5+ years of experience in information security or technology risk management.
Hands-on experience with security configuration compliance and vulnerability management.
Proficient in configuring and managing enterprise-level technical security controls.
Familiarity with security scanning tools like Qualys, Tenable, Tanium, or Symantec.
Knowledge of Windows, Unix/Linux, or workstation administration.
Experience with scripting languages such as Python, Bash, PowerShell, or Regex.
Understanding of security risk management frameworks and financial industry regulations.
Responsibilities
Develop, test, and implement security configuration compliance policies and controls.
Support secure configuration and compliance initiatives across various technology platforms.
Partner with teams to validate security baseline controls.
Identify security configuration gaps and coordinate remediation efforts.
Perform vulnerability and compliance scanning using industry-standard tools.
Ensure accurate security scans, compliance reporting, and risk assessments.
Collaborate with stakeholders to implement effective risk mitigation strategies.
Benefits
Comprehensive health insurance options.
Retirement savings plan with company match.
Professional development opportunities.
Flexible work arrangements.
Employee wellness programs.
Full Job Description
Security Configuration Compliance Analyst
Position Overview
We are seeking an experienced Security Configuration Compliance Analyst to support enterprise security configuration management, vulnerability scanning, and risk mitigation initiatives.
This role focuses on developing and implementing security configuration policies, validating technical security controls, and collaborating with technology teams to identify and remediate non-compliant systems across enterprise environments.
Key Responsibilities
Develop, test, and implement security configuration compliance policies and technical controls.
Support enterprise secure configuration and compliance initiatives across multiple technology platforms.
Partner with infrastructure, security, and technology teams to validate security baseline controls.
Identify security configuration gaps and coordinate remediation of non-compliant systems.
Perform vulnerability and configuration compliance scanning using tools such as Qualys, Tenable, Tanium, and Symantec.
Ensure accurate security scans, compliance reporting, and risk assessments.
Work across multiple technology products to improve enterprise security compliance.
Collaborate with business and technical stakeholders to implement effective risk mitigation strategies.
Required Qualifications
5+ years of experience in information security, technology risk management, or a related field.
Hands-on experience with security configuration compliance and vulnerability management.
Experience configuring and managing enterprise-level technical security controls.
Experience with security scanning tools such as Qualys, Tenable, Tanium, or Symantec.
Knowledge of Windows, Unix/Linux, or workstation administration.
Familiarity with Python, Bash, PowerShell, or Regex for scripting and automation.
Understanding of security risk management frameworks and financial industry regulatory requirements.
Strong analytical, troubleshooting, communication, and cross-functional collaboration skills.
Preferred Qualifications
Experience supporting security compliance programs within banking or financial services.
Experience with enterprise security configuration baselines, compliance scanning, and remediation.
Experience collaborating with infrastructure and application teams to resolve security findings.
"We are unable to sponsor or take over sponsorship of an employment visa at this time."
