Lenderworks · 2 days ago

Information Security Risk Analyst

Merrifield, VA

Full-time

Onsite

Mid Level

2+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

AccountingConsulting

Insider Connection @Lenderworks

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Provide security analysis and response for all security alerts.

Act within the Incident Response Team to mitigate security incidents.

Provide information security support to other Lenderworks teams and external clients.

Perform regularly scheduled security audits and reviews to comply with industry guidelines, regulations, best practices, and certifications (NIST, SOC, ISO27001, etc…).

Maintain and Support common enterprise security software solutions including Microsoft O365 Security suite (Defender), BitDefender, Rapid 7, and other security applications.

Provide basic security insights and training to new and existing staff. Administer security awareness training and testing program.

Identify reoccurring and/or advanced security issues and develop a plan or solution to remove or mitigate the risks associated.

Assist the Information Security Manager and other members of the security team in conducting risk assessments, penetration testing, vulnerability scanning and respond to information security audits and questionnaires.

Maintain detailed notes and documentation.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Computer Security KnowledgeNetwork Security KnowledgeProblem-SolvingHard Working CommunicationCustomer ServiceInformation SecuritySecurity+CCNACertified Ethical Hacker LearnSupport New SystemsSupport New ApplicationsFlexibility JudgmentCoordination

Required

This position is mission essential and may require occasional night and weekend work.

Knowledge of computer and/or network security systems, applications, procedures, and techniques.

Strong written and oral communication

Strong customer service

Preferred

Two years' experience in corporate information security.

Information Security and/or Networking Certifications (e.g. Security+, Network+, CCNA, Certified Ethical Hacker, etc…)

Self-starter with excellent analytical and problem-solving skills, flexibility, good judgment, and the ability to coordinate multiple, concurrent tasks.

Ability to learn and support new systems and applications.