The Information Security Analyst is responsible for monitoring, analyzing, and responding to security incidents and threats across the organization. This role supports the implementation of security measures to protect systems, networks, and data, ensuring compliance with internal policies and external regulations. This position plays a critical role in fostering a culture of cybersecurity awareness across the organization, This role develops and delivers engaging education programs and communications that empower our internal team members and subcontractors to recognize and respond to cyber threats, understand industry compliance requirements, and safely handle sensitive data
This is a Hybrid Role working in the West Trenton, NJ office 3 days per week and at home 2 days per week.
Essential Duties and Responsibilities: Essential functions of this job are listed below in order of priority. Reasonable accommodation may be made to enable individuals to perform the essential duties. Regular and predictable onsite attendance is an essential function of the job.
- Monitor security systems and respond to alerts and incidents.
- Support the implementation and maintenance of security tools (e.g., SIEM, endpoint protection).
- Assist in the development and enforcement of security policies and procedures.
- Perform regular audits to ensure compliance with security standards.
- Collaborate with IT and business units to ensure secure system configurations.
- Stay current with emerging threats and recommend appropriate countermeasures.
- Develop and support security awareness program activities.
- Conduct regular phishing simulations and provide follow-up education based on results to improve awareness and response to social engineering attacks
- The ability to communicate security best practices to a diverse workforce in a practical, accessible ways.
- Monitor and track remediation efforts for identified non-compliance issues to ensure timely resolution, including managing policy exceptions and violations.
- Support the Third-Party Risk Management (TPRM) program, including conducting vendor risk assessments, reviewing security documentation, leveraging tools such as Viso Trust, and partnering with stakeholders to manage third-party risk throughout the vendor lifecycle.
Required Qualifications: Knowledge, skills & abilities, experience, minimum & desired education, certification and/or license requirements.
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.
- 3+ years of experience in information security or IT operations.
- Familiarity with security frameworks (e.g., NIST, ISO 27001).
- Basic understanding of networking, operating systems, and cloud environments.
- Experience with security tools such as antivirus, firewalls, and SIEM platforms.
- Strong analytical and problem-solving skills
Preferred Qualifications:- Security certifications such as CompTIA Security+, GIAC, or SSCP.
- Experience with incident response and forensic analysis.
- Knowledge of scripting or automation (e.g., Python, PowerShell).
- Exposure to regulatory compliance (e.g., HIPAA, PCI-DSS, NYDFS).
Compensation: Salary is commensurate with experience and credentials.
Pay Range: $104,686-$131,986
Eligible full-time employees receive a competitive Total Rewards package, including but not limited to a 401(k) with employer match up to 8% and additional service-based contributions, Health, Dental, and Vision insurance, Life and Disability coverage, generous PTO, Paid Sick Leave, and paid parental leave in addition to state-mandated leave. Employees may also be eligible for discretionary bonuses.
