Information Security Analyst

Required

• 8-11 years of progressive experience in information security, privacy, compliance, governance, audit, risk management, or a related field.
• Working knowledge of information security principles and controls.
• Familiarity with security, privacy, and compliance frameworks and regulations, including HIPAA, PCI DSS, FERPA, GDPR, CCPA/CPRA, or similar requirements.
• Strong organizational, analytical, and documentation skills.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities in a fast-paced environment.
• Demonstrated ability to independently manage multiple security, privacy, and compliance initiatives with limited supervision.
• Proficiency with Microsoft Office applications, including Excel, Word, and PowerPoint.

Preferred

• Experience supporting SOC 1, SOC 2, ISO 27001, or similar compliance frameworks.
• Experience with vendor risk management and customer security questionnaires.
• Familiarity with privacy assessments, data mapping, and data governance activities.
• Experience with governance, risk, and compliance (GRC) platforms.
• Experience with artificial intelligence (AI) technologies, AI governance, AI-assisted productivity tools, privacy considerations, and emerging regulatory requirements (e.g., ISO/IEC 42001 and the EU AI Act) is highly desirable.
• Willingness to support a global organization with regular availability through 11:00 AM Eastern Time (8:30 PM IST during U.S. daylight saving time and 9:30 PM IST during U.S. standard time).
• Light development, scripting, API, or automation experience is a plus.
• Experience supporting security automation, AI initiatives, or technology-enabled process improvements is a plus.
• Security+, CISSP, CCSK, CIPP, CIPM, CRISC, CISA, or similar certifications preferred.
• Experience within a professional services, consulting, or technology organization.