What are the responsibilities and job description for the Associate Security Analyst position at SecurityMetrics?
Work as an associate security analyst and consultant to understand, evaluate and compare a company’s data security posture to documented security standards. Often this is done by validating compliance to security requirements provided by various governing bodies (i.e. - Payment Card Industry, HIPAA, CIS Controls, etc.).
The job consists of working with a senior security analyst while interfacing with our customers as they prepare to meet the given data security requirements. In addition, the associate security analyst will use their IT and cybersecurity skills and experience to help with on-site assessments of a customers security posture. On-site security reviews are conducted with our clients technical staff members, management, etc., and therefore requires a strong background knowledge of IT systems in order to collect evidence as prescribed by the data security standard(s) being addressed.
A detailed written report is then prepared for the customer (and/or governing body requiring the assessment) that describes the systems and security controls in place and how a client meets the requirements. The associate security analyst will work with the senior security analyst to help prepare written reports. Travel is required, approximately 1 or 2 times a month for 3-5 days each visit.
This is an opportunity for individuals with IT experience to leverage their skills, advance their careers and move into Information Security, IT audit, and network security.
This is not a remote work job, the employment location is Orem, Utah.
Skills/Experience Required:
- College or university degree in an IT or security-related field with 3-4 years of related IT/cybersecurity job experience or 4-5 years of professional experience, in the areas of IT or cybersecurity. This level of experience is required to have either earned the CISSP or CISA industry certifications or be able to quickly earn them when starting the position.
- General understanding of computer networks, network components, and exposure to various operating systems is necessary.
- Systems administration, network administration, security policy writing, database administration, etc. would be helpful.
- Ability to write technical reports and communicate well verbally and via email is essential.
- Problem solving abilities and good people skills.
Background Check Required. Salary based on experience.
