Information Security Assurance Analyst I

What you'll do

• Perform targeted control assessments and operational assurance reviews to evaluate security implementation and effectiveness.
• Identify security vulnerabilities, control gaps, and compliance risks while providing actionable remediation recommendations.
• Execute automated workflows for evidence collection, control testing, reporting, and continuous monitoring.
• Develop dashboards and use tools like Power Automate and Power BI to streamline assessment processes.
• Review business requests and control exceptions to determine risk levels and appropriate remediation paths.
• Provide technical guidance on information security policies, procedures, and compliance-related activities.
• Track remediation efforts and contribute to recurring certification and reporting activities for stakeholders.

What we're looking for

• Bachelor's and/or Master’s Degree in Computer Science, Information Security, or a related information technology field (or equivalent experience).
• Minimum 7+ years of relevant experience in information security, assurance, audit, risk, compliance, or related technology functions.
• Knowledge of industry standard security and compliance frameworks including PCI, FFIEC, FISMA, SOX, GLBA, HIPAA, ISO-87001, NIST 800-53, and others.
• Ability to communicate technical findings and remediation options to stakeholders at multiple levels.
• Professional certifications such as CRISC, CGRC, CISM, CISSP, CISA, or CySA+ (preferred).
• Experience with Power Automate, Power BI, or other workflow automation and reporting tools (preferred).
• Familiarity with cloud hosting environments such as GCP, AWS, or Azure (preferred).
• Experience performing security control assessments, technical testing, and automated validation processes (preferred).