Information Security Analyst, Cleerly

• The ideal candidate is a self motivated individual that is great at task and time management, and is willing to learn and adapt to changing environments
• Two to four years of experience in security or compliance analysis, or assurance/advisory experience over IT/IS general controls
• BS degree in Management Information Systems, Computer Science, or a related field
• Previous experience working within a startup environment
• Strong understanding of internal controls necessary to meet compliance frameworks such as ISO 27001, PCI DSS, HITRUST, and SOC 2
• Excellent verbal and written communication skill sets for addressing security concerns from internal stakeholders within the Company
• Our people use Google Workspace (GMail, Drive, Docs, Sheets, Slides), Slack, Confluence/Jira, and Zoom Video, prior experience in these areas is a plus

Desirable

• Our information Security team is growing and we have an immediate opening for an Information Security Analyst to help support and execute Cleerly’s security and compliance objectives
• Reporting to the Director of Information Security, this role will be a multi faceted generalist information security specialist function that assists in GRC and compliance functions, as well as execute on basic security related functions
• You will be working with our Information Security leader, but also cross functional members with internal and external stakeholders to assist in day to day operations and monitoring of security controls
• Monitor and address alerts or notifications for security related issues and initiating investigative actions
• Continuously monitor and evaluate internal controls for areas of improvements
• Conduct user access reviews to applications and services
• Assist in third party risk management and due diligence processes
• Review user access requests for approvals and completed documentation
• Participate in evidence gathering processes to support security processes and audit procedures
• Performing change management and periodic IT maintenance functions
• Periodically review policies and procedures for compliance with best practices and compliance frameworks