Information Security Analyst

🔥 1 hour ago

🇺🇸 United States – Remote

💵 $100k - $110k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

ACES Quality Management

WebsiteLinkedInAll Job Openings

51 - 200 employees

📋 Compliance

💳 Fintech

🏢 Enterprise

💰 Private Equity Round on 2019-07

Compliance • Fintech • Enterprise

ACES Quality Management is a leading provider of enterprise quality management and control software for the lending industry. The company offers comprehensive solutions across the mortgage loan lifecycle, from pre-funding to post-closing, as well as tools for consumer lending, commercial lending, credit unions, loan servicing, and third-party quality control providers. ACES is designed to improve productivity, efficiency, and quality for lending institutions of all sizes, while ensuring compliance with changing regulatory requirements. The platform enables users to execute audits more efficiently and make better-informed decisions, leveraging its powerful quality management and control software.

📋 Description

• Administer and maintain security and compliance platforms protecting ACES information assets and technology infrastructure • Protect organizational systems and data against unauthorized access, use, disclosure, disruption, modification, and destruction • Track vulnerability remediation against SLAs and monitor new CVEs and known-exploited vulnerabilities against the ACES environment • Recommend vulnerability remediation actions • Run penetration-testing logistics, including scoping documents, test-day preparation, findings tracking, and retest attestations • Analyze findings and prepare evidence-based proposals for management approval • Identify non-compliant configurations and support remediation with responsible teams • Operate and evidence SOC 2 security controls in Secureframe • Respond to auditor evidence requests, remediate security-control exceptions, and join auditor walkthroughs as a security-controls subject-matter expert • Review MDR alerts and WAF activity weekly, analyze security events, escalate as appropriate, and support incident response with technical analysis and evidence handling • Maintain documentation of security procedures, platform configurations, and control evidence • Collaborate with Technology, Engineering, and Operations teams to embed security and compliance requirements into systems and processes • Serve as first responder to Vendor Management on technical customer security questionnaires and due-diligence requests • Draft technical security reviews of third-party vendors

🎯 Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field required, or equivalent work experience • 3–6 years of hands-on experience in information security, systems administration, or infrastructure work with real security responsibility • Demonstrated experience administering security or infrastructure tools in production, including configuration, integrations, access control, troubleshooting, and vendor support • Experience implementing security systems, configurations, or guidelines, including Windows and Microsoft 365 endpoint management • Familiarity with cloud infrastructure; Azure preferred • Experience with vulnerability identification and driving remediation • Familiarity with data protection regulations and compliance requirements in a technology or financial services context • One current security credential required: CompTIA Security+ or equivalent, such as ISC2 SSCP, GIAC GSEC, Microsoft AZ-500, or SC-200; or commitment to earn Security+ within six months of start • CISSP, CISM, CISA, or similar are a plus, not required • Preferred experience with Veracode, StackHawk, AlertLogic, Secureframe or similar, KnowBe4, and supporting a SOC 2 Type 2 audit • Solid working knowledge of information security principles, risk assessment methodologies, and compliance frameworks • Familiarity with SOC 2 and data protection laws and regulations applicable to financial services • Ability to identify and assess non-compliant environments and support or lead remediation efforts • Clear and professional written and verbal communication skills • Ability to collaborate effectively with Engineering, Technology, Operations, and Vendor Management teams • Must be located in the United States of America and have work authorization documents to work in the United States of America • Commitment to continuous learning and staying current on emerging threats, security technologies, and evolving compliance requirements

🏖️ Benefits

• Security+ certification may be earned within six months of start at ACES expense • Potential company or team meetings and industry conferences • Remote work arrangement • 0%–5% travel

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume