IT Governance Analyst, Security

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $82k - $92k / year

⏰ Full Time

🟢 Junior

🔐 Security Analyst

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Communication Service for the Deaf (CSD)

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1975

🏥 Healthcare

💼 Consulting

📦 Logistics

💰 $75k Grant on 2017-11

Healthcare • Consulting • Logistics

Communication Service for the Deaf (CSD) is an organization that has been working since 1975 to empower both Deaf and hearing individuals to succeed together. CSD offers a variety of programs and services, such as ASL Now, CSD Access, and DeafHealth, to promote accessibility and success for Deaf and hard of hearing communities. The company collaborates with partners like Tive Technology to enhance accessibility and provides resources for hiring Deaf employees and supporting Deaf-owned businesses. CSD believes in treating disability as diversity and values Deaf identities for their unique contributions to society.

📋 Description

• Support technology governance, security, and operational maturity initiatives across corporate IT, cloud, product, and operational systems • Develop and maintain the IT and security roadmap aligned with mission priorities and partner obligations • Maintain the technology risk register and track remediation activities • Develop, document, and maintain IT and security policies, standards, and procedures • Maintain system ownership documentation, governance records, and technology inventories • Prepare governance metrics, risk reports, and audit readiness documentation • Support data classification, access governance, retention standards, and documentation of data flows • Review encryption, logging, and access controls against data sensitivity and contractual requirements • Partner with Engineering and program teams on secure, scalable system practices • Maintain architecture documentation, data flow diagrams, and security control mappings • Support IAM processes including SSO, MFA, least privilege, access reviews, and joiner-mover-leaver workflows • Coordinate endpoint and device management practices including MDM, encryption, patching, configuration baselines, and endpoint protection • Review SaaS governance and recommend improvements to reduce shadow IT risk • Support backup, recovery, and resilience validation for critical systems • Provide departments guidance on security and data handling best practices • Support Secure SDLC practices with Engineering • Coordinate vulnerability scanning, triage, remediation tracking, and verification • Support cloud security for IAM, key management, logging, monitoring, and network security • Participate in security and architecture reviews for new systems and major initiatives • Maintain incident response documentation, runbooks, and severity classifications • Support tabletop exercises, business continuity, and disaster recovery testing • Coordinate vendor and partner security assessments and remediation tracking • Support audits, customer security questionnaires, and partner assurance initiatives • Partner with Legal and business stakeholders to implement data protection and security requirements

🎯 Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field, or a minimum of one (1) year of relevant experience in IT governance, cybersecurity, IT operations, or risk management • Experience working across multiple IT or security domains • Understanding of IAM principles, including SSO, MFA, least privilege, and access reviews • Working knowledge of logging, endpoint security, encryption, backup management, vulnerability management, and network security • Experience supporting IT, data, or security governance initiatives • Ability to analyze technical risks and develop practical recommendations • Ability to coordinate cross-functional initiatives and work effectively with technical and non-technical stakeholders • Experience supporting audits or security frameworks such as PCI DSS, SOC 2, ISO 27001, NIST 800-53 Rev. 5, or HIPAA-adjacent controls preferred • Experience with AWS, Azure, or GCP and CI/CD environments preferred • Experience with MDM, EDR, SIEM, vulnerability scanners, or related tooling preferred • Familiarity with secure software development practices and threat modeling preferred • Relevant certifications such as Security+, SSCP, GSEC, or equivalent preferred • Experience supporting grant-funded initiatives, multi-partner collaborations, or externally funded programs preferred • Ability to communicate effectively in American Sign Language preferred