Summary:
We’re in search of an experienced :
Information Security Analyst with GRC (Governance, Risk, and Compliance),
Audit & Compliance Support experience.
Here
are some of the specific details:
Job Title: : Information Security Analyst
Location: Frankfort, KY (HybridJob)
Duration: Long-term Indefinite Contract
Status: Hybrid: 3 Days onsite from Frankfort, KY, 2 days remote weekly.
MUST HAVE skills
4–7 years of experience in information security, GRC, or
audit/compliance support.
Familiarity with standards such as NIST 800-53, ISO 27001, SOC 2, HIPAA,
PCI-DSS, or GDPR.
Experience participating in security audits and assembling evidence
packages.
Coordinate with COT to schedule security scans (Penetration testing,
vulnerability scans, etc.) and review, interpret and respond to findings.
Knowledge and understanding of:
Open Worldwide Application Security Project
(OWASP) Top 10
API Security (OAuth2, OpenID Connect)
Container security
Ability to review CI/CD pipeline
configurations (i.e. Jenkins, GitHub Actions, Azure DevOps) for security
control compliance
Ability to review secrets management
practices (i.e. HashiCorp Vault, AWS Secrets Manager, etc.) for policy
compliance.
Understanding of application layer threats and controls
Knowledge of and experience with Agile
processes
Education Requirements:
Bachelor's degree, or equivalent combination
of recent, relevant work experience.
Let me know if you are interested in this job
and/or if you can assist us by referring someone who is interested in this job,
since we offer the lucrative referral bonuses.
I am looking forward to speaking with you
today.
About us:
Harvey Nash is a national, full-service talent management
firm specializing in technology positions. Our company was founded with a
mission to serve as the talent partner of choice for the information technology
industry.
Our company vision has led us to incredible growth and
success in a relatively short period of time and continues to guide us today.
We are committed to operating with the highest possible standards of honesty,
integrity, and a passionate commitment to our clients, consultants, and
employees.
We are part of Nash Squared Group, a global professional
services organization with over forty offices worldwide.
For more information, please visit us at https://www.harveynashusa.com/
