Information Security - Information Security Analyst 3 - Contingent

Mindlance

CHARLOTTE, NC

JOB DETAILS
SKILLS
Administrative Skills, Analysis Skills, Automation, Consulting, Data Collection, Information/Data Security (InfoSec), Internet Security, Maintain Compliance, Metrics, Microsoft Excel, Microsoft PowerPoint, Microsoft Word, Operations Management, Organizational Development/Management, Problem Solving Skills, Process Improvement, Product Lifecycle Management, Quality Metrics, Regulatory Compliance, Relationship Management, Reporting Dashboards, Risk, Risk Management, Sales Management, Security Analysis, Time Management, Web Analytics
LOCATION
CHARLOTTE, NC
POSTED
16 days ago
In this contingent resource assignment, you may: Consult on or participate in moderately complex initiatives and deliverables within Information Security Analysis and contribute to large-scale planning related to Information Security Analysis deliverables. Review and analyze moderately complex Information Security Analysis challenges that require an in-depth evaluation of variable factors. Contribute to the resolution of moderately complex issues and consult with others to meet Information Security Analysis deliverables while leveraging solid understanding of the function, policies, procedures, and compliance requirements. Collaborate with client personnel in Information Security Analysis. Required Qualifications: 4+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work or consulting experience, training, military experience, education.

LOCATION - CHARLOTTE (BREVARD) , LAS COLINAS, TX, CHANDLER FOR- EXCEPTIONAL CANDIDATES
SPOTLIGHT - 5.21
CONVERSION - YES
INTV - TEAMS (2) PANEL

MUST HAVE -
1 or more of the following certifications
CISSP, CISM, CISA, CRISC
Relationship management



Experience with information security program governance, metrics, executive reporting desired.
Governance Risk and Compliance (GRC)
Data Governance
*Adapt at SQL queries*
Product Lifecycle Management
Metrics
Proficient at Microsoft Word, Excel and PowerPoint
Metrics
Strong written and verbal
Strong interpersonal

Role and responsibility
Executive Reporting, Metrics and Analytics Team (ERMA)
" Partners closely with the domain owners to develop metrics and reports. They will serve as a front door to the metric and reporting and engineer automation solutions (from automation of metrics, manual reporting processes, and developing dashboards).
" Adhere to metric guidelines and standards developed by Tech Controls, IRM, and Metrics Design and Governance teams to evaluate and manage metrics.
" Supports the domain and metric teams with metric changes, data gathering, and reporting to audiences inside and outside of Cybersecurity.

Strategy & Tools
" Responsible for ERMA Compliance Remediation.
" Provide services to peer ERMA teams to improve and mature processes, operations, and organizational management.
" Design, update, and maintain CS Metrics Portal and encompassing products to make quality metrics visible, manageable, and actionable.

Metrics Design and Governance
" Manages risk, provides control oversight, metric quality, and compliance for Cybersecurity metrics to effectively manage adherence to policies and procedures.
" Responsible for the Cybersecurity Metric Committee (CMC).
" Provides tactical and administrative support to ensure delivery of standardized timely accurate contextually relevant information.
" Provide services that facilitate and manage the end-to-end lifecycle of metrics with Cybersecurity domain metrics stakeholders.

ERMA Domain Lead (this is the primary day to day activities, but role also performs and supports all the others above.
" Completes or assists the metric owner with the completion of the intake form.?
" Obtains or assists domain with obtaining needed approvals for content updates.?

This role will be working with the below roles

" Metric Owner / Subject Matter Expert (SME)
" Metric Delegate?
" Cybersecurity Domain Owner?
" Domain Delegate?
" Higher Committee
" Control Owner?
" Risk Accessible Unit (RAU) Owner?
" RAU Delegate

EEO:

Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.

About the Company

M

Mindlance