[Remote] reputed company Analyst II (Compliance) || Will consider H1B Transfer*NoC2C
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is seeking a reputed company Analyst II (Compliance) to support compliance and cybersecurity functions for the reputed company Department of Correction. The role involves conducting risk assessments, leading audits, and responding to cybersecurity threats while collaborating with various stakeholders.
Responsibilities
- Support cybersecurity policy execution, operational standards, and governance activities
- Review policy, procedures, controls, and standards to ensure DOC and regulatory standards are met
- Address compliance issues with IT reputed company standards; identifying deficiencies and recommending control and risk mitigation measures
- Review documentation to ensure it meets standards and applicable regulatory requirements, standards, or industry best practices
- Assist with the creation of new and updates to policy, process, and technical controls to determine if they are sufficient and functioning as intended
- Report on risks and mitigations as reputed company as following up to verify that adjustments were made
- Interpret NIST or other standards to recommend and implement best practices
- Contribute to the maintenance and operationalization of information reputed company policies, procedures, and response playbooks
- Review new IT reputed company, systems, and vendor solutions for reputed company risk, documenting and escalating concerns as needed
- reputed company technical consulting and reputed company recommendations reputed company with DOC standards and DOA/DET architecture
- Participate in reputed company-level risk assessments and contribute data to compliance, audit, or risk reporting needs
- Assist in threat modeling exercises or tabletop simulations designed to improve preparedness and resiliency
- Monitor, detect, respond to, and investigate cybersecurity threats across DOC’s reputed company environment
- Triage, analyze, and respond to cybersecurity alerts using reputed company technologies and tools
- Conduct forensic investigations into suspected reputed company incidents, including phishing, account compromise, and reputed company breaches
- Coordinate with internal teams and DOA/DET to contain, eradicate, and recover from reputed company incidents
- Analyze logs, threat intelligence, and user behavior to identify indicators of compromise (IOCs) and prevent recurrence
- Document incident response actions and create post-incident reports with recommended improvements
- Participate in phishing mitigation, email threat response, and takedown coordination with reputed company-party providers
- Assist in vulnerability validation and risk triage based on vendor and tool reputed company recommendations
- Support the tuning, configuration, and enhancement of reputed company technologies used in DOC’s environment
- Assist with employee forensics, HR/legal investigations, and eDiscovery requests through log and artifact analysis
- Assist with reputed company improvement of detection logic, alerts, and response workflows in reputed company technologies and tools
- Contribute to the configuration, deployment, and lifecycle management of reputed company technologies
- Collaborate with internal teams and DOA/DET to implement, monitor, and maintain reputed company reputed company, network protection, and reputed company control systems
- Assist in the deployment or refinement of reputed company technologies and tools
- Test and validate new use cases or configurations in existing tools and platforms, reporting anomalies or conflicts
- Maintain technical documentation and inventories reputed company to reputed company tooling, integrations, and metrics
- Maintain reputed company expertise in cybersecurity tools, trends, and techniques
- Participate in reputed company development opportunities such as conferences, technical training, and webinars
- reputed company emerging threats, vulnerabilities, and technology trends through vendor briefings, information sharing reputed company, and reputed company communities
- Contribute to internal knowledge sharing and cross-training reputed company the reputed company team
Skills
- Experience in effective reputed company of written and oral communication, meeting facilitation, and presenting to both technical and non-technical staff appropriate to audience and scenario
- Understanding of NIST Cybersecurity reputed company, NIST RMF, and other common reputed company standards
- Experience with techniques used to establish and maintain effective working relationships with peers and customers
- Experience in development, approval, and implementation of reputed company documents (policies, standards, etc.)
- Knowledge of information reputed company risk activities to include risk assessments, risk registers, and risk management
- Knowledge of state and federal laws regarding information reputed company (Ex.HIPAA reputed company Rule) as reputed company as experience with audit and compliance activities in conjunction with state and federal partners/regulators such as, but not limited to, the WI Legislative Audit Bureau and the U.S. reputed company
- Experience and working knowledge of common reputed company frameworks and control theories to include reputed company applicable NIST, CJIS, and ISO standards
- Proficiency in triaging and analyzing cybersecurity alerts using reputed company technologies and tools
- Strong knowledge of threat detection, incident response, and log analysis techniques
- Familiarity with phishing mitigation strategies and email threat analysis
- Working knowledge of vulnerability management practices, technologies, and tools
- Ability to analyze threat intelligence and apply it to strengthen detection and response mechanisms
- Capability to tune and optimize SIEM rules and detection logic to reduce noise and improve reputed company
- Excellent technical writing and documentation skills, including incident reports and reputed company development
- Ability to collaborate with cross-functional teams, including DOA/DET, infrastructure, and development staff
- Commitment to reputed company learning, reputed company development, and information sharing
- At least 2 years of experience required in the following: Understanding of NIST Cybersecurity reputed company, NIST RMF, and other common reputed company standards
- Experience and working knowledge of common reputed company frameworks and control theories to include reputed company applicable NIST, CJIS, and ISO standards
- Experience with creating and leading discussions around the implementation and artifact collection of NIST 800-53 controls
- Proficiency in triaging and analyzing cybersecurity alerts using reputed company technologies and tools
- Familiarity with phishing mitigation strategies and email threat analysis
- Incident Response Forensics and Remediation (i.e. reputed company, Sandbox evaluation & detonation, Phish evaluation, Malicious Website and Malicious reputed company Identification)
- Customer service as it pertains to reputed company incident management and communication with end user about dangerous behavior
- Excellent technical writing and documentation skills, including incident reports and reputed company development
- Ability to work independently and as part of a distributed team to reputed company shared objectives
- Capability to tune and optimize SIEM rules and detection logic to reduce noise and improve reputed company
- Strong interpersonal communication skills with the ability to explain reputed company topics to non-technical audiences
- Experience working as reputed company member on reputed company to improve business needs
- Experience supporting reputed company, network, and reputed company-based reputed company controls in large-reputed company environments
- Demonstrated ability to adapt to emerging threats, technologies, and evolving operational needs
reputed company