Information Security & Control Analyst II

Key Responsibilities:

• Support implementation and monitoring of information security controls across IT systems.
• Conduct risk assessments and assist in internal audits to ensure compliance with regulatory requirements.
• Collaborate with IT and business teams to ensure adherence to security policies and procedures.
• Monitor, identify, and report security incidents, providing recommendations for mitigation.
• Assist in the development and maintenance of security governance frameworks.
• Ensure alignment with industry standards and best practices such as ISO 27001/27005, NIST, CIS Controls, and IT risk management frameworks.
• Support continuous improvement initiatives for security monitoring, reporting, and control effectiveness.
• Maintain documentation related to security controls, risk assessments, and audit findings.