Information Security Analyst 4

RESPONSIBILITIES:
Kforce has a client that is seeking an Information Security Analyst 4 in Salem, OR.

Key Tasks:
* Information Security Analyst 4 will assess moderately complex platforms against company security and configuration standards
* Evaluate and process exceptions to information security policies and standards
* Participate in complex internal risk assessments, identifying information security risks through analysis of threats and vulnerabilities, and reporting on those risks to company business and technology owners
* Perform risk assessments of critical third-party vendors and ensure the business objectives align with the type and volume of data used in maintaining a -need to know/use- mindset
* Utilize your thorough understanding of ITGC's to consult with Technology units on compliance matters
* Champion information security policies, standards, controls, and processes so that compliance requirements are addressed as part of -business as usual- operations
* Lead company business units in control design and control operations related in support of compliance requirements
* Perform Compliance control validation testing to determine the operating effectiveness of IT controls for scoped systems
* Provide analysis and insights into data supporting the effectiveness of technical and process-based cyber security controls and establish automated data pipelines that feed data visualization tools, such as Tableau
* Collaborate effectively with company leaders, managers, employees, and partners to provide deliberate and thoughtful engagement throughout the company
* Help drive execution of the Information Security training programs; Ensure the workforce stays fully informed on information security through formal trainings and oversee the development and delivery of security training and awareness campaigns
* Effective, positive verbal and written communication skills and experienced creating and developing high-quality PowerPoint presentations

REQUIREMENTS:
* Knowledge of information security principles and practices, general procedures, and guidelines
* A general understanding of technology use, trends, and risks as it applies in a business context and environment
* Experience reviewing third party SOC reports
* Experience/working knowledge with PCI DSS (Former QSA is a benefit)
* Experience with ServiceNow, Confluence or JIRA
* Knowledge of information security principles, frameworks, and best practices (e.g., PCI DSS, COBIT, COSO, NIST and ISO 27000)
* Excellent collaboration skills - must be eager to work as part of a cohesive team and work as a partner to others within the Company, Inc. both at WHQ and globally

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.