Information Security Analyst

Job Title

Candidate must be a Wisconsin resident and no relocation is allowed. Can work remote up to five days, however, the candidate must come in if needed including on short notice. At a minimum, the candidate will come in quarterly but could be more frequently as determined by business needs. Remote work will be discussed with candidates in the interview phase.

Required Skills and Experience:

• Well qualified candidate will have broad knowledge of information security and experience application development, technical architecture, contracting, audit, or vendor management
• Be familiar with NIST or another recognized framework
• Demonstrated ability to solve complex problems, convey both oral and written instruction, and handle multiple task interruptions while providing services in a professional and courteous manner
• Demonstrated attention to detail and organizational skills
• Demonstrated ability to work effectively with customers to solve business challenges while balancing the need for confidentiality, integrity, and availability
• Demonstrated commitment to fostering a diverse working environment
• Demonstrated ability to work independently, as part of a team of peers, and also to support and contribute to a multidiscipline team environment

Responsibilities:

• Identifying and continuously assessing risk
• Developing, institutionalizing, and improving strategies to mitigate risk
• Limiting the potential effects of information security events
• The selection, assessment, authorization, and monitoring of security controls while contributing to the overall information security plan
• Partner with organizational leaders to incorporate information security best-practices into technical and operational development
• Provide recommendations on how to improve the information security posture of programs and reduce risk
• Communicate risks in simple and comprehensible terms. Provide options to mitigate risk considering business impact
• Draft security requirements to be included into charters, scope documents, procurements
• Document and communicate analysis. Answer clarifying questions
• Escalate to ISS leadership if an acceptable level of risk cannot be achieved
• Be a solutions-focused advocate
• Intake projects and other program initiatives and champion them through the appropriate ISS work stream
• Gather information as needed so that security team can perform thorough analysis
• Communicate work stream deliverables to the customer
• Verify that the deliverable meets the customer need, follow-up on any clarifications
• Coordinate across ISS meeting their security-focused needs
• Coordinate with other client staff and other program staff as needed in order to arrive to an outcome
• Responsibility and authority will vary based on the use case and customer need
• Request and/or gather artefacts demonstrating compliance
• Schedule/facilitate communications between auditor/incident response, vendors, technical teams, and other program stakeholders
• In partnership with ISS, assess audit results and develop corrective action plans/plans of action and milestone
• Provide oversight to the resolution, test for compliance, and request authority to close
• Respond to regulatory inquiry and draft documents as needed
• Back-up other security liaison roles
• Draft and deliver status reports
• Establish and maintain positive working relationships with stakeholders
• Establish and documents standard operations for job-related activities

**Only those lawfully authorized to work in the designated country associated with the position will be considered.**

**Please note that all Position start dates and duration are estimates and may be reduced or lengthened based upon a client's business needs and requirements.**