Information Security Analyst

We are seeking an experienced Information Security Analyst with strong expertise in cybersecurity risk management, security audits, compliance, internal controls, and security governance. Required Skills Experience performing security risk assessments, audits, control reviews, and compliance assessments. Strong knowledge of NIST SP 800-53 Rev. 5, RMF, IRS Publication 1075, HIPAA/HITECH, HITRUST, CJIS, and MARS-E. Experience with security and privacy control selection, implementation, assessment, and authorization. Strong knowledge of information security policies, risk management, internal controls, and audit practices. Experience identifying security gaps, developing findings, recommendations, POA&Ms, and remediation plans. Ability to investigate suspicious activity and support security incident reporting. Understanding of IT environments including Windows, Unix/Linux, databases, networking, and software development. Strong technical documentation, analytical, written, and verbal communication skills. Roles & Responsibilities Conduct security assessments, audits, and risk reviews and document findings and recommendations. Prepare audit reports, risk assessments, security plans, incident reports, and POA&Ms. Review and maintain security policies, audit plans, risk documentation, and compliance artifacts. Evaluate security controls and identify areas of non-compliance and improvement. Track remediation activities and report outcomes to management. Research cybersecurity regulations, standards, and industry best practices to support compliance. Identify cybersecurity and privacy risks across internal and external systems and recommend mitigation strategies. Support project teams with security and compliance requirements. Collaborate with IT, security, audit, compliance, and business teams. Provide security guidance and develop training/user-support materials as required.