Overview
Information Security Analyst Jobs in United States at Infinite Computer Solutions
Title: Information Security Analyst
Company: Infinite Computer Solutions
Location: United States
Information Security Analyst / Security Consultant
The Information Security Analyst is responsible for ensuring security and compliance requirements are embedded throughout the entire project lifecycle, from initiation and planning through design, implementation, and operational support. The role partners with business, technology, and vendor teams to assess risks, implement security controls, and maintain compliance with organizational policies and regulatory requirements
.
Key Responsibilitie
- s:Participate in project security reviews and provide security guidance during project initiation, planning, design, implementation, and operational phase
- s.Conduct and coordinate security assessments, including application security reviews, security architecture reviews, vendor risk assessments, and cloud security evaluation
- s.Manage vulnerability management activities, including vulnerability scanning, risk analysis, remediation tracking, patch management, and reportin
- g.Support security operations by integrating security logging, monitoring, threat detection, incident response, and security event management processe
- s.Assist with Identity and Access Management (IAM), privileged access management, user access reviews, and access control governanc
- e.Provide security consulting and technical guidance to project teams, architects, developers, vendors, and business stakeholders to ensure secure solution design and implementatio
- n.Review and document security requirements, assessment findings, risk treatment plans, and compliance evidence for internal and external audit
- s.Support cloud security governance, including security reviews, exception and risk approval processes, onboarding of cloud and SaaS solutions, and compliance with cloud security standard
- s.Collaborate with infrastructure, application, cloud, and operational teams to implement, validate, and continuously improve security control
- s.Track and report security risks, vulnerabilities, remediation activities, and compliance status to stakeholders and managemen
- t.Stay current with emerging threats, security technologies, industry best practices, and regulatory requirements to enhance the organization's security postur
e.Qualifications & Skill
- s:Experience in information security, risk management, security architecture, application security, cloud security, or related discipline
- s.Strong understanding of security frameworks, standards, and best practices (e.g., ISO 27001, NIST, CIS Controls, OWASP
- ).Knowledge of vulnerability management, security monitoring, incident response, IAM, and cloud security concept
- s.Ability to perform risk assessments and communicate security recommendations to technical and non-technical stakeholder
- s.Strong analytical, documentation, communication, and stakeholder management skill
- s.Experience working with cross-functional teams in enterprise and cloud environments is preferre
d.
