Information Security GRC Analyst I

Job Summary:

The Information Security Analyst I is responsible for working closely with the rest of the IT department on corporate technology development to optimize the security of information, computer, network, and processing systems.

Essential Functions:

• Perform or oversee the performance of security monitoring and assessment services internally and by external security providers
• Assist with the review and assessment of the security environment holistically
• Identify gaps or possible improvements. Research services, controls, or process improvements to remediate gaps or enhance overall security maturity
• Perform investigations at the request of the Human Resources or Legal departments and maintain appropriate levels of confidentiality. Coordinate the collection of data and maintain evidence chain of custody in support of investigations
• Participate in security incident response efforts with an appropriate sense of urgency and criticality
• Assist with the definition and documentation of information security-related processes and procedures
• Perform any other job duties as requested

Education and Experience:

• Bachelor of Science/Arts degree, in Management information Systems (MIS), Information Technology, or related field, or equivalent technical work experience is required
• At least three (3) years of hands-on, Information Technology experience is required
• One to two (1-2) years of Information Security or IT audit experience is preferred

Competencies, Knowledge and Skills:

• Intermediate to advanced proficiency with Microsoft Office
• Proficient working knowledge of security technologies such as access management (authentication and authorization), security monitoring, and data encryption
• Working knowledge of computer networking and secure Internet protocols (e.g. SSL, IPSEC, and TCP/IP protocols)
• Working knowledge of Microsoft Windows operating systems and computer networking
• Solid familiarity with application, server, and network security is required Excellent written and oral communication skills
• Excellent interpersonal skills
• Critical listening and thinking skills
• Project management skills desired
• Customer service orientation
• Strong analytical, evaluative, and problem-solving abilities

Licensure and Certification:

• Global Information Assurance Certification (GIAC), Certified Information Systems Auditor (CISA), System Security Certified Practitioner (SSCP), and/or Certified Information Systems Security Professional (CISSP) is preferred

Working Conditions:

• General office environment; may be required to sit or stand for extended periods of time

Compensation Range:

CareSource takes into consideration a combination of a candidate’s education, training, and experience as well as the position’s scope and complexity, the discretion and latitude required for the role, and other external and internal data when establishing a salary level. In addition to base compensation, you may qualify for a bonus tied to company and individual performance. We are highly invested in every employee’s total well-being and offer a substantial and comprehensive total rewards package.

Compensation Type (hourly/salary):

Organization Level Competencies

• Create an Inclusive Environment

• Cultivate Partnerships

• Develop Self and Others

• Drive Execution

• Influence Others

• Pursue Personal Excellence

• Understand the Business

This job description is not all inclusive. CareSource reserves the right to amend this job description at any time. CareSource is an Equal Opportunity Employer. We are dedicated to fostering an inclusive environment that welcomes and supports individuals of all backgrounds.