Senior Information Security Analyst

Governance, Risk, and Compliance

• Reviews cybersecurity rules and regulations and consults with internal customers to determine activities necessary for adherence with requirements
• Develops strategies to validate compliance with new and existing rules and regulations
• Develops and implements security standards and procedures to safeguard resources ensuring compliance with HIPAA, NIST, FedRAMP and/or HITRUST requirements
• Evaluates security risks balancing business drivers, best practices and external drivers
• Provides proactive solutions or recommendations through collaboration across business units
• Provides training to security team and internal customers on regulations and contractual security requirements.

Security Operations and Vulnerability Management

• Recommends and assists with evaluation of security tooling
• Supports vulnerability management activities. Validates creation, documentation, and completion of Plans of Action and Milestones (POA&Ms)

Business Continuity Planning/Disaster Recovery (BCP/DR)

• Leads and/or partners on computer security incident response efforts including but not limited to preparing executive summaries, recommending mitigation strategies, and tracking remediation efforts
• Facilitates BCP/DR planning for assigned systems including coordination of documentation and testing

Documentation and Reporting

• Leads the creation and ensures the ongoing maintenance of documentation for multiple systems including but not limited to risk assessments, security plans, and disaster recovery plans
• Validates compliance of documentation with government and industry standards
• Maintains accurate and up-to-date documentation of incidents, tickets, vulnerabilities, and compliance activities
• Prepares reports for management detailing the status of security incidents, audit findings, and risk assessments

Collaboration and Communication

• Owns and delivers tasks on projects for the security team and with internal customer projects. Ensures timely completion of deliverables
• Represents security on initiatives across Telligen. Works closely with internal customers to ensure implementation of security controls and best practices
• Stays current with industry trends, emerging threats, security technologies, and pertinent regulations
• Provides guidance and mentorship to other members of the security team
• Provides timely responses, uses professional communication, and approaches vulnerability and risk management from the perspective of business enablement

• 2-year degree in Information Technology, Information Security, or related field and/or equivalent training and/or experience
• 5-7 years of work experience in IT
  • 3 or more years of experience must be in an information security role with demonstrated working knowledge of information security, federal and state rules and regulations, company/business unit operations, compliance policies, procedures, and/or programs in area of assignment.