Sign upLog in
Information Security Jobs in Salem, OR

Information Security Analyst 2

Net2Source

Salem, OR

Apply
JOB DETAILS
SALARY
$53–$56 Per Hour
SKILLS
Agile Programming Methodologies, Analysis Skills, Atlassian JIRA, Auditing, Best Practices, Business Processes, CISM - Certified Information Security Manager, CISSP - Certified Information Systems Security Professional, Channel Strategies, Cloud Computing, Committee of Sponsoring Organizations of the Treadway Commission (COSO), Communication Skills, Computer Science, Computer Security, Consulting, Control Objectives for Information and related Technology (COBIT), Cross-Functional, Customer/Client Research, Data Analysis, Data Quality, Data Recovery, Data Sets, Documentation, GIAC - Global Information Assurance Certification, ISO (International Organization for Standardization), Identity Data Management, Industry/Trade Analysis, Information/Data Security (InfoSec), Internet Security, Leadership, Legal, Metrics, Microsoft Excel, Microsoft Office, Microsoft PowerPoint, Network Security, Persuasion Skills, Presentation/Verbal Skills, Problem Solving Skills, Process Development, Process Improvement, Regulatory Compliance, Retail, Risk, Risk Analysis, Risk Management, Sales Management, Security Analysis, Security Architecture, Security Software, ServiceNow, Software Development, Standup Meetings, Stewardship, Strategic Planning, Supply Chain, Systems Administration/Management, Systems Analysis, U.S. National Institute of Standards and Technology (NIST), Validation Testing, Vendor/Supplier Evaluation, Work From Home, Writing Skills
LOCATION
Salem, OR
POSTED
7 days ago
Join a Global Leader in Workforce Solutions Net2Source Inc.
Who We Are
Net2Source Inc. isn't just another staffing company, we're a powerhouse of innovation, connecting top talent with the right opportunities. Recognized for 300% growth in the past three years, we operate in 34 countries with a global team of 5,500+. Our mission? To bridge the talent gap with precision Right Talent. Right Time. Right Place. Right Price.

Title: Information Security Analyst 2
Remote Work: Yes
Pay Rate: $53 -$56 Hourly
Duration: 9 Months

Details:
- Local candidates preferred (to come on site on an as needed basis), but remote candidates will be considered
- Contract is to help with leave coverage; potential for extension, not guaranteed
- Degree preferred, not a hard requirement
- CRISC, CISSP certifications preferred, not required
- 2-5 years' minimum experience required in tech, cybersecurity, risk management, or similar role

Top must-have skills include the following:
- Third party risk assessment
- Auditing
- ServiceNow experience
- JIRA
- Microsoft Office Suite

Desired soft skills:
- Adaptable
- Willingness to learn
- Effective communication skills
- Ability to translate deep technical concepts to non-technical audiences

Skills that would make a candidate stand out:
- Experience directly in risk management
- Understanding of retail/supply chain
- Passion for sport
- ETW will help with risk assessment, controls assessments, and metrics/data analysis
- Will work on a team of ~4 others; lots of cross functional work between different stakeholders
- HM anticipates 2 rounds of interviews

Who Are We Looking For? We're looking for a Senior Information Security Analyst to join the Information Risk Management (IRM) team within Corporate Information Security (CIS).
This role will deliver against an information security and cybersecurity assessment plan integrated into a broader enterprise risk management program supported by executive management.
You will leverage your knowledge of security policies, standards, controls, and industry best practices to perform risk assessments of client systems and systems managed for client by vendors.
Our ideal candidate has superb communication skills, strong analytical and problem solving ability, intellectual curiosity, and experience translating complex security risks for both technical and non-technical audiences.

What Will You Work On? This role works with the Information Risk Management team to identify, assess, and elevate visibility to information security risks across Client's technology landscape.

Key responsibilities include: Vendor Information Risk Assessments
Perform formal risk assessments on partner and vendor connections, evaluating vendor processes at the point of engagement with client.
Ensure sufficient validation of data sharing arrangements and agreements to protect client's sensitive information.
Confirm business objectives align with the type and volume of data used, maintaining a "need to know/use " mindset.
Review third-party SOC reports and vendor security documentation as part of assessment activities.
Help establish risk and remediation ownership for identified vendor-related risks and document findings in the Risk Register. Security Controls Baseline Assessments
Assess moderately complex platforms and systems against client security and configuration standards.
Evaluate and process exceptions to information security policies and standards.
Perform compliance control validation testing to determine the operating effectiveness of IT controls for scoped systems.
Consult with technology units on IT general controls (ITGCs) and compliance matters.
Champion information security policies, standards, controls, and processes so compliance requirements are addressed as part of business-as-usual operations. Internal Risk Assessments
Identify, document, and elevate visibility to information risk where business direction creates potential exposure to employee, athlete, and product sensitive data streams.
Identify and profile client systems and processes that require risk assessments; scope specific assessments accordingly.
Perform detailed analysis of threats and vulnerabilities across information security domains including network security, asset security, security engineering, identity and access management, security operations, and software development security. " Review key system configurations and complex IT infrastructures (e.g., cloud services).
Communicate effectively through risk reports, presentations, and stakeholder interactions to drive remediation of identified risks. Data Analysis and Other Projects " Support vendor risk management metrics, reporting, and master data stewardship to improve accuracy, timeliness, and completeness.
Provide analysis and insights into data supporting the effectiveness of technical and process based cybersecurity controls.
Collaborate on process improvements for data retrieval, analysis, and risk assessment intake.
Contribute to IRM team projects and strategic initiatives as assigned, including documentation in ServiceNow (SNOW) and Box.
Support the risk analysis intake process and participate in daily standups and weekly process meetings. General Responsibilities
Execute targeted internal and external (vendor) risk assessments in support of IRM strategy, following established team processes and enablers.
Be proactive in anticipating next steps in the risk assessment process and take action accordingly.
Collaborate with team members on assessment approach, scoping, documentation, and issue presentation activities.
Serve as an information security and CIS ambassador to client lines of business and management.
Provide enforcement of security policies, standards, and procedures by working cross functionally with Compliance and Governance functions.
Stay current on information security technologies, trends, standards, best practices, and emerging threats and vulnerabilities. Who Will You Work With? This role reports to the Director of Information Risk Management within Corporate Information Security (CIS). You will build strong partnerships with the IRM team, CIS, client business and technology process owners, and various governance and legal functions (e.g., Audit and Privacy). You will work cross-functionally across client at World Headquarters and globally.

What You Bring
  • Bachelor's degree in Business Information Management, Computer Science, or a related field, OR relevant experience in lieu of a degree.
  • 5+ years of experience in information security, risk management, GRC, or a related field.
  • Knowledge of information security principles and practices, best practice security architectures, general procedures, and guidelines.
  • Knowledge of information security frameworks and best practices (e.g., NIST, ISO 27000, COBIT, COSO).
  • Experience performing vendor/third-party risk assessments and internal information security risk assessments.
  • Experience assessing systems against security standards and performing control validation or baseline assessments.
  • Experience reviewing third-party SOC reports preferred.
  • A general understanding of technology use, trends, and risks as they apply in a business context and environment.
  • Strong analytical and problem-solving skills with experience identifying solutions for complex problems in enterprise environments.
  • Superb communication skills (written and verbal) with comfort and experience in presentation delivery and proven persuasion skills.
  • The ability to appropriately communicate complex security risks to non-technical staff.
  • Experience with ServiceNow, Confluence, or Jira preferred.
  • Advanced knowledge of Excel and PowerPoint; experience organizing and analyzing large datasets preferred.
  • CISSP, CISM, CRISC, or relevant GIAC Management Focus Area certifications preferred.
  • Must be trustworthy in keeping sensitive data confidential.
  • Demonstrated desire for continual learning and improvement.

Why Work With Us?
We believe in more than just jobs we build careers. At Net2Source, we champion leadership at all levels, celebrate diverse perspectives, and empower you to make an impact. Think work-life balance, professional growth, and a collaborative culture where your ideas matter.

Our Commitment to Inclusion & Equity
Net2Source is an equal opportunity employer, dedicated to fostering a workplace where diverse talents and perspectives are valued. We make all employment decisions based on merit, ensuring a culture of respect, fairness, and opportunity for all, regardless of age, gender, ethnicity, disability, or other protected characteristics.

Awards & Recognition
" America's Most Honored Businesses (Top 10%)
" Fastest-Growing Staffing Firm by Staffing Industry Analysts
" INC 5000 List for Eight Consecutive Years
" Top 100 by Dallas Business Journal
" Spirit of Alliance Award by Agile1
Ready to Level Up Your Career?
Click Apply Now and let's make it happen.

About the Company

N

Net2Source

Net2Source Inc. is a Global Workforce Management Solutions Company, headquartered in New Brunswick, NJ with its local offices in Texas, California, Florida, Illinois, Colorado and Michigan and its global operations in Canada, UK, Europe, UAE, Malaysia, Australia, China, Singapore and India. Net2Source offers a wide gamut of consulting solutions customized to specific client needs including but not limited to Application Development, Workforce Management and Project Consulting. Whether it’s a Fortune client, whether it’s a System Implementer or whether it is a Start -up, our recipe to success – Exceed expectations! Under promise, over deliver.
COMPANY SIZE
50 to 99 employees
INDUSTRY
Other/Not Classified
WEBSITE
http://www.net2source.com

Resume Resources

Free Resume TemplatesFree Resume Builder

Similar Job Searches

Information Security Analyst Jobs in Beaverton, ORRemote IT JobsEntry Level IT Jobs