iPipeline is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to gender, race, color, religious creed, national origin, age, sexual orientation, gender identity, physical or mental disability, and/or protected veteran status. We are committed to building a supportive and inclusive environment for all employees.
This is an office-based position.
Responsibilities
The Experienced Security Analyst investigates, analyzes, and resolves security incidents. This role handles more complex threats, conducts in-depth forensics, and contributes to incident response planning.
Security Risk Management
Monitor and assess security alerts and system events, identifying potential security risks, threats, or vulnerabilities in systems and infrastructure.
Implement controls to mitigate security risks, ensuring the organization's security posture is continually improved.
Conduct regular security audits and assessments (e.g., vulnerability scans, penetration testing).
Incident Response and Remediation
Detect, analyze and investigate security incidents, determining root causes and impact.
Develop and implement remediation strategies for confirmed incidents.
Ensure that security breaches are properly documented, analyzed, and remediated.
Coordinate with external vendors or authorities in case of a major incident (e.g., data breach).
Security Tools and Technologies
Implement and manage in-scope security tools.
Continuously evaluate and upgrade security tools to meet evolving threats and compliance requirements.
Regulatory Compliance
Implement frameworks and practices to comply with industry regulations, laws, and standards around data protection, privacy, and industry-specific requirements.
Keep abreast of changing regulatory landscapes and ensuring the organization adjusts policies and practices accordingly.
Collaboration
Work with legal teams to ensure contracts and agreements (e.g., with third-party vendors) comply with security and regulatory requirements.
Coordinate with audit teams to ensure compliance with both internal and external audits.
Assist in conducting security training sessions for employees and liaise with legal, HR, and IT to ensure cohesive security practices.
Reporting and Documentation
Provide regular reports to senior management on security and compliance posture.
Create detailed documentation for audits and compliance reviews.
All other duties as assigned.
Specific to Audit and Compliance
Update and maintain security policies, procedures, and documentation. Collaborate with other teams (e.g., IT, Legal, HR) to ensure consistent security and compliance practices across the organization.
Lead portions of internal audits and participate in external audits. Maintain audit schedules and track remediation efforts.
Interpret and apply regulatory and audit standards (e.g., SOC 2, SOX, Cyber Essentials. Identify compliance gaps and propose corrective actions.
Conduct risk assessments and analyze effectiveness of controls.
Experience/Qualifications
Technical Competencies
Threat Analysis: Ability to assess and mitigate advanced threats, such as malware, phishing, and APTs.
Network Forensics: Experience conducting forensic analysis on compromised systems and networks.
Incident Response: Proficiency in handling and responding to security incidents and breaches.
Compliance Knowledge: Understanding of regulatory frameworks (e.g., GDPR, HIPAA, SOC 2, PCI DSS, NIST, ISO 27001).
Proficient with network security, cloud security, encryption techniques, firewalls, SIEM (Security Information and Event Management), vulnerability scanning tools, and other security technologies.
Proficient written and verbal communication skills to report findings and collaborate with teams.
Benefits
We offer a competitive compensation and benefits package, opportunities for career growth, an employee stock purchase plan, 401(k), generous time off and flexible work/life balance, company-matched retirement packages, an employee wellness program, and an awards and recognition program – all in a creative, fast-growing, and innovative company.
