Security Analyst I

We are seeking a highly skilled Security Analyst I to join our team at Techunting. As a key member of our Security Governance, Risk, and Compliance team, you will play a critical role in maintaining and communicating information security policies, standards, and procedures.

• Policy Management Lifecycle: Manage and maintain IT/Cybersecurity policies, standards, procedures, and other types of documentation.
• Third-Party Security Risk Management: Assist in administration of third-party risk management (TPRM) review workload, including responding to TPRM requests, coordinating/communicating with internal and external SMEs, and follow up on tasks/findings accordingly.
• Security Training, Awareness, and Communications: Assist with maintenance of client's cybersecurity training and awareness platform/strategy, including creation of content, training documentation, templates, tracking of training non-compliance.
• Monitoring and Advisory: Act as Level 1 support monitoring the GRC ServiceNow queue and Team inboxes, answer questions, concerns, and escalate accordingly.
• Vulnerability Management: Assist in coordinating remediation work with organizational SMEs.
• Security Metrics: Assist in maintaining KPI's and KRI's, including development of dashboards and data visualizations.
• Research and Development: Research emerging technologies, IT/Cybersecurity best-practices, frameworks, and regulations and periodically report out to IT Leadership.

• Basic IT Concepts: Have an understanding of basic IT concepts and/or engage in continuous learning of the security program and IT concepts.
• Industry Trends: Stay abreast of relevant industry trends, certifications, frameworks.
• Communication Skills: Asks clarifying questions when presented with unfamiliar data or requests.
• Ownership and Urgency: Strong sense of ownership and the ability to work with a sense of urgency.
• Workload Management: Able to handle high workload, prioritize, and take responsibility for deliverables as assigned.
• Professional Development: Commitment to drive professional development within Information Security disciplines.
• Teamwork and Communication: Ability to occasionally work independently, and as part of a product team.
• Attention to Detail: Strong attention to detail and organization. Candidate should be adept in documentation/note taking.
• Communication and Presentation: Strong communication and presentation skills. Candidate should be comfortable communicating with non-technical teams.