What are the responsibilities and job description for the Information Security Analyst position at Harvey Nash?
Job Title: : Information Security Analyst
Location: Frankfort, KY (Hybrid Job)
Duration: Long-term Indefinite Contract
Hybrid Work: 3 Days onsite from Frankfort, KY, 2 days remote weekly.
Skills
This role is responsible for developing and maintaining information security policies, standards, and procedures, as well as managing and supporting the organization’s response to security audits, assessments, and compliance inquiries. Someone with governance, risk, and compliance (GRC) experience and focus.
The ideal candidate will have a strong foundation in information security governance, regulatory frameworks (e.g., NIST, ISO 27001, SOC 2, HIPAA), and the ability to communicate effectively with both technical and non-technical stakeholders.
Coordinate with teams to schedule security scans (Penetration testing, vulnerability scans, etc.) and review, interpret and respond to findings.
Knowledge and understanding of:
Open Worldwide Application Security Project (OWASP) Top 10
API Security (OAuth2, OpenID Connect)
Container security
Ability to review CI/CD pipeline configurations (i.e. Jenkins, GitHub Actions, Azure DevOps) for security control compliance
Ability to review secrets management practices (i.e. HashiCorp Vault, AWS Secrets Manager, etc.) for policy compliance.
Understanding of application layer threats and controls
Knowledge of and experience with Agile processes
Certifications: like CISSP, CISA, CISM, ISO 27001 Lead Implementer, or Security . is preferred
Salary : $45 - $50