Information Security Analyst

📋 Description

• Governance, risk, and compliance activities related to security.
• Perform risk assessments for SaaS apps; apply strong logical access controls.
• Monitor and remediate vulnerabilities; gather audit evidence.
• Due diligence and ongoing monitoring of third-party relationships.
• Contribute to security awareness training and phishing simulations.
• Track KRIs and report on remediation progress.

🎯 Requirements

• 2+ years in technology operations, tech audit, or GRC.
• Knowledge of security risk management, CIA triad, and control design.
• Familiarity with security controls for cloud computing and third-party SaaS.
• Experience with learning new skills, including AI and automation.
• Experience gathering evidence for audits or examinations.
• Ability to interview business processes and document risks.

🎁 Benefits

• Medical, dental, and vision; life and AD&D; STD/LTD.
• Flexible paid time off and encouragement to use it.
• Community through 7 Employee Resource Groups.
• Ownership to lead change and affect the business.
• Professional development opportunities.
• Lunch from NYC headquarters in-house chef.