respond to, and resolve security incidents, vulnerabilities, and privacy breaches in line with SLAs.
Assess and mitigate risks through vulnerability management and business continuity planning.
Promote security awareness via training, onboarding presentations, and regular communications.
Monitor and report on security performance using KPIs and SLAs.

Requirements

3+ years of relevant experience in IT/security with strong English communication skills.
Security incident handling & response including analysis of complex attacks, vulnerability assessment, and management.
Experience with security tools (vulnerability scanners, SIEM, Endpoint Protection) and implementing security controls, policies, and procedures.
Knowledge of security frameworks and regulations such as ISO 27001 and GDPR, with practical application.
Project and audit experience including small project leadership, internal audits, vendor security verification, and support for legal/security compliance negotiations.
Strong documentation skills for policies, processes, incidents, and reports.
Soft skills: responsive, well-organized, strong presentation and communication abilities with technical and non-technical audiences, team-oriented yet able to work independently.

Nice to have:

Experience in implementig standards and processes to mitigate risks resulting of cyber threats or security vulnerabilities
Business continuity planning skills
Risk management skills
Experiance with Atlassian JIRA and Confluence
Taking part in ISO 27001 certification audit.

Benefits

Access to the WorkSmile platform offering benefits adapted to your preferences:

Multisport card,
Private health insurance package,
Life insurance,
And hundreds of other options to choose from 15 categories (shopping, leisure, travel, food, etc.).

Support for your growth – a head/manager’s budget available to every employee.
Discounts on Apple products.
Various internal initiatives: webinars, knowledge sharing sessions, internal conferences.

Don't hesitate and apply right away!

At Netguru, we're committed to creating an inclusive environment for everyone. If you require any disability-related adaptations during the recruitment process, please let us know. We're here to help!

","hiringOrganization":{"@type":"Organization","name":"Netguru","sameAs":"https://www.netguru.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Poland - Remote","addressCountry":"Poland","addressRegion":"Europe"}}}},{"@type":"ListItem","position":41,"item":{"@type":"JobPosting","title":"Senior Information Security Analyst","datePosted":"2025-08-13","description":"

Every career journey is personal. That's why we empower you with the tools and support to create your own success story.

Be challenged. Be heard. Be valued. Be you ... be here.

Job Summary

The Sr. Analyst, Info Sec is responsible for overseeing and managing multiple risks, audits, and controls within the Information Technology Domain. This person is expected to be a strategic partner to control owners, second line of defense, and privacy leaders. The position reports to the Manager, Information Security and works closely with other Information Security Domain Champions.

Essential Job Functions

Audit coordination and evidence collection – Facilitate the collection of evidence for various audit and control activities such as PCIDSS, NIST CSF, GLBA 501-B, Sarbanes Oxley, etc. Review evidence for appropriateness and adequacy. Track and report on all evidence requests to ensure request deadlines are met. Coordinate and facilitate audit and/or control interviews as well as necessary follow up meetings between control owners and internal/external auditors. Publish meeting minutes and track action items to completion. Utilizes planning and organization tools to develop project/action plans. Meets deliverable deadlines as directed.

Payment Card Industry (PCI) Annual Audit - Possess in-depth knowledge of the PCI-DSS. Test PCI controls and work with control owners to resolve control design or operating effectiveness issues ahead of and during annual Company PCI Audit. Partner with external Qualified Security Assessor (QSA) to reduce scope and control testing where possible. Use knowledge of General IT Computing Controls and Cyber Security Tools to create PCI Compensating Control Matrices when required.

Control Coaching, Consulting, and Collaboration – Partner with IT Control Owners to identify, resolve, mitigate, or compensate for control failures identified through risk assessments, internal/external audits, or cyber security tools and processes. Develop proactive risk and control assessment strategies to stay ahead of emerging risks and regulatory requirements. Collaborate with the IT Risk Second Line of Defense and Privacy Partners when formulating strategies to maximize coverage and work paper reuse.

General Information Technology - Foundational to intermediate knowledge of IT tools and practices including, but not limited to: Networking, LDAP Directories, Vulnerability/Patch Management, Change Management, Incident Management, Server and Desktop Management, Mainframe Technologies, Encryption and Key Management, Cloud Architecture and Computing, Software Application General Computing Controls, Business Continuity/Disaster Recovery, Software Development Lifecycle, Access Management, and Cyber Security Tooling.

Metrics and Presentation Skills – Ability to produce meaningful and actionable metrics through data analysis. Conduct data analysis exercises using Excel Pivot Tables, Microsoft Access Queries, and other data driven analysis tools. Produces presentations at various levels of abstraction dependent on intended audience using Microsoft Power Point, Microsoft Visio, or equivalent tools. Intermediate to expert English writing skills expected.

Human Relations – Ability to diffuse problematic situations and manage through conflict resolution. Utilizes soft skills such as: Selective Agreement, Reflective Listening, Voice Inflection, and Empathy. Ability to take complex concepts and break down into laymen’s terms or analogies that help with other’s understanding. Viewed as an enabling partner that provides options or information when saying no to business or IT requests. Seen by leadership and peers as creditable, trustworthy and respectful. Utilizes subject matter expertise to guide and coach less experienced team members.

Reports to: Manager, IT Security Admin/Lead

Working Conditions/ Physical Requirements: Normal office environment. As the need of the business continue to evolve, this role may be asked to work an on-call rotation to include evenings or weekends.

Direct Reports: None

Work Shift Required: Normal Office

Work Timings: 11am to 8pm IST or 1pm to 10pm IST / Flexible to work in shifts as needed

Minimum Qualifications:

Bachelors Degree
Six or more years in Risk Management, Audit, Compliance, Information Technology

Preferred Experience:

Graduate or Post Graduate in Computer Science, Networking or Information Technology
Certifications: One or more relevant professional technical certifications (examples: CISSP, CISA, CISM, OR Security+)

Other Duties

This job description is illustrative of the types of duties typically performed by this job. It is not intended to be an exhaustive listing of each and every essential function of the job. Because job content may change from time to time, the Company reserves the right to add and/or delete essential functions from this job at any time.

About Bread Financial

At Bread Financial, you’ll have the opportunity to grow your career, give back to your community, and be part of our award-winning culture. We’ve been consistently recognized as a best place to work nationally and in many markets and we’re proud to promote an environment where you feel appreciated, accepted, valued, and fulfilled—both personally and professionally. Bread Financial supports the overall wellness of our associates with a diverse suite of benefits and offers boundless opportunities for career development and non-traditional career progression.

Bread Financial® (NYSE: BFH) is a tech-forward financial services company that provides simple, personalized payment, lending, and saving solutions to millions of U.S consumers. Our payment solutions, including Bread Financial general purpose credit cards and savings products, empower our customers and their passions for a better life. Additionally, we deliver growth for some of the most recognized brands in travel & entertainment, health & beauty, jewelry and specialty apparel through our private label and co-brand credit cards and pay-over-time products providing choice and value to our shared customers.

To learn more about Bread Financial, our global associates and our sustainability commitments, visit breadfinancial.com or follow us on Instagram and LinkedIn.

All job offers are contingent upon successful completion of credit and background checks.
Bread Financial is an Equal Opportunity Employer.

Job Family:

Information Technology

Job Type:

Regular

","hiringOrganization":{"@type":"Organization","name":"Bread Financial","sameAs":"https://www.breadfinancial.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Q8 - Bangalore, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":42,"item":{"@type":"JobPosting","title":"LEAD INFORMATION SECURITY ANALYST","datePosted":"2025-08-13","description":"

About this role:

Wells Fargo is seeking a Lead Information Security Analyst to support the Third Party Security product model and product owners, with a specific focus on the Third Party Risk Management Module (TPRM), in ServiceNow, technology delivery; specifically supporting Technology Third Party Governance Team, Third Party Monitoring and Rapid Response team and BCP ServiceNow teams – providing direction for teams to design, develop, and deliver technology and processes for updating, upgrading technologies in TPRM.

This position designs TPRM changes, develop new capabilities, provides technical TPRM support and solutions for implementation in a sprints and production; also included supporting unit testing through the various environments as well as coordination of UAT across TTPG, TP MRR and BCP teams. This role is responsible for the ServiceNow Third Party Risk Management module/application vision, roadmap, and delivery of solutions across the Cyber Security Third Party product.

This role specifically supports the ServiceNow Third Party Risk Management module/application features and stories through our agile life cycle, as well supporting production; including patches, platform releases, and defects. This position will support the Change management process within TTPG as well.

In this role, you will:

Provide advanced information security consultation for all aspects of information security compliance policy, risk management, and remediation
Direct information security risk assessment and research, and recommend remediation plans and strategies
Influence stakeholders on net new or on material changes to an asset to influence control decisions
Provide consulting on security risk assessment and research, and recommend remediation plans and strategies
Act as more experienced lead to the organization to develop security risk awareness and mitigating actions
Consult the organization on complex security issues and findings
Manage the most complex and critical information assets
Evaluate and interpret internal and companywide information security policies, processes, standards, and participate with more experienced leaders in decision making on information security
Serve as information security lead to advise on the development and delivery of Information Security Education and Awareness
Collaborate and consult with peers, colleagues, and mid-level to more experienced managers to resolve issues and achieve goals
Lead projects and teams
Coordinate with vendor manager on third party assets to manage information security risks
Serve as a mentor to less experienced staff

Required Qualifications:

5+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

Knowledge and understanding of Third-Party Risk Management, Governance, and Reporting
Experience working in an agile environment
Experience with GRC platforms (e.g., Archer, ServiceNow GRC, RSA).
Ability to influence across all organizational levels, particularly senior management
Experience managing large technology development efforts within a major line of businesses
Strong ability to communicate complex technical, information protection issues and value/impact in simple terms to very senior business and technology leaders
A high level of comfort working with ambiguity or uncertainty and converting information into quantifiable concepts
Strong organizational and project management skills with an ability to manage numerous, competing demands from internal and external stakeholders
Strong ability to effectively communicate and broker agreements amongst diverse, differing, competing, and/or conflicting perspectives/priorities
Proven success implementing large enterprise projects and/or enterprise process

Job Expectations:

Ability to travel up to 10% of the time.
Ability to work a hybrid work schedule that includes on-site requirements in one of the listed locations on the job posting
This position is not eligible for Visa sponsorship

Pay Range

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to achievements, skills, experience, or work location. The range listed is just one component of the compensation package offered to candidates.

$119,000.00 - $206,000.00

Benefits

Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.

Health benefits
401(k) Plan
Paid time off
Disability benefits
Life insurance, critical illness insurance, and accident insurance
Parental leave
Critical caregiving leave
Discounts and savings
Commuter benefits
Tuition reimbursement
Scholarships for dependent children
Adoption reimbursement

Posting End Date:

22 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

Your day at NTT DATA
As a Security Managed Services Engineer (L2) at NTT DATA, your role will be to ensure that our clients' security infrastructures and systems remain operational. With a proactive approach, you'll monitor, identify, investigate, and resolve technical incidents and problems, restoring service efficiently. Your primary objective will be to handle client requests or tickets with technical expertise, ensuring they are resolved within the agreed service level agreement (SLA).

You'll actively manage work queues, perform operational tasks, and update tickets with resolution actions. By identifying issues and errors early on, you'll log incidents promptly and provide second-level support, communicating effectively with other teams and clients to extend support when needed. Your role includes executing changes responsibly, flagging risks and mitigation plans, and ensuring all changes have proper approvals.
Collaborative efforts are at the heart of this role. You'll work closely with automation teams to optimize efforts and automate routine tasks, ensuring seamless handovers during shift changes. Your analytical skills will be key in auditing incident and request tickets for quality, recommending improvements, and contributing to trend analysis reports to identify automation opportunities.

As a go-to for initial client escalations, you'll assist L1 Security Engineers with triage and troubleshooting, and support project work when required. Your contributions to the change management process will ensure thorough documentation, effective planning and execution of maintenance activities, and compliance with standard procedures.

To thrive in this role, you need to have:

Experience with managed services handling security infrastructure and working knowledge of ticketing tools, preferably ServiceNow.
Proficiency in active listening, with techniques like paraphrasing and probing for further information.
Excellent planning skills, able to anticipate and adjust to changing circumstances.
Strong ability to communicate and engage across different cultures and social groups.
Adaptability to changing conditions and flexibility in approach.
Client-focused mindset, always putting their needs and positive experience first.
A positive outlook and the ability to work well under pressure.
Willingness to put in longer hours when necessary.
Bachelor's degree or equivalent qualification in IT/Computing, or relevant work experience.

Workplace type:

On-site Working

","hiringOrganization":{"@type":"Organization","name":"NTT DATA","sameAs":"https://hello.global.ntt/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Mumbai, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":44,"item":{"@type":"JobPosting","title":"Lead Information Security Analyst","datePosted":"2025-08-18","description":"

About this role:

Wells Fargo is seeking Lead Information Security Analyst.

In this role, you will:

Provide advanced information security consultation for all aspects of information security compliance policy, risk management, and remediation
Direct information security risk assessment and research, and recommend remediation plans and strategies
Influence stakeholders on net new or on material changes to an asset to influence control decisions
Provide consulting on security risk assessment and research, and recommend remediation plans and strategies
Act as more experienced lead to the organization to develop security risk awareness and mitigating actions
Consult the organization on complex security issues and findings
Manage the most complex and critical information assets
Evaluate and interpret internal and companywide information security policies, processes, standards, and participate with more experienced leaders in decision making on information security
Serve as information security lead to advise on the development and delivery of Information Security Education and Awareness
Collaborate and consult with peers, colleagues, and mid-level to more experienced managers to resolve issues and achieve goals
Lead projects and teams
Coordinate with vendor manager on third party assets to manage information security risks
Serve as a mentor to less experienced staff

Required Qualifications:

5+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Posting End Date:

19 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

Overview

Essential Functions and Job Responsibilities

Plan, implement, and upgrade security controls to protect networks, systems, and data—including securing digital files and infrastructure.
Monitor systems and respond to security incidents, breaches, and vulnerabilities.
Develop and manage security documentation (e.g., SSPs, POA&Ms, IRPs, RAMs) following federal GRC and RMF protocols.
Conduct risk assessments and support system authorization—tailoring RMF control implementation to agency requirements.
Collaborate with stakeholders to align security strategies with enterprise policies, facilitate continuous monitoring, and report on security posture.

Minimum Requirements

Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or related discipline.
7–10 years of directly relevant experience, including RMF GRC, security planning, incident management, and enterprise-level risk assessment.
One or more of the following certifications: CISSP, CISM, CISA, CRISC, CGRC.
Proven capability in planning, implementing, monitoring, and responding to complex security challenges at the infrastructure and enterprise level.
Demonstrated ability to apply NIST SP-800-53, SP-800-37, FedRAMP, CSF 2.0, and JISF frameworks.
Experience with creating and maintaining RMF-driven documentation and managing governance tools.
Technical skills in vulnerability analysis, risk mitigation, and incident response methodologies.

Desired Qualifications

Experience with system categorization IAW NIST SP 800-60.
Experience with implementing continuous monitoring IAW NIST SP 800-137.
Incident response experience including development of IR policy, plan, and procedures and creating and executing tabletop exercises.
Experience using cybersecurity posture management tools and SIEMs to collect and analyze vulnerability data.
Experience Cyber Exchange STIG and SRG library, ability to create an applicability matrix for STIGs and SRGs which are applicable to a system.
Experience with the DOJ Cyber Security Assessment and Management Application (CSAM).

Company Benefits

PSI offers full-time, benefits eligible employees a competitive total compensation package that includes paid leave, and options for employer sponsored group medical, dental, vision, short-term and long-term disability, life insurance, AD&D coverage, legal services, identity theft, and accident insurance. Flexible spending account and health saving account options offer pre-tax savings for qualified medical, dental, and vision expenses. The company sponsored 401(k) retirement plan has an employer contribution match that is immediately vested. We invest in the professional growth of our employees through professional courses, certifications, and tuition reimbursement programs.

EEO Commitment

It is company policy to promote equal employment opportunities. All personnel decisions, including, but not limited to, recruiting, hiring, training, promotion, compensation, benefits, and termination, are made without regard to race, color, religion, age, sex, sexual orientation, pregnancy, gender identity, genetic information, national origin, citizenship status, veteran status, protected veteran status, disability, or any other characteristic protected by applicable federal, state, or local law. Reasonable accommodations for applicants and employees with disabilities will be provided. If a reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources by emailing HRDepartment@plan-sys.com, or by dialing 703-575-8400.

","hiringOrganization":{"@type":"Organization","name":"Planned Systems International","sameAs":"https://www.plan-sys.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Washington, DC, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":46,"item":{"@type":"JobPosting","title":"Senior Information Security Analyst","datePosted":"2025-08-16","description":"

Overview

Planned Systems International (PSI) is an Enterprise IT services company who focuses on designing, building, securing, and operating cutting-edge software solutions that drive mission success and operational excellence for Federal Government organizations. PSI is currently seeking a Senior Information Security Analyst to support the Department of Justice (DOJ), Information Security & Validation Staff (ISVS) in delivering advanced cybersecurity governance, risk management, and compliance (GRC) services for the Judiciary’s COO offices. This position executes and advises on Risk Management Framework (RMF) processes, assesses security controls, and develops documentation to ensure system confidentiality, integrity, and availability. The analyst applies expertise in NIST and Judiciary Information Security Framework (JISF) standards to plan, implement, and monitor security measures across enterprise systems, supporting both ongoing operations and new system authorizations.

Essential Functions and Job Responsibilities

Perform advanced RMF activities, including system preparation, security categorization, control selection and tailoring, control implementation, and continuous monitoring.
Develop, review, and maintain security documentation such as System Security Plans (SSPs), Security Impact Analyses (SIAs), POA&Ms, Risk Mitigation Plans (RMPs), and Incident Response Plans (IRPs).
Conduct vulnerability assessments, risk analyses, and FedRAMP-related security reviews.
Provide recommendations for risk mitigation, control enhancements, and compliance process improvements.
Monitor security controls for effectiveness, evaluate changes to systems and environments, and update authorization packages accordingly.
Generate recurring reports, including Critical Security Controls Status Reports, Executive Dashboards, and Executive Risk Reports, using GRC tools such as CSAM.
Collaborate with stakeholders to ensure that common controls, requirements allocation, and business processes are documented and aligned with enterprise policy.
Support incident response, contingency planning, and tabletop exercises to validate readiness and resiliency.

Minimum Requirements

Bachelor's in Cybersecurity, Information Security, Computer Science, IT, or related; advanced degree preferred.
5–7 years of directly related information security experience, including RMF and GRC responsibilities.
One or more of the following certifications preferred: CISSP, CISM, CGRC, Security+, or equivalent DoD 8570/8140 certification.
Strong knowledge of RMF processes and federal cybersecurity standards, including NIST SP 800-53, SP 800-37, and SP 800-137.
Proficiency in developing and maintaining standardized security documentation in compliance with GRC frameworks.
Experience with vulnerability management, risk mitigation, and security reporting.
Ability to effectively communicate technical security requirements to diverse audiences, including executives and technical teams.

Desired Qualifications

Experience with system categorization IAW NIST SP 800-60.
Experience with implementing continuous monitoring IAW NIST SP 800-137.
Ability to analyze vulnerability scan results, implement mitigations, and manage POA&M items until resolved.
Ability to apply and analyze security control assessment results generated from STIGs.
Experience with the DOJ Cyber Security Assessment and Management Application (CSAM).

Company Benefits

EEO Commitment

","hiringOrganization":{"@type":"Organization","name":"Planned Systems International","sameAs":"https://www.plan-sys.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Washington, DC, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":47,"item":{"@type":"JobPosting","title":"Senior Information Security Analyst","datePosted":"2025-08-19","description":"

The Role

Ready to trade security headaches for the satisfaction of outsmarting cyber threats and having a little fun along the way?

At Chainguard, you’ll design and deploy innovative technical controls, lead incident response efforts, and push the boundaries of what’s possible in cloud-native security. Your work empowers Chainguardians to perform at their best while raising the security bar for the entire industry.

If you’re driven by curiosity, thrive in fast-moving environments, and want to make a meaningful impact on the open source ecosystem, this is your chance. Even if your experience doesn’t meet every requirement, we encourage you to apply.

What You’ll Do

Engineer and deploy clever controls so security incidents stay rare and boring
Lead incident response efforts, including tabletop exercises
Integrate security best practices with product teams who appreciate memes as much as mitigations
Conduct security assessments and penetration tests- bring your inner hacker
Automate detection and response workflows using Go, Python, or Shell, mostly so you can spend less time yelling at logs and more time celebrating wins
Stay one step ahead of emerging security threats
This position includes rotational on-call responsibilities; Not brutal- the workload is reasonable and shared across the team.

What We’re Looking For

5+ years’ experience in software development, security, or a related field
Experience and passion identifying, developing, and integrating threat intelligence into meaningful detection engineering and preventative controls
Experience securing cloud-native environments and endpoint detection & response
Familiarity with macOS or Linux security controls
Independent work style and strong communication skills
Experience with security frameworks: SOC 2, ISO 27001, NIST
Experience with open source software or red-teaming is a plus

\nBase Salary Range$139,000—$155,000 USD

About Us

Chainguard is the secure foundation for software development and deployment. By providing guarded open source software, built from source and updated continuously, Chainguard helps organizations eliminate threats in their software supply chains.

Founded by the industry's leading experts on open source software, security and cloud native development, Chainguard has built the largest library of open source software that is secure by default.

Chainguard’s mission is to be the safe source for open source.

We live and breathe our company values:

We are customer obsessed - We focus on delivering solutions to our customers that create value and make their lives better.

We have a bias for intentional action - We prioritize, plan, try things, and fail fast.

We don’t take ourselves too seriously (but we do serious work) - We are solving an important problem which takes focus, but we also like to enjoy the journey.

We trust each other and assume good intentions - We’re transparent with decisions to empower team members to make well informed decisions.

A few of the benefits we offer:

Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a $400 monthly stipend for coworking spaces, phone and internet costs.
Our Approach to Equity: Receive stock options upon hire and promotion. Plus, you can participate in secondary offerings and have 10 years to exercise your options (yes, you read that correctly: 10 years!).
100% Covered Health Insurance: We cover 100% of your health, vision and dental insurance premiums for you and your dependents. Nothing comes out of your paycheck.
∞ Flexible Time Off: Take the time you need – to do our best work, we need to recharge and reset.
18 Weeks Paid Parental Leave: We offer 18 weeks for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout your child's first year.
For a full list of our benefits and rewards, click here.

If your experience is close but doesn’t fulfill all requirements, please apply. We’re building the best team in technology and are focused on hiring “Chainguardians'' with unique backgrounds, perspectives, and experiences.

Chainguard is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.

By submitting your application, you acknowledge that Chainguard will process your personal data in accordance with Chainguard’s Privacy Policy.

","hiringOrganization":{"@type":"Organization","name":"Chainguard","sameAs":"https://chainguard.dev/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"United States - Remote","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":48,"item":{"@type":"JobPosting","title":"Senior Principal Information Security Analyst","datePosted":"2025-07-15","description":"

Your day at NTT DATA
The Senior Principal Information Security Analyst is a highly skilled and advanced subject matter expert, responsible for influencing and leading the implementation of the information security strategy, aligning it with business goals and industry best practices.

This role acts as a consultant in the design and implementation of security systems to protect the organization's computer networks from cyber-attacks and sets and maintains security standards.

The Senior Principal Information Security Analyst contributes to maintaining a secure and compliant environment and coaching and mentoring junior resources within the team as well as providing high level insights of industry best practices.

Key responsibilities:

Monitors security alerts and events from various sources, investigates potential threats, and escalates incidents as necessary.
Assists in the implementation and monitoring of security controls, including firewalls, intrusion detection systems, and access controls.
Performs regular vulnerability assessments, analyses scan results, and assists in prioritising and remediating identified vulnerabilities.
Supports the incident response team in investigating security incidents, documenting findings, and participating in remediation efforts.
Assists in ensuring compliance with industry standards (for example, GDPR, ISO 27001) by conducting assessments and implementing necessary controls.
Installs security measures and operates software to protect systems and information infrastructure, including firewalls and data encryption programmes.
Documents security breaches and assess the damage they cause.
Works with the security team to perform tests and uncover network vulnerabilities.
Fixes detected vulnerabilities to maintain a high-security standard.
Develops organizational best practices for IT security.
Performs penetration testing and upgrades systems to unable security software.
Installs and upgrades antivirus software and tests and evaluates new technology.
Assists with the installation of security software and understands information security management.
Researches security enhancements and makes recommendations to management.
Stays abreast of information technology trends and security standards.
Contributes to security awareness initiatives by creating training materials, conducting workshops, and educating employees about best security practices.
Maintains accurate records of security incidents, assessments, and actions taken for reporting and audit purposes.
Assists in the management and maintenance of security tools, including antivirus software, encryption tools, and security information and event management (SIEM) systems.
Participates in risk assessments to identify potential security threats, vulnerabilities, and associated risks to the organization.
Collaborates with cross-functional teams, IT, and other teams to ensure security measures are integrated into the organization's processes and projects.
Performs any other related task as required.

To thrive in this role, you need to have:

Excellent communication skills to effectively convey technical information to non-technical stakeholders.
Excellent analytical thinking and problem-solving skills to prevent hacking on a network.
Excellent leadership skills to identify and evaluate potential risks and to develop solutions.
Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
Significant proficiency in understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts.
Significant proficiency in understanding of patch management with the ability to deploy patches in a timely manner whilst understanding business impact.
Significant proficiency with MAC and OS.
Significant familiarity with security frameworks, standards, and regulations (for example, NIST, CIS, GDPR).
Significant proficiency of understanding in network and system architecture, protocols, and security controls.
Strong analytical skills to analyze security incidents and assess potential risks.
Ability to work both independently and collaboratively in a fast-paced environment.

Academic qualifications and certifications:

Bachelor's degree or equivalent in information security, cybersecurity, computer science, or related.
Master's degree or equivalent is advantageous.
Security certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM) are advantageous.

Required experience:

Significant demonstrated experience in information security or cybersecurity, or related roles.
Significant demonstrated experience working in a global IT organization.
Significant demonstrated experience with computer network penetration testing and techniques.
Significant demonstrated experience with security assessment and vulnerability scanning tools.
Significant demonstrated experience coaching and mentoring junior information security team members.

Workplace type:

Hybrid Working

","hiringOrganization":{"@type":"Organization","name":"NTT DATA","sameAs":"https://hello.global.ntt/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"hyderabad, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":49,"item":{"@type":"JobPosting","title":"Senior Information Security Analyst II","datePosted":"2025-07-02","description":"

Why join Freenome?

Freenome is a high-growth biotech company developing tests to detect cancer using a standard blood draw. To do this, Freenome uses a multiomics platform that combines tumor and non-tumor signals with machine learning to find cancer in its earliest, most-treatable stages.

Cancer is relentless. This is why Freenome is building the clinical, economic, and operational evidence to drive cancer screening and save lives. Our first screening test is for colorectal cancer (CRC) and advanced adenomas, and it’s just the beginning.

Founded in 2014, Freenome has ~400 employees and continues to grow to match the scope of our ambitions to provide access to better screening and earlier cancer detection.

At Freenome, we aim to impact patients by empowering everyone to prevent, detect, and treat their disease. This, together with our high-performing culture of respect and cross-collaboration, is what motivates us to make every day count.

Become a Freenomer

Do you have what it takes to be a Freenomer? A “Freenomer” is a determined, mission-driven, results-oriented employee fueled by the opportunity to change the landscape of cancer and make a positive impact on patients’ lives. Freenomers bring their diverse experience, expertise, and personal perspective to solve problems and push to achieve what’s possible, one breakthrough at a time.

About this opportunity:

At Freenome, the Senior Information Security Analyst plays a key role in protecting the organization's information assets by implementing, maintaining and monitoring security related events and incidents. This role investigates, analyzes, and responds to cyber incidents within the Freenome's local and cloud networks, or enclaves and will provide expertise regarding collecting evidence and do forensic analysis. This role will also define and implement security controls, ensuring compliance with relevant regulations and standards, and providing expertise in securing cloud of office environments. This position requires a blend of technical security skills, compliance knowledge, and a proactive approach to identifying and mitigating risks.

This position will report directly to the Director of Information Security. This role will be a Remote role.

What you’ll do:

Security Operations:

Implement, maintain, monitor and improve security systems (e.g., SIEM, IDS/IPS) to detect, alert and respond to security incidents.
Conduct security investigations and perform root cause analysis.
Ensure that incidents are correctly reported, documented, investigated and concluded in accordance with operational policies and procedures.
Manage security events as part of security operations, responding to urgent alerts, which may include off-hours investigation activities.
Manage and maintain security infrastructure (e.g., cloud firewalls, VPNs).
Perform vulnerability assessments and penetration testing.
Excellent knowledge of Endpoint protection.
Provide technical security expertise and guidance to other teams.
Evaluate and recommend new security technologies and solutions.
Provide ideas and feedback to improve the overall SOC capabilities and maturity.
Perform all other Information Security related duties as assigned and contribute to the success of the Information Security Team.

Compliance:

Participate in internal and external security audits.
Perform regular asset, account and access reviews.
Assist in the development, maintenance, and implementation of security policies, standards, and procedures.
Ensure compliance with relevant regulations and standards (e.g., HITRUST, NIST 800-53r5 and SOC 2 Type 2).
Track and remediate compliance findings.

Cloud Security:

Design, implement, and maintain security controls for cloud environments.
Collaborate with IT to ensure the security of Cloud services, including virtual machines, storage, networking, and databases.
Conduct security assessments of cloud configurations and deployments.
Develop and maintain cloud security best practices and guidelines.
Stay up-to-date on security best practices and emerging threats

Must haves:

Bachelor's degree in Information Security, or a related field.
8+ years of experience working in Information Security.
Current CISSP certification.
Strong understanding of security principles, technologies, and best practices.
At least 3 years' hands-on experience in SIEM tools implementing, operating, maintaining, and incident management in mission critical environments.
Experience with vulnerability management and penetration testing.
Familiarity with relevant regulations and standards (HITRUST, NIST 800-53r5, SOC 2 Type 2).
Strong analytical and problem-solving skills.
Ability to work independently and as part of a team.

Nice to haves:

Other Security certifications (e.g., CCSP, CCAK, CCSK, CISM, GCIH, GCIA, GSEC, Azure Security Engineer Associate, GCP Cloud Security Engineer).
Experience with scripting languages (e.g., Python, PowerShell, Bash).
In-depth knowledge of Microsoft Azure security services and best practices.
Experience with security automation and orchestration.
Experience with Governance, Risk, and Compliance (GRC) tools.
Can-Do attitude.
Knowledge and expertise in a myriad of Information Security Solutions across cloud and IT security.
Excellent analytical, interpersonal and communication skills both oral and written.
An unwavering personal integrity and work ethic.
A systematic problem-solving approach, coupled with effective communication skills and a sense of ownership and drive.

Benefits and additional information:

The US target range of our base salary for new hires is $131,325 - $201,000. You will also be eligible to receive pre-IPO equity, cash bonuses, and a full range of medical, financial, and other benefits depending on the position offered. Please note that individual total compensation for this position will be determined at the Company’s sole discretion and may vary based on several factors, including but not limited to, location, skill level, years and depth of relevant experience, and education. We invite you to check out our career page @ freenome.com/job-openings/ for additional company information.

Freenome is proud to be an equal-opportunity employer, and we value diversity. Freenome does not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.

Applicants have rights under Federal Employment Laws.

#LI-REMOTE

","hiringOrganization":{"@type":"Organization","name":"Freenome","sameAs":"https://www.freenome.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Remote"}}}},{"@type":"ListItem","position":50,"item":{"@type":"JobPosting","title":"Junior Information Security Analyst Graduate","datePosted":"2025-08-09","description":"

Company Description

Rentokil Initial (RI) delivers services that ‘Protect People, Enhance Lives’. We protect people from the risks of pest-borne disease, the risks of poor hygiene or from injury in the workplace. We aim to enhance lives with services that protect the health and wellbeing of people and the reputation of our customers’ brands. Throughout the world, demand for higher standards of public health, stricter food safety legislation and compliance with workplace safety regulations are driving demand for our service expertise.

Rentokil Initial is a global support services company, operating in all of the major economies of Europe, North America, Asia Pacific and Africa:

Rentokil Initial is a FTSE 60 company and operates in over 90 countries with revenues of over £5bn.
We are a ‘people business’ with over 60,000 colleagues.
We offer a wide range of services to businesses, the public sector and residential customers.
Our core market categories are Pest Control and Hygiene/Washroom services.

Rentokil Initial has identified three core values that underpin our business - Service, Relationships and Teamwork. By living our values, we are better placed to offer consistently outstanding customer service.

Job Description

The Role

We are seeking highly motivated, enthusiastic candidates eager to pursue a rewarding career in information security, to join our structured 2-year graduate development pathway.

As a Junior Information Security Analyst, you will assume a critical role in protecting our organisation’s digital infrastructure, ensuring the integrity, confidentiality, and availability of sensitive information. You will collaborate extensively with the Global Information Security team, the Global Infrastructure team and our Regional IT Teams, contributing to the identification, assessment, and mitigation of security risks across our global operations. This position offers significant opportunities for professional growth and development within the rapidly evolving field of information security.

A key aspect of this role requires candidates to possess a broad and foundational knowledge of information security. Furthermore, the successful applicant must demonstrate a proven capacity to advise and guide staff in a manner that is consistently open, honest, and engaging, fostering a culture of security awareness throughout the organisation. While specific expertise in niche areas is advantageous, it is not a prerequisite for this entry-level position.

Applicants must be willing and able to travel to our Head Office in Crawley, UK, on a semi-regular basis.

The Graduate Pathway

Our European Graduate Development Pathway is a 2-year plan designed to kickstart your career in your chosen field. You will join the Company as part of a cohort of Graduates in different parts of the European Head Office team where you will have the opportunity to develop yourself and your skills, giving you plenty of chances to grow and really make your mark.

This exciting two-year program includes integration, development, and project work. Year one focuses on getting comfortable in the role, with a mentor to guide you, and development opportunities alongside other Graduates within the business. Year two involves a Graduate cohort business project to own and run, as well as the potential opportunity for secondments. This pathway may evolve during the program.

Qualifications

What we are looking for:

Bachelor’s degree in Information Security, Computer Science, or related field.
Second European Language (advantageous, but not required)
Able to travel to our Head Office in Crawley, UK on a semi-regular basis

We’d love to see someone who has:

Strong analytical and problem-solving skills.
Excellent communication and interpersonal skills, with the ability to convey complex information clearly and persuasively.
The ability to work collaboratively within a dynamic team environment.
A strong and broad understanding of fundamental cybersecurity principles and concepts.
Basic knowledge of networking protocols and technologies.
Exposure to common security tools and technologies.
The capability to work productively in flexible and remote environments.

Additional Information

What do we offer:

Competitive salary
Hybrid working
Rentokil Initial Reward Scheme
Employee Assistance Programme
Free parking

Opportunities for flexible working hours can be considered. Rentokil Initial is home to everyone; feel free to come as you are.

","hiringOrganization":{"@type":"Organization","name":"Rentokil Initial","sameAs":"https://www.rentokil-initial.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Crawley, England, United Kingdom","addressCountry":"United Kingdom","addressRegion":"Europe"}}}}]}

Set your job search on autopilot

Senior Associate Jobs

Senior Associate, Information Security Analyst

Senior Associate, Information Security Analyst

Senior Associate Information Security Analyst

Senior Associate Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Senior Associate Managed Services Information Security Analyst

Information Security Analyst II

Senior Information Security Analyst

Information Security Analyst Advisor

Senior Information Security Analyst

Information Security Analyst - Journeyman

Information Security Analyst II

Sr. Information Security Analyst

Lead Information Security Analyst

Senior Information Security Analyst

Senior Information Security Analyst

Information Security Analyst - Journeyman

Information Security Analyst (GRC)

Information Security Analyst (GRC)

Information Security Analyst, AS

Associate Information Security Analyst

Senior Information Security Analyst

Senior Information Security Analyst

LEAD INFORMATION SECURITY ANALYST

Associate Information Security Analyst

Lead Information Security Analyst

Information Security Analyst SME

Senior Information Security Analyst

Senior Information Security Analyst

Senior Principal Information Security Analyst

Senior Information Security Analyst II

Junior Information Security Analyst Graduate