Senior Information Security Analyst

The Senior Information Security Analyst strengthens enterprise cyber risk management by improving risk visibility, reducing exposure, validating security control effectiveness, and producing clear business-focused reporting for technical, audit, compliance, and executive stakeholders. The role supports a maturing Information Security program across vulnerability management, security controls, cloud operations, data protection, governance, risk, compliance, and cyber defense.

Primary Responsibilities

This position is responsible for measurable remediation of vulnerabilities and security findings, effective governance of cloud, application, identity, and data protection controls, audit-ready evidence and risk documentation, and concise reporting that enables timely leadership decisions. The successful candidate will use enterprise security and risk management platforms to assess security posture, validate remediation, review security incidents, evaluate control effectiveness, support audit and regulatory requirements, and provide meaningful risk intelligence.

Essential Duties and Responsibilities

• Vulnerability and Findings Management: Lead analysis, prioritization, tracking, and reporting of vulnerability, application security, cloud security, endpoint, and infrastructure findings to drive timely remediation and risk reduction.
• Risk Governance: Support risk acceptance, exception, deferment, and compensating control processes by ensuring decisions are documented, justified, time-bound, and aligned to organizational risk appetite.
• Security Control Review: Evaluate security controls across Microsoft 365, Microsoft Defender , Microsoft Sentinel, Microsoft Purview, Microsoft Entra ID, AWS, Azure, ServiceNow (), Qualys, SonarQube, and related enterprise platforms.
• Architecture and Advisory Support: Participate in security architecture, threat modeling, DevSecOps, identity and access management, privileged access, data protection, an