Security Analyst

Position: Security Analyst

Location: Remote

Availability: To Start: As soon as possible

Are you looking for a growth opportunity for a reputable company with a positive work environment? Our client is looking for a Security Analyst to join their team. Please contact us today to discuss this opportunity

Responsibilities:

• Maintaining all security tools and managing updates.
• Developing new security SOPs and formalizing internal controls.
• Monitoring our Managed Services Provider (MSP) to implement organization-wide security technology and developing our Security Operations Center (SOC).
• Managing internal + external policy compliance and maintaining controls for external governance (SOC2, ISO27001, GDPR).
• Evaluating and vetting new software/technologies and implementing security controls to mitigate risk.
• Managing the Security Incident Response program and developing testing plans.
• Designing, maintaining, and troubleshooting the SIEM environment.

Specific functions you will be responsible for leading...

• Owning the client's Security IT processes, developing standard operating procedures and protocols.
• Coordinating implementation of IT resources and assets, assessing for data security.
• Developing, maintaining, and improving the client's security awareness program.
• Supervising and resolving IT security issues, business data, and events, you'll identify gaps in the support process and amend them accordingly.
• Owning the SOC to identify problems affecting users, ensuring our projects meet the client's overall needs.

Other Key Responsibilities:

SOC 2 Compliance Management:

• Lead efforts to achieve and maintain SOC 2 compliance and certification.
• Develop, implement, and review security policies, procedures, and controls.
• Monitor compliance with security policies and procedures.

Documentation and Policy Development:

• Guide internal teams in creating and maintaining comprehensive documentation for SOC 2 compliance.
• Ensure all documentation aligns with SOC 2 standards and requirements.
• Conduct regular reviews and updates of enterprise policies and procedures.

Collaboration and Evidence Gathering:

• Collaborate with internal teams and external vendors to gather evidence required for SOC 2 audits.
• Coordinate with various departments to ensure timely collection and submission of audit materials.
• Serve as the main point of contact for external auditors and ensure all audit requirements are met.

Risk Assessment and Mitigation:

• Conduct regular risk assessments and vulnerability analyses.
• Identify security risks and develop strategies to mitigate them.
• Implement and monitor controls to ensure compliance and security.

Training and Awareness:

• Conduct training sessions and workshops to educate employees about security policies and SOC 2 compliance requirements.
• Promote a culture of security awareness throughout the organization.

Qualifications:

• Bachelor's degree in computer science, Information Technology, or a related field.
• Proven experience in information security, risk management, or compliance roles.
• Familiarity with SOC 2 standards and certification processes.
• Strong understanding of security frameworks and best practices.
• Excellent communication and interpersonal skills.
• Detail-oriented with strong organizational skills.
• Ability to work independently and as part of a team.
• Proficiency in Microsoft 365 & Azure and one or more programming/scripting languages

Preferred Qualifications:

• Relevant certifications such as CISSP, CISA, or CISM.
• Experience working in a security operations center (SOC) or similar environment.
• Prior experience with security audits and evidence gathering.

You will join a team...

• From diverse locations and backgrounds;
• Committed to driving programs that advance climate action and sustainable development through high-quality web applications, database solutions, and analytical platforms using the latest and evolving technology stacks;
• That embodies the values the client has established for itself, and which include Teamwork, Results, Integrity, Balance and Exploration.

Why Choose Addison Group?

A leading provider of professional staffing and search services, Addison Group distinguishes itself through exceptional delivery, specialized knowledge and strong relationships. Addison enables ideal connections between talented professionals and dynamic businesses. National practice areas include Administrative & HR; Engineering; Finance & Accounting Contract; Finance & Accounting Executive Search; Financial Services; Healthcare and Information Technology. Addison is an Inavero's 2012 Best of Staffing winner for both Client and Candidate service. www.addisongroup.com

Why choose Addison Information Technology?

Pay: We negotiate high salaries using U.S. Bureau of Labor Statistics

Benefits & Bonuses: You are eligible for medical, dental, vision insurance benefits, 401K, and monetary bonuses

Permanent Employment: Many of Addison's Information Technology job openings lead to potential permanent employment

Connections: You connect directly with hiring managers from renowned organizations

Options: You are presented multiple employment options near your home

Professional Development: You are provided hiring process advice, resume revision, and employment term negotiation

Addison Group is an Equal Opportunity Employer. Addison Group provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. Addison Group complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. Reasonable accommodation is available for qualified individuals with disabilities, upon request.