IT Governance Analyst, Security

🕒 Outubro 9

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $82.000 - $92.000 / ano

⏰ Tempo Integral

🟢 Júnior

🔐 Analista de Segurança da Informação

👻 Score fantasma 7%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 34 dias.
• As vagas desta empresa costumam ser preenchidas em 21 dias.

Candidatar-se

Encontrar Vagas Remotas Similares

Communication Service for the Deaf (CSD)

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

Fundada em 1975

🏥 Saúde

💼 Consultoria

📦 Logística

💰 $75.000 Grant em 2017-11

Healthcare • Consulting • Logistics

O Communication Service for the Deaf (CSD) é uma organização que atua desde 1975 para capacitar indivíduos surdos e ouvintes a alcançarem sucesso juntos. A CSD oferece uma variedade de programas e serviços, como ASL Now, CSD Access e DeafHealth, para promover acessibilidade e sucesso para as comunidades surdas e com deficiência auditiva. A empresa colabora com parceiros como a Tive Technology para melhorar a acessibilidade e proporciona recursos para a contratação de funcionários surdos e apoio a empresas de propriedade de surdos. A CSD acredita que a deficiência deve ser tratada como diversidade e valoriza as identidades surdas por suas contribuições únicas para a sociedade.

Descrição

• Support technology governance, security, and operational maturity initiatives across corporate IT, cloud, product, and operational systems • Develop and maintain the IT and security roadmap aligned with mission priorities and partner obligations • Maintain the technology risk register and track remediation activities • Develop, document, and maintain IT and security policies, standards, and procedures • Maintain system ownership documentation, governance records, and technology inventories • Prepare governance metrics, risk reports, and audit readiness documentation • Support data classification, access governance, retention standards, and documentation of data flows • Review encryption, logging, and access controls against data sensitivity and contractual requirements • Partner with Engineering and program teams on secure, scalable system practices • Maintain architecture documentation, data flow diagrams, and security control mappings • Support IAM processes including SSO, MFA, least privilege, access reviews, and joiner-mover-leaver workflows • Coordinate endpoint and device management practices including MDM, encryption, patching, configuration baselines, and endpoint protection • Review SaaS governance and recommend improvements to reduce shadow IT risk • Support backup, recovery, and resilience validation for critical systems • Provide departments guidance on security and data handling best practices • Support Secure SDLC practices with Engineering • Coordinate vulnerability scanning, triage, remediation tracking, and verification • Support cloud security for IAM, key management, logging, monitoring, and network security • Participate in security and architecture reviews for new systems and major initiatives • Maintain incident response documentation, runbooks, and severity classifications • Support tabletop exercises, business continuity, and disaster recovery testing • Coordinate vendor and partner security assessments and remediation tracking • Support audits, customer security questionnaires, and partner assurance initiatives • Partner with Legal and business stakeholders to implement data protection and security requirements

🎯 Requisitos

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field, or a minimum of one (1) year of relevant experience in IT governance, cybersecurity, IT operations, or risk management • Experience working across multiple IT or security domains • Understanding of IAM principles, including SSO, MFA, least privilege, and access reviews • Working knowledge of logging, endpoint security, encryption, backup management, vulnerability management, and network security • Experience supporting IT, data, or security governance initiatives • Ability to analyze technical risks and develop practical recommendations • Ability to coordinate cross-functional initiatives and work effectively with technical and non-technical stakeholders • Experience supporting audits or security frameworks such as PCI DSS, SOC 2, ISO 27001, NIST 800-53 Rev. 5, or HIPAA-adjacent controls preferred • Experience with AWS, Azure, or GCP and CI/CD environments preferred • Experience with MDM, EDR, SIEM, vulnerability scanners, or related tooling preferred • Familiarity with secure software development practices and threat modeling preferred • Relevant certifications such as Security+, SSCP, GSEC, or equivalent preferred • Experience supporting grant-funded initiatives, multi-partner collaborations, or externally funded programs preferred • Ability to communicate effectively in American Sign Language preferred

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo