Security Analyst Associate, GRC

Key Responsibilities

• Assist in investigating alerts generated by security controls and implement recommendations to improve detection capability accuracy.
• Participate in the optimization of incident response standards and procedures to increase the organization’s cyber resiliency.
• Analyze the enterprise information security environment and identify potential gaps in security measures to safeguard valuable information assets.
• Identify, evaluate, and report on information security risks.
• Collaborate with vendors and internal departments to optimize the performance of security controls.
• Collaborate with network and technology support teams to enhance and improve security processes and documentation.
• Participate in the evaluation and assessment of information security vulnerabilities, solutions, and organizational posture.
• Stay current with security technologies and threats to contextualize observed events.
• Assist in providing initial assessment of impact severity for IT security incidents and execute the appropriate response.
• Investigate fraud and other computer issues.
• Perform daily operational tasks to protect NM’s assets, including:
• Analyzing security alerts.
• Maintaining endpoint protection infrastructure.
• Facilitating risk evaluation related to vulnerability assessment findings and coordinating risk treatment.

Requirements & Tech Stack

• Network (protocols, topologies, TCP/IP)
• Security controls (proxies, IPS, IDS, Firewall, packet analyzers)
• Systems (Windows, Linux/UNIX)
• Software development (development / scripting languages)
• Incident Response
• Threat and Vulnerability Management
• Working knowledge of Security Standards/Controls specified under various IT governance and compliance models: NIST, HIPAA, PCI, ISO 27001&27002, ITIL.
• Excellent problem-solving skills.
• Demonstrated timely task completion involving solid organizational skills, task tracking, follow-up, and productive peer interaction.
• Excellent verbal and written communication skills.

Qualifications

• Bachelor’s degree preferred or equivalent combination of education and experience.
• Certifications or courses in Security+, GSEC, GCWN, GCED, or CEH are a plus.