Senior Information Assurance Analyst

Overview

The Senior Information Assurance Analyst is responsible for evaluating and strengthening the organization's cybersecurity posture across IT, OT, cloud, and grid technology environments. This role leads cybersecurity assessments, security control reviews, risk management initiatives, compliance efforts, and the development of security policies, standards, and procedures.

Key Responsibilities

• Conduct cybersecurity assessments and provide security requirements for IT, OT, cloud, and grid technology projects.
• Evaluate and validate security controls to ensure compliance with company policies, regulatory requirements, and industry standards.
• Develop and maintain cybersecurity policies, standards, procedures, and governance frameworks.
• Support vulnerability management, patching, security awareness, privacy, digital forensics, and compliance programs.
• Partner with business and technical teams to identify risks and implement effective security controls.
• Participate in cybersecurity incident response, business continuity, and disaster recovery planning.
• Provide consulting-level guidance on cybersecurity strategy, risk management, and secure technology integration.

Required Qualifications

• 7+ years of experience in information security, cybersecurity, network security, application security, or a related consulting environment.
• Strong understanding of:
• Cybersecurity risk management and compliance
• Network security, identity and access management (IAM), and cryptography
• Vulnerability management and penetration testing principles
• Security architecture and defense-in-depth strategies
• Security frameworks such as NIST, ISO 27001, and OWASP
• Cyber threats, attack vectors, and incident response
• Experience performing security assessments, vulnerability reviews, and risk analyses.
• Strong analytical, communication, and stakeholder management skills.
• Ability to work independently and influence cross-functional teams.
• Relevant certifications such as CISSP, CISM, CISA, CCSP, GSLC, Security+, or SSCP.

Preferred Qualifications

• Experience supporting Operational Technology (OT) environments, including utilities, SCADA, or industrial control systems.