Security Analyst

Headquartered in New Jersey (U.S), Cygnus Professionals Inc. is a next generation global information technology Solution and Consulting company powered by strong management and leadership team with over 30 person years of experience. Today, Cygnus has strong footprints in more than 4 countries with more than 25 satisfied customers. We strive to extend our presence across industries and geographies with our industry-focused business excellence.

Job Description

Role: Security Analyst

Duration: 6-12+ Months Contract

!! Need Green Card, US Citizen Candidates Only !!

Required Qualifications

1. Bachelor's degree in Business, with IT audit or compliance experience, or Computer Science, with business and IT Audit/Compliance experience desired
2. 5-7 years of IT experience
3. 3 years of Security Analyst experience
4. Knowledge of regulatory standards SOC, ISO, privacy shield is a plus.
5. Experience with various technologies, including SharePoint, networks, platforms, and applications. Knowledge of IT audit methodologies and control frameworks.
6. Knowledge of Linux is a plus
7. Familiarity with security scanning and penetration tools (OpenVas, Qualys, Acunetix) is a plus; CISSP is preferred

Description

We are looking for a highly motivated individual to join our Information Security team. The team is responsible for overall security of information systems at eFront and their compliance with CIA principles of information security.

Responsibilities

1. Provide information security expertise to assist with achievement of information systems compliance programs (SOC2 Type 2, ISO27K).
2. Provide information security expertise during pre-sales, sales and post-sales activities at eFront.
3. Propose and implement corporate business processes that improve overall security posture at eFront.
4. Perform regular security and privacy policy reviews.
5. Maintain knowledge of constantly changing security and privacy landscape and propose initiatives related to industry changes.
6. Work with internal and external stakeholders on security audits and remediation processes.
7. Responsible for monitoring internal compliance against information security policies and standards by conducting testing and internal control reviews and risk assessments.
8. Maintain awareness of external regulations for new or changed requirements within IT and identify industry standards from which base core IT processes (e.g. ISO27001, NIST, SSAE16).
9. This position represents the company’s interest with customers, external and internal auditors and 3rd party service providers.
10. Facilitates with internal and external audits within IT, as well as periodic assessments to address specific risks.
11. Reviews IT audit results with the various IT functions providing observations, recommendations and conclusions as well as assist in identifying and communicating control gaps and evaluating management remediation action plans and related reporting.

Additional Information

** U.S. Citizens and those who are authorized to work independently in the United States are encouraged to apply. We are unable to sponsor at this time.
** All your information will be kept confidential according to EEO guidelines.