Information Security Analyst

Project overview

Summary:

We’re in search of an experienced :

Information Security Analyst with GRC (Governance, Risk, and Compliance),

Audit & Compliance Support experience.

Here

Requirements

Bachelor's degree, or equivalent combination

of recent, relevant work experience.

Let me know if you are interested in this job

and/or if you can assist us by referring someone who is interested in this job,

since we offer the lucrative referral bonuses.

I am looking forward to speaking with you

today.

Project details

Job Title: : Information Security Analyst

Frankfort, KY (Hybrid Job)

Long-term Indefinite Contract

Status: Hybrid: 3 Days onsite from Frankfort, KY, 2 days remote weekly.

MUST HAVE skills

4–7 years of experience in information security, GRC, or

audit/compliance support.

Familiarity with standards such as NIST 800-53, ISO 27001, SOC 2, HIPAA,

PCI-DSS, or GDPR.

Experience participating in security audits and assembling evidence

packages.

Coordinate with COT to schedule security scans (Penetration testing,

vulnerability scans, etc.) and review, interpret and respond to findings.

Knowledge and understanding of:

Open Worldwide Application Security Project

(OWASP) Top 10

API Security (OAuth2, OpenID Connect)

Container security

Ability to review CI/CD pipeline

configurations (i.e. Jenkins, GitHub Actions, Azure DevOps) for security

control compliance

Ability to review secrets management

practices (i.e. HashiCorp Vault, AWS Secrets Manager, etc.) for policy

compliance.

Understanding of application layer threats and controls

Knowledge of and experience with Agile

processes

• Start: flexible
• Remote: remote
• Location: Frankfort, KY, US, US
• Rate: 45-50 EUR/h

Source notes

Harvey Nash is a national, full-service talent management

firm specializing in technology positions. Our company was founded with a

mission to serve as the talent partner of choice for the information technology

industry.

Our company vision has led us to incredible growth and

success in a relatively short period of time and continues to guide us today.

We are committed to operating with the highest possible standards of honesty,

integrity, and a passionate commitment to our clients, consultants, and

employees.

We are part of Nash Squared Group, a global professional

services organization with over forty offices worldwide.

For more information, please visit us at https://www.harveynashusa.com/