Job description

Senior Security Analyst

New Haven, CT - HYBRID

Full Time

Overview

The Senior Security Analyst for Information Security Policy and Process will be responsible for performing day-to-day governance, compliance and risk management tasks attributed to Information Security and information technology.

This position will work in conjunction with the Manager of Information Security Policy and Process to ensure that Information Security risk is properly identified and included in the IT Security Risk register.

This position will include creating and managing information technology and organizational policies and standards in support of legal and regulatory compliance needs as well as general information technology and organizational information security policies and standards that improve the Information Security risk mitigation maturity of the Order.

Core Responsibilities:

• Assist in developing organizational security policies.
• Assist in defining information technology security standards
• Work with various business units to ensure controls are adequate, appropriate, and effective.
• Support vendor due-diligence process and help to lead and define overall third-party risk management efforts.
• Perform security and compliance assessments on new and existing systems, processes, technology.
• Support internal and external audit process for relevant compliance concerns.
• Execute business impact analysis with guidance from the manager of IT Security Information Security Policy and Process
• Assist in maintaining the information security risk register
• Interface with information technology and lines of business to provide guidance and support.
• Perform periodic gap assessments to validate compliance on an ongoing basis.
• Stay up to date and informed on developing regulatory concerns and changing IT and information security trends.

Essential Competencies

Professionalism/Personal Accountability, Collaboration and Teamwork, Communication, Flexible and Adapts to Change, Service to Customers and Clients

Skill Qualifications:

Required:

• Working knowledge of legal and regulatory compliance standards and requirements such as NYDFS
• Strong understanding of the NIST CSF framework and other associated Information Security standards
• Ability to think diagnostically and critically in applying Information Security policy and process knowledge to Vendor evaluations
• Excellent written and oral communication skills.
• Strong work ethic with attention to detail.
• Ability to excel in a fast paced and rapidly changing environment.

Preferred:

• CISM, CRISC, CISA. CISSP or other security management certification
• Experience with Compliance360 and ServiceNow GRC platforms

Education and Experience Qualifications:

Required:

• Bachelor's degree in Information Security, Cyber Security, Computer Science, or another related field
• 3-5 years’ experience with legal and regulatory compliance standards such as NYDFS
• Experience with IT Information Security policy and process management in an insurance and financial services environment
• Strong communication and interpersonal skills to collaborate with cross-functional teams
• Strong analytical and problem-solving skills capable of managing projects that drive business objectives
• Exceptional written, oral, and interpersonal communication skills
• Proficient in Information Security policy and process requirements and relevant principles, best practices and standards across insurance and financial services industry
• Ability to meet tight deadlines and to prioritize tasks

Preferred:

Experience in performing vendor Information Security reviews

Physical Demands

Must be able to remain in a stationary position for a majority of the workday.

Job Type: Full-time

Salary: Up to $105,000.00 per year

Benefits:

• 401(k)

Experience level:

• 6 years
• 7 years

Schedule:

• 8 hour shift

Experience:

• NIST CSF framework: 4 years (Required)
• Cybersecurity: 6 years (Required)
• GRC platforms: 6 years (Required)

Work Location: On the road

Speak with the employer
+91 972-521-7400

abouteureka.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, abouteureka.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, abouteureka.com is the ideal place to find your next job.