Information Security Analyst - PCI-DSS / HIPAA

Description security analysts are responsible for improving the overall security posture of the organization. They evaluate, test and document security solutions and controls, and work closely with other security team members to remediate risk while ensuring the business can innovate.

Information security analysts must continually adapt to stay a step ahead of cyber attackers and stay up to date on the latest methods attackers use to infiltrate computer systems. Analysts in this role are expected to consistently learn and grow. This is not a passive role and requires a passion for security and rigor to protect the business.

Information security analysts collaborate with internal and external teams, along with technology management and business stakeholders.

Essential Job Duties :

• Utilize and configure technical systems to monitor for unusual and suspicious activity across a wide range of products.
• Assist with security configuration standards for systems and business applications.
• Serve as a member of the information security team to support change management processes.
• Participate in technical and non-technical projects requiring information security oversight and to ensure policies, procedures and standards are met.
• Serve as an additional security team member, aiding in incident monitoring and incident response (IR) in partnership with the security operations center (SOC) teams.
• Maintain vendor management standards, questionnaires, and documentation to adhere to regulatory compliance.
• Interface with internal and external stakeholders for risk assessments.
• Recommend new security approaches and business process changes to support existing security controls; that do not negatively impact or severely impeded business innovation.
• Serve as a liaison for the security team regarding product team efforts.
• Perform other duties as assigned.

Skills And Experience :

Additional Qualifications :

Education Requirements :

Certification Requirements :

(ref : hirist.tech)