Senior Information Security Analyst

7 or more years of experience in information security, governance, risk, and compliance roles. Strong hands-on experience with vulnerability management, including analysis and tracking of scan results over time. Solid knowledge of security frameworks and standards such as NIST 800-53, ISO 27001, SOC 2, PCI, HIPAA, or similar. Experience supporting third-party audits and continuous monitoring programs, including FedRAMP or equivalent frameworks. Ability to translate security and compliance requirements into actionable guidance for technical and non-technical teams. Familiarity with cloud environments and security concepts across AWS, Azure, and or GCP. Excellent written and verbal communication skills, with strong analytical and documentation abilities. Security certifications such as CISSP, Security+, or equivalent are considered a plus.

Analyze vulnerability scan reports, tickets, and asset data to identify trends, risks, and improvement opportunities. Lead vulnerability triage and remediation workflows, including ticket assignment, labeling, prioritization, and closure tracking. Improve vulnerability management processes through automation, clearer workflows, and enhanced reporting metrics. Provide guidance to control and system owners on secure configurations, remediation strategies, and scalable control implementation. Support continuous monitoring and compliance activities, including PO&AMs, deviation tracking, and control documentation. Collaborate with security engineering, product, and operations teams to strengthen security tooling and ticket automation. Participate in change control reviews, audit preparation, evidence collection, and security discussions with stakeholders.