Information security analyst jobs in Arkansas - 52 jobs
Product Security Engineer, Instagram
Meta 4.8
Information security analyst job in Little Rock, AR
The Instagram Security Ecosystems team is seeking a product-focused security engineer interesting in enabling Instagram product teams to develop features with a focus on security and user safety. You will be relied upon to directly work with Instagram engineers, hardening both product features and our protective frameworks that make life harder for bad actors on the Instagram platform.
**Required Skills:**
Product Security Engineer, Instagram Responsibilities:
1. Threat Modeling and Security Architecture: Work directly with product managers and technical leads on threat models and security architecture for novel Instagram features or products
2. Security Reviews: Perform manual design and implementation reviews of web, mobile, and native code
3. Developer Guidance: Provide guidance and education to developers that help prevent the authoring of vulnerabilities
4. Automated Analysis and Secure Frameworks: Work with other security teams to improve Instagram's static and dynamic analysis and frameworks to scale coverage
5. Bug Bounty: Help provide technical guidance to our world class bug bounty program and independent security researchers
6. Industry Impact: Push the industry forward through conference talks and open source projects to contribute broadly to security for the world
**Minimum Qualifications:**
Minimum Qualifications:
7. B.S. or M.S. in Computer Science, Cybersecurity, or related field, or equivalent experience
8. 8+ years of experience finding vulnerabilities in interpreted languages (Python, PHP)
9. Extensive, proven experience in threat modeling and secure systems design
10. Experience with exploiting common security vulnerabilities
**Preferred Qualifications:**
Preferred Qualifications:
11. Product software engineering or product management experience
12. Experience in security consulting or other leadership-facing security advisory roles
13. Familiarity with cybersecurity investigations, abuse operations, and/or security incident response
14. Contributions to the security community (public research, blogging, presentations, bug bounty, etc.)
**Public Compensation:**
$184,000/year to $257,000/year + bonus + equity + benefits
**Industry:** Internet
**Equal Opportunity:**
Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.
Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at accommodations-ext@fb.com.
$184k-257k yearly 60d+ ago
Looking for a job?
Let Zippia find it for you.
Security Analyst (Info Systems)
City of Jonesboro 3.1
Information security analyst job in Jonesboro, AR
Exempt: Yes
Department: Information Systems Department
Reports To: Information Systems Director
Safety Sensitive: This position is designated as safety/security sensitive and is subject to pre-employment, reasonable suspicion and random drug and alcohol screening.
GENERAL DESCRIPTION OF POSITION
This Safety Sensitive (SS) position is primarily responsible for protecting a company's network and systems from cyber-attacks. This involves researching upcoming IT trends, creating contingency plans, reviewing suspicious activities, reporting security breaches, and educating the rest of the company on security measures.
ESSENTIAL DUTIES AND RESPONSIBILITIES
1. Collaborates with users to discuss computer data access needs, to identify security threats and violations, and to identify and recommend needed programming or process changes.
2. Uses data encryption, firewalls, and other appropriate security tools and applications to conceal and protect transfers of confidential digital information.
3. Develops and implements plans to safeguard digital data from accidental or unauthorized modification, destruction, or disclosure; adheres to emergency data processing needs.
4. Reviews violations of security procedures; provides training to ensure violations do not recur.
5. Monitors and restricts access to sensitive, confidential, or other high-security data.
6. Modifies security files and applications as able and necessary to provide specialized access, allow new software to be installed or integrated, or correct errors.
7. Performs risk assessments, audits, and tests to ensure proper functioning of data processing activities and security measures.
8. Safeguards system security and improves overall server and network efficiency by training users and promoting security awareness.
9. Determines when to update virus protection systems by monitoring current reports of computer viruses; facilitates or performs needed updates.
10. Manages and support Antivirus.
11. Manage and push out software updates.
12. Operate a city vehicle as needed.
13. Perform any other related duties as required or assigned.
QUALIFICATIONS
To perform this job successfully, an individual must be able to perform each essential duty mentioned satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required.
EDUCATION AND EXPERIENCE
Broad knowledge of such fields as accounting, marketing, business administration, finance, etc. Equivalent to a four year college degree, plus 3 years related experience and/or training, or equivalent combination of education and experience.
COMMUNICATION SKILLS
Ability to read, analyze, and understand general business/company related articles and professional journals; ability to speak effectively before groups of customers or employees.
MATHEMATICAL SKILLS
Ability to calculate figures and amounts such as discounts, interest, commissions, proportions, percentages, area, circumference, and volume. Ability to apply concepts such as fractions, ratios, and proportions to practical situations.
CRITICAL THINKING SKILLS
Ability to utilize common sense understanding in order to carry out written, oral or diagrammed instructions. Ability to deal with problems involving several known variables in situations of a routine nature.
REQUIRED CERTIFICATES, LICENSES, REGISTRATIONS
Valid drivers license
PREFERRED CERTIFICATES, LICENSES, REGISTRATIONS
A+, Microsoft Certified Professional (MCP), Microsoft Certified Systems Engineer (MCSE)
SOFTWARE SKILLS REQUIRED
Intermediate: Presentation/PowerPoint, Spreadsheet, Word Processing/Typing
Basic: Accounting, Contact Management, Database, Human Resources Systems, Other, Payroll Systems
INITIATIVE AND INGENUITY
SUPERVISION RECEIVED
Under general supervision where standard practice enables the employee to proceed alone on routine work, referring all questionable cases to supervisor.
PLANNING
Considerable responsibility with regard to general assignments in planning time, method, manner, and/or sequence of performance of own work; may also occasionally assist in the planning of work assignments performed by others within a limited area of operation.
DECISION MAKING
Performs work operations which permit frequent opportunity for decision-making of minor importance and also frequent opportunity for decision-making of major importance; the latter of which would affect the work operations of other employees and/or clientele to a moderate degree.
MENTAL DEMAND
Close mental demand. Operations requiring close and continuous attention for control of operations. Operations requiring intermittent direct thinking to determine or select the most applicable way of handling situations regarding the organization's administration and operations; also to determine or select material and equipment where highly variable sequences are involved.
ANALYTICAL ABILITY / PROBLEM SOLVING
Moderately structured. Fairly broad activities using moderately structured procedures with only generally guided supervision. Interpolation of learned things in somewhat varied situations.
RESPONSIBILITY FOR WORK OF OTHERS
Responsibility for work of others: Not indicated.
RESPONSIBILITY FOR FUNDS, PROPERTY and EQUIPMENT
Occasionally responsible for organization's property where carelessness, error, or misappropriation would result in moderate damage or moderate monetary loss to the organization. The total value for the above would range from $5,000 to $150,000.
ACCURACY
Probable errors would not likely be detected until they reached another department, office or patron, and would then require considerable time and effort to correct the situation. Frequently, possibility of error that would affect the organization's prestige and relationship with the public to a limited extent, but where succeeding operations or supervision would normally preclude the possibility of a serious situation arising as a result of the error or decision.
ACCOUNTABILITY
FREEDOM TO ACT
Directed. Freedom to complete duties as defined by wide-ranging policies and precedents with mid to upper-level managerial oversight.
ANNUAL MONETARY IMPACT
The amount of annual dollars generated based on the job's essential duties / responsibilities. Examples would include direct dollar generation, departmental budget, proper handling of organization funds, expense control, savings from new techniques or reduction in manpower.
None. Job does not create any dollar monetary impact for the organization.
IMPACT ON END RESULTS
Modest impact. Job has some impact on the organizations end results, but still from an indirect level. Provides assistance and support services that facilitates decision making by others.
PUBLIC CONTACT
Occasional routine contacts with persons outside the organization. This would include contacts with suppliers, mail service, etc.
EMPLOYEE CONTACT
Contacts of considerable importance within the department or office, such as those required in coordination of effort, or frequent contacts with other departments or offices, generally in normal course of performing duties. Requires tact in discussing problems and presenting data and making recommendations, but responsibility for action and decision reverts to others.
USE OF MACHINES, EQUIPMENT AND/OR COMPUTERS
Computer software programming, level ii technician support, project management; system analyst and comprehensive computer software support/help and/or web site development and connectivity.
WORKING CONDITIONS
Periodically exposed to such elements as noise, intermittent standing, walking, pushing, carrying, or lifting; but none are present to the extent of being disagreeable.
ENVIRONMENTAL CONDITIONS
The following work environment characteristics described here are representative of those an employee encounters while performing essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
While performing the functions of this job, the employee is occasionally exposed to risk of electrical shock. The noise level in the work environment is usually moderate.
PHYSICAL ACTIVITIES
The following physical activities described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions and expectations.
Moderate diversity, low physical. Work activities which allow for a moderate amount of diversity in the performance of tasks which are not as varied as those positions with high-level diversity and decision-making.
While performing the functions of this job, the employee is continuously required to talk or hear; regularly required to sit; frequently required to walk, use hands to finger, handle, or feel; and occasionally required to stand, reach with hands and arms, climb or balance, stoop, kneel, crouch, or crawl. The employee must occasionally lift and/or move up to 100 pounds; frequently lift and/or move up to 50 pounds; regularly lift and/or move up to 25 pounds; continuously lift and/or move up to 10 pounds. Specific vision abilities required by this job include close vision; distance vision; and color vision.
ADDITIONAL INFORMATION
Not indicated.
$64k-83k yearly est. 4d ago
Sr. Security Analyst
Maximus 4.3
Information security analyst job in Fort Smith, AR
Description & Requirements Maximus is seeking a qualified Sr. Technical/SecurityAnalyst for multiple projects, current and upcoming. The qualified candidate will be involved in technical/security planning and assessment projects with potentially multiple state agencies. The position requires the candidate to produce/review security relevant documentation, such as system security plans, POA&Ms, assessment plans, etc., produce technical/security analyses, develop estimates, review and contribute to requirements for large systems-planning efforts in the Child Support, Child Welfare and/or Integrated Eligibility public-sector domains. The individual will report directly to a Senior Manager. Maximus is a matrix-managed organization, which means the individual will have secondary reporting relationships to one or more Project Managers, depending on which projects they are assigned.
*This role is remote but requires working standard business hours in the US time zone of the client. This position is contingent upon award. *
Essential Duties and Responsibilities:
- Collaborate with project managers on various initiatives and projects to track progress and provide support as necessary.
- Support leadership in ensuring that the project is delivered to specifications, is on time, and within budget.
- Work closely with management and work groups to create and maintain work plan documents.
- Track the status and due dates of projects.
- Manage relationships with project staff responsible for projects.
- Produce regular weekly and monthly status reports that could include; work plan status, target dates, budget, resource capacity, and other reports as needed.
- Facilitate regular meetings and reviews.
- Adhere to contract requirements and comply with all corporate policies and procedures.
Job Specific Duties and Responsibilities:
-Perform duties independently under the direction of their direct manager and/or Project Managers on specific projects.
-Review project documentation and client materials and provide analysis of technical and security related topics.
-Participate in client meetings and offer observations and insight on technical and security related topics.
-Identify risk areas and potential problems that require proactive attention.
-Review and author artifacts and other project documents and identify potential gaps, inconsistencies, or other issues that may put the project at risk. Such artifacts and documents may include but are not limited to:
*System Security Plan
*Plan of Action and Milestones (POA&M)
*Security Assessment Plan
*Risk Assessment reports
*CMS ARC-AMPE forms and documentation
*Data Conversion and Migration Management Plan
*Deployment and/or roll-out plans
-Perform security assessments, lead security audit and assessment activities, and provide direct security oversight support to assigned clients and projects.
-Identify and escalate to the Senior Manager / Project Manager risks, alternatives, and potential quality issues.
-Attend interviews, focus groups, or other meetings necessary to gather information for project deliverables in accordance with the project scope of work.
-Attend project meetings with the client, subcontractors, project stakeholders, or other Maximus Team members, as requested by the Senior Manager / Project Manager.
-Complete project work in compliance with Maximus standards and procedures.
-Support team to complete assigned responsibilities as outlined in the Project schedule.
-Support all other tasks assigned by Senior Manager / Project Manager.
Minimum Requirements
- Bachelor's degree in related field.
- 7-10 years of relevant professional experience required.
- Equivalent combination of education and experience considered in lieu of degree.
Job Specific Requirements:
-Be available to work during standard client business hours. Projects may involve clients from any US time zone, so it is possible that work outside of the individual's local business hours will be required.
-Bachelor's degree from an accredited college or university, or equivalent work experience.
-7+ years of experience in informationsecurity, with at least 3 years of security-compliance work in a regulated industry.
-5+ years of experience working with HIPAA, NIST 800-53 and/or CMS MARS-E or ARC-AMPE security frameworks.
-Familiar with operating systems: Windows, Linux/UNIX, OS/X.
-Familiar with AI tools, capabilities.
-Strong command of cloud computing topics.
-Strong command of agile software development practices as well as waterfall development practices.
-Strong desktop software skills: proficient in MS Office, Excel, Word, Project.
-Ability to explain and communicate technical subjects to non-technical audiences.
-Ability to develop advanced concepts, techniques, and standards requiring a high level of interpersonal and technical skills.
-Ability to work independently.
-Good organizational skills and the ability to manage multiple tasks and deadlines simultaneously.
-Strong interpersonal and team building skills, as well as an understanding of client relationship building are essential.
-Excellent verbal and writing skills and be comfortable working with customers.
-Ability to multi-task with supervision.
-Self-motivated fast learner.
Preferred Skills:
-Prefer a candidate with experience in the Health & Human Services industry, which may include working with programs such as Child Support, Child Welfare, or Integrated Eligibility (SNAP, TANF, and Medicaid).
-Preference for security related certifications, such as the CISSP (Certified Information Systems Security Professional).
EEO Statement
Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected characteristics.
Pay Transparency
Maximus compensation is based on various factors including but not limited to job location, a candidate's education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus's total compensation package. Other rewards may include short- and long-term incentives as well as program-specific awards. Additionally, Maximus provides a variety of benefits to employees, including health insurance coverage, life and disability insurance, a retirement savings plan, paid holidays and paid time off. Compensation ranges may differ based on contract value but will be commensurate with job duties and relevant work experience. An applicant's salary history will not be used in determining compensation. Maximus will comply with regulatory minimum wage rates and exempt salary thresholds in all instances.
Accommodations
Maximus provides reasonable accommodations to individuals requiring assistance during any phase of the employment process due to a disability, medical condition, or physical or mental impairment. If you require assistance at any stage of the employment process-including accessing job postings, completing assessments, or participating in interviews,-please contact People Operations at **************************.
Minimum Salary
$
120,000.00
Maximum Salary
$
140,000.00
$83k-111k yearly est. Easy Apply 6d ago
Director of Information Security
Arkansas Oklahoma Gas Corp 3.6
Information security analyst job in Fort Smith, AR
Join our Growing Team and see why Summit Utilities, Inc was named as one of the Fastest Growing Denver Area Private Companies 2019 and 2020; Best Places to Work in Maine 2019, 2020, 2021, 2022 and 2023; and Best Places to Work in Arkansas 2020 and 2023, Oklahoma 2022 and 2023 and Missouri 2023. Summit was also recently named one of Forbes 2023 America's Best Small Employers.
Summit is a growing natural gas utility providing safe, reliable and clean burning natural gas service to homes and businesses in Arkansas, Colorado, Maine, Missouri, Oklahoma, and Texas. Being part of the Summit team means embracing excellence and innovation, committing to safety each and every day, and doing all that we can to serve each other, our customers and the communities where we live. We aim to bring warmth and energy to everything we do.
We have an exciting hybrid opportunity for a Director of Information Technology based in Fort Smith, Arkansas.
POSITION SUMMARY
The Director of InformationSecurity is a trusted senior leader responsible for protecting Summit's digital and physical information assets while upholding the highest standards of integrity, financial discipline, and organizational trust. This role oversees cybersecurity governance, risk management, and business continuity for enterprise systems - including modern threats emerging from AI technologies and data automation. The Director will develop and execute a forward-looking security strategy that supports Summit's operational excellence, compliance obligations, and AI-driven transformation initiatives. This includes defining governance frameworks, managing enterprise risk, ensuring prudent budget oversight, and cultivating a strong security culture across all levels of the organization.
This position requires a strategic thinker, a disciplined financial steward, and a leader of high character who models accountability, transparency, and ethical decision-making.
PRIMARY DUTIES AND RESPONSIBILITIES
Lead the design, implementation, and continuous improvement of Summit's enterprise informationsecurity program - covering cybersecurity, AI and data protection, risk management, and incident response.
Ensure strong alignment between security strategy, business goals, and regulatory requirements, particularly in the context of emerging AI use cases, machine learning models, and data governance.
Oversee the IT Business Continuity and Disaster Recovery (BCP/DR) programs, including Business Impact Analysis (BIA) and scenario-based recovery exercises.
Develop and enforce comprehensive policies, standards, and procedures aligned with frameworks such as NIST CSF 2.0, C2M2, and ISO 27001.
Partner with data, application, and operations leaders to ensure secure design, access control, and model integrity across AI and analytics systems.
Direct risk assessments and audits to identify vulnerabilities, ensuring mitigation strategies are financially sound and proportionate to organizational risk appetite.
Maintain strict adherence to financial controls - including vendor spend, contract review, and security-related procurement - demonstrating accountability for budget stewardship and cost transparency.
Lead and mentor a high-performing informationsecurity team, fostering a culture of ethics, service, and continuous learning.
Serve as the executive liaison for internal and external audits, compliance reviews, and regulatory reporting related to cybersecurity.
Stay ahead of evolving threats, particularly those involving AI misuse, data poisoning, and adversarial attacks, and integrate defenses into enterprise security posture.
Provide executive-level reporting on risk posture, incidents, and metrics that connect security outcomes to business and financial value.
EDUCATION AND WORK EXPERIENCE
Bachelor's or Master's degree in informationsecurity, Computer Science, Information Technology, or a related field.
10+ years of experience in informationsecurity, including at least 5 years in a senior leadership or management capacity.
Advanced security certifications strongly preferred (CISSP, CISM, CISA, CRISC, CCISO, etc.).
Demonstrated experience managing security for cloud and hybrid environments, and integrating controls for AI, analytics, and data platforms.
Proven record of financial accountability, including budget ownership, cost optimization, and vendor governance.
Experience implementing and auditing against leading security frameworks (NIST CSF, C2M2, ISO 27001, SOC 2) and regulatory standards (GDPR, HIPAA, PCI, etc.).
KNOWLEDGE, SKILLS, ABILITIES
Deep expertise in cybersecurity, risk management, and incident response, including threat intelligence, vulnerability management, and data protection.
Strong knowledge of AI and data security principles, including model governance, data ethics, and emerging threats tied to generative AI.
Uncompromising integrity and sound judgment in handling confidential and financial information.
Strong grasp of financial concepts related to technology management: budgeting, forecasting, cost-benefit analysis, and vendor contract negotiation.
Exceptional leadership and communication skills - able to translate complex security concepts into clear, actionable guidance for executives and teams.
Ability to lead under pressure with discipline, humility, and transparency.
Demonstrated track record of fostering a culture of trust, compliance, and ethical leadership.
The above statements are intended to describe the general nature and level of work being performed by employees assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and/or skills required of all personnel so classified.
Summit offers competitive pay and medical/dental/vision and other benefits that provide flexibility, choice and support to our employees when they need it most. We understand that home and family are essential pieces of your life, and our benefits are designed to support you both at work and at home.
Summit Utilities, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or protected veteran status and will not be discriminated against on the basis of disability or veteran status.
$106k-134k yearly est. Auto-Apply 41d ago
Field Virtual Chief Information Security Officer (vCISO)
Ascend Technologies
Information security analyst job in Little Rock, AR
Job DescriptionField Virtual Chief InformationSecurity Officer (vCISO) This position is hybrid with some onsite responsibility in Conway, and applicants must already reside in the central Arkansas area. Relocation will not be provided.
PURPOSE:
A Field vCISO's primary purpose is to function as a trusted advisor to strategically improve the cybersecurity posture of Ascend clients. Field vCISOs integrate into our client organizations to manage and improve comprehensive cybersecurity programs for mid-market clients based on established frameworks such as NIST CSF, CIS Controls, HIPAA, and more.
Weekly or monthly meetings are held to present data gathered from our various solutions to demonstrate the efficacy of Ascend's cybersecurity services to client stakeholders and highlight advancement toward the client's desired maturity. Quarterly presentations to client C-suite or Board of Directors may be required. Completion of security questionnaires, review of vulnerability reports, pen test reports, risk assessments, research on non-Ascend products/services, and communication of strategy for emerging threats or business requirements are all provided to our clients by their vCISO.
Excellent communication and presentation skills are important to help make complex cybersecurity concepts clear and relatable to non-technical audiences across a multitude of industries.
RESPONSIBILITIES:
Serve as the primary contact for client informationsecurity programs, interfacing with executive teams and business leaders in person at the client's headquarters.
Develop custom cybersecurity programs and drive cybersecurity initiatives that support regulatory requirements, risk appetite, budget targets, and desired outcomes.
Leads monthly, quarterly, and annual presentations of risk management initiatives among client technical resources, key stakeholders, senior management, and board of directors.
Review status of security services via regular reports to identify areas in need of attention by Ascend, and present findings to client stakeholders.
Guide client infosec strategy for addressing gaps and implementing controls found in their desired security framework.
Manage and measure clients' security and/or compliance programs.
Understand compliance and controls to help guide clients' efforts to fully address their requirements and gather evidence in preparation for audit.
Draft and implement security policies for client organizations.
Conducts third-party risk assessments to identify technical, operational, and compliance risks and recommend risk reduction strategies.
Work with the Ascend Cybersecurity Leadership to identify Ascend services required to address security needs of clients.
Oversees the delivery of cybersecurity engineering services such as vulnerability management, endpoint protection, privilege and identity management, network security, etc.
Facilitate change, knowledge, and team understanding of the client environment and needs as priorities shift.
Actively monitors evolving threats and compliance changes and communicates findings to both Ascend and client stakeholders.
Leads cybersecurity training and tabletop exercises.
Other Responsibilities as assigned by management.
MINIMUM SKILLS, EDUCATION AND EXPERIENCE
5+ years leading informationsecurity programs and initiatives and implementing cybersecurity controls to mitigate regulatory and cybersecurity risks.
5+ Years experience in cybersecurity, and framework alignment (CMMC, DFARS, NIST 800-171, NIST CSF, HIPAA, FDIC, GLBA, ISO 27001/2, CIS, etc.).
5+ Years of strong working knowledge of system, application, network, cloud, and data security best practices.
Experience preparing for compliance audits including one or more of the following SOC2, CMMC, FDIC, or HITRUST.
One or more of the following certifications: CISSP, CISA, CISM, CRISC, GLSC, GSTRT, or equivalent.
BA/BS degree or an equivalent combination of education and experience - preferably advanced degree in related field.
Demonstrable track record of accomplishment and success.
Excellent problem solving, decision-making, communication and team building skills.
Proven experience with engaging executive level leadership to influence and provide strategic insight.
PREFERRED SKILLS, EDUCATION AND EXPERIENCE
Preferred experience as a Cybersecurity or Compliance manager.
Experience working through growth phases, acquisition changes, for mid-market organizations or small businesses as they transitioned to mid-market.
Industry Specialized Certifications for HIPAA, HITRUST, etc.
Working knowledge of Threat Protection, SIEM, SOC, EDR Platforms, Privilege and Identity Management Platforms.
Starting Compensation: $120,000/year
The salary for this position is commensurate with experience, skills, and qualifications. The range is intended to reflect our commitment to attracting top talent, and the final offer will be based on factors including, but not limited to, the candidate's previous experience, expertise in the field, relevant certifications, and the specific requirements of the role. In addition, internal equity, market trends, and geographic location may also influence the final salary.
Along with a competitive salary, we offer a comprehensive benefits package, including health, dental, and vision insurance, retirement savings options, flexible time off (FTO), and professional development opportunities. We are open to discussing compensation and benefits further during the interview process to ensure alignment with the candidate's expectations and experience.
At Ascend Technologies we firmly believe that diversity, equity, and inclusion are not only fundamental values but also powerful drivers of innovation, growth, and success. We are committed to fostering an environment where every individual feels valued, respected, and empowered.
CORE VALUES
We are seeking highly motivated individuals who have the willingness and ability to demonstrate Ascend core values:
Committed to Client Success:
Our actions and our words always align with the best interest of the client.
One Team:
We work collaboratively to overcome challenges with humility and respect and do what it takes to find innovative solutions.
Integrity:
We are unquestionably committed to doing the right thing even when it is hard.
Accountability:
We hold ourselves and each other accountable for keeping our commitments to our clients, our communities, and one another.
Transparency:
We create open lines of communication with each other and our clients, fostering relationships founded on candor and trust.
PHYSICAL DEMANDS:
Must be able to sit, stand, and bend for the duration of shift. The position is mainly sitting, with occasional lifting up to 50 lbs, such as laptop, server equipment, and, driving to the work site to meet with client(s).
Powered by JazzHR
fUKGs7TjpM
$120k yearly 14d ago
Engineer, Information Security and Risk
Cardinal Health 4.4
Information security analyst job in Little Rock, AR
Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare's most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500.
**_Department Overview:_**
**Information Technology** oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value.
**InformationSecurity and Risk** develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments.
Lead IAM work for new customer onboardings and migrations. Collaborate with CAH Account Management, Application Teams, and Customers to design, implement, and test federated SSO solution based on customer login requirements. Provide technical guidance and act as primary point of contact for business partners and customer related to IAM work for onboarding. Additional responsibilities include supporting application integrations and enhancing SSO self service application onboarding.
**Responsibilities:**
+ **Customer Onboarding IAM Efforts - Strategy & Execution :** Lead the planning, design, and execution for Customer Onboarding via federated SSO, ensuring alignment with overall business and security objectives. This includes assessing multiple Cardinal Health e-commerce applications, understanding login requirements for new/existing customers, designing, testing and implementing solutions etc to ensure top notch user login experience and enhancing Cardinal Health's security posture.
+ **Collaboration & Communication:** Coordinate cross-functional teams, including Customer Business and IT teams, Cardinal Health's Account Management/Sales and Application teams, InformationSecurity and others to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non-technical internal and external stakeholders.
+ **Application Integration Leadership:** Lead the integration of various enterprise applications (SaaS, on-premise, custom-built) with our core IAM infrastructure, ensuring secure authentication, authorization, and user provisioning/de-provisioning.
+ **User Lifecycle Management:** Streamline and automate user provisioning, de-provisioning, and periodic access reviews for employees, contractors, and partners across all integrated systems, ensuring smooth onboarding and offboarding during M&A transitions.
+ **Solution Design & Implementation:** Design, implement, and maintain IAM solutions including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Role-Based Access Control (RBAC) frameworks.
+ **Technical Troubleshooting & Support:** Troubleshoot, identify, and resolve technical identity and access management-related issues, providing expert support to internal teams and end-users during and after integration.
+ **Documentation & Best Practices:** Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends.
**Qualifications:**
+ **Education:** Bachelor's degree in Computer Science, Information Technology, InformationSecurity, or a related field, or equivalent practical experience.
+ **Experience:** 5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise scale solutions with significant experience in supporting M&A integration projects preferred.
+ **Technical Expertise:**
+ Extensive knowledge and experience with authentication standards and technologies such as SSO (SAML, OAuth, OpenID Connect), MFA
+ Proficiency in directory services (e.g., Active Directory, Azure AD, LDAP).
+ Hands-on experience with leading IAM platforms (e.g., Okta, Microsoft Azure AD, CyberArk, ForgeRock, Ping Identity, SailPoint).
+ Strong understanding of security principles, risk management, and access control models (e.g., RBAC).
+ Familiarity with Zero Trust architecture principles.
+ Familiarity with AI/ML concepts and their practical application in security and risk management, especially in IAM context.
+ Strong communication and interpersonal skills to collaborate effectively with various teams and stakeholders.
+ Detail-oriented mindset to ensure precise access control configurations and compliance.
+ Excellent problem-solving and analytical abilities to troubleshoot access issues and design solutions for unique business requirements
+ Must be a self-starter who takes full ownership of projects from inception to completion , holding oneself accountable for the security and operation integrity of IAM platform.
+ Ability to manage multiple priorities and meet tight deadlines in a fast-paced M&A environment.
**Anticipated salary range:** $94,900 - $135,600
**Bonus eligible:** No
**Benefits:** Cardinal Health offers a wide variety of benefits and programs to support health and well-being.
+ Medical, dental and vision coverage
+ Paid time off plan
+ Health savings account (HSA)
+ 401k savings plan
+ Access to wages before pay day with my FlexPay
+ Flexible spending accounts (FSAs)
+ Short- and long-term disability coverage
+ Work-Life resources
+ Paid parental leave
+ Healthy lifestyle programs
**Application window anticipated to close:** 12/20/2025 *if interested in opportunity, please submit application as soon as possible.
The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate's geographical location, relevant education, experience and skills and an evaluation of internal pay equity.
_Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._
_Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._
_To read and review this privacy notice click_ here (***************************************************************************************************************************
$94.9k-135.6k yearly 59d ago
Director of Information Security
Summit Utilities Inc. 4.4
Information security analyst job in Fort Smith, AR
Join our Growing Team and see why Summit Utilities, Inc was named as one of the Fastest Growing Denver Area Private Companies 2019 and 2020; Best Places to Work in Maine 2019, 2020, 2021, 2022 and 2023; and Best Places to Work in Arkansas 2020 and 2023, Oklahoma 2022 and 2023 and Missouri 2023. Summit was also recently named one of Forbes 2023 America's Best Small Employers.
Summit is a growing natural gas utility providing safe, reliable and clean burning natural gas service to homes and businesses in Arkansas, Colorado, Maine, Missouri, Oklahoma, and Texas. Being part of the Summit team means embracing excellence and innovation, committing to safety each and every day, and doing all that we can to serve each other, our customers and the communities where we live. We aim to bring warmth and energy to everything we do.
We have an exciting hybrid opportunity for a Director of Information Technology based in Fort Smith, Arkansas.
POSITION SUMMARY
The Director of InformationSecurity is a trusted senior leader responsible for protecting Summit's digital and physical information assets while upholding the highest standards of integrity, financial discipline, and organizational trust. This role oversees cybersecurity governance, risk management, and business continuity for enterprise systems - including modern threats emerging from AI technologies and data automation. The Director will develop and execute a forward-looking security strategy that supports Summit's operational excellence, compliance obligations, and AI-driven transformation initiatives. This includes defining governance frameworks, managing enterprise risk, ensuring prudent budget oversight, and cultivating a strong security culture across all levels of the organization.
This position requires a strategic thinker, a disciplined financial steward, and a leader of high character who models accountability, transparency, and ethical decision-making.
PRIMARY DUTIES AND RESPONSIBILITIES
Lead the design, implementation, and continuous improvement of Summit's enterprise informationsecurity program - covering cybersecurity, AI and data protection, risk management, and incident response.
Ensure strong alignment between security strategy, business goals, and regulatory requirements, particularly in the context of emerging AI use cases, machine learning models, and data governance.
Oversee the IT Business Continuity and Disaster Recovery (BCP/DR) programs, including Business Impact Analysis (BIA) and scenario-based recovery exercises.
Develop and enforce comprehensive policies, standards, and procedures aligned with frameworks such as NIST CSF 2.0, C2M2, and ISO 27001.
Partner with data, application, and operations leaders to ensure secure design, access control, and model integrity across AI and analytics systems.
Direct risk assessments and audits to identify vulnerabilities, ensuring mitigation strategies are financially sound and proportionate to organizational risk appetite.
Maintain strict adherence to financial controls - including vendor spend, contract review, and security-related procurement - demonstrating accountability for budget stewardship and cost transparency.
Lead and mentor a high-performing informationsecurity team, fostering a culture of ethics, service, and continuous learning.
Serve as the executive liaison for internal and external audits, compliance reviews, and regulatory reporting related to cybersecurity.
Stay ahead of evolving threats, particularly those involving AI misuse, data poisoning, and adversarial attacks, and integrate defenses into enterprise security posture.
Provide executive-level reporting on risk posture, incidents, and metrics that connect security outcomes to business and financial value.
EDUCATION AND WORK EXPERIENCE
Bachelor's or Master's degree in informationsecurity, Computer Science, Information Technology, or a related field.
10+ years of experience in informationsecurity, including at least 5 years in a senior leadership or management capacity.
Advanced security certifications strongly preferred (CISSP, CISM, CISA, CRISC, CCISO, etc.).
Demonstrated experience managing security for cloud and hybrid environments, and integrating controls for AI, analytics, and data platforms.
Proven record of financial accountability, including budget ownership, cost optimization, and vendor governance.
Experience implementing and auditing against leading security frameworks (NIST CSF, C2M2, ISO 27001, SOC 2) and regulatory standards (GDPR, HIPAA, PCI, etc.).
KNOWLEDGE, SKILLS, ABILITIES
Deep expertise in cybersecurity, risk management, and incident response, including threat intelligence, vulnerability management, and data protection.
Strong knowledge of AI and data security principles, including model governance, data ethics, and emerging threats tied to generative AI.
Uncompromising integrity and sound judgment in handling confidential and financial information.
Strong grasp of financial concepts related to technology management: budgeting, forecasting, cost-benefit analysis, and vendor contract negotiation.
Exceptional leadership and communication skills - able to translate complex security concepts into clear, actionable guidance for executives and teams.
Ability to lead under pressure with discipline, humility, and transparency.
Demonstrated track record of fostering a culture of trust, compliance, and ethical leadership.
The above statements are intended to describe the general nature and level of work being performed by employees assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and/or skills required of all personnel so classified.
Summit offers competitive pay and medical/dental/vision and other benefits that provide flexibility, choice and support to our employees when they need it most. We understand that home and family are essential pieces of your life, and our benefits are designed to support you both at work and at home.
Summit Utilities, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or protected veteran status and will not be discriminated against on the basis of disability or veteran status.
$104k-127k yearly est. Auto-Apply 41d ago
Offensive Security Engineer, Assessments (Web3)
Coinbase 4.2
Information security analyst job in Little Rock, AR
Ready to be pushed beyond what you think you're capable of? At Coinbase, our mission is to increase economic freedom in the world. It's a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform - and with it, the future global financial system.
To achieve our mission, we're seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company's hardest problems.
Our ******************************** is intense and isn't for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there's no better place to be.
While many roles at Coinbase are remote-first, we are not remote-only. In-person participation is required throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported.
The Application Security organization at Coinbase is seeking to hire an experienced Offensive Security Engineer specializing in Web3 penetration testing and Web3 bug bounty program management and optimization. In this role, you will collaborate with the Bug Bounty Program Lead to drive Web3 bug bounty triage, validation, and strategic initiatives aimed at increasing program efficiency, maturity, and hacker engagement. You will work closely with whitehat hackers, security engineers, and cross-functional teams to enhance Coinbase's security posture through an effective bug bounty program. Additionally, you will perform penetration tests on Web3 technologies and applications, ensuring the security of Coinbase's blockchain-based products and services.
*What you'll be doing (ie. job duties):*
* Conduct security assessments of Web3 products and services, including smart contracts, DeFi protocols, and blockchain infrastructure.
* Collaborate with partner teams to enhance detection and response capabilities for Web3 vulnerabilities.
* Stay informed on emerging security trends, advisories, and academic research in the Web3 space.
* Lead Web3 bug bounty triage and validation, ensuring timely and accurate assessments of reported vulnerabilities.
* Develop and implement strategies to incentivize high-quality bug bounty submissions and engage with the hacker community.
* Manage the Web3 bug bounty program, including scope updates, researcher communication, and payout disbursements.
* Analyze bug bounty data to identify trends, common vulnerabilities, and areas for improvement.
* Collaborate with engineering teams to prioritize and remediate vulnerabilities identified through the bug bounty program.
* Mentor and train junior security engineers in Web3 bug bounty triage and analysis.
* Provide on-call support for critical Web3 bug bounty-related incidents.
* Document and report on Web3 bug bounty metrics and program effectiveness.
*What we look for in you (ie. job requirements):*
* Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, or a related field.
* 3+ years of experience in Web3 application security and penetration testing.
* Proven track record of identifying critical vulnerabilities across the blockchain protocol stack, Web2, and Web3 components.
* Extensive knowledge of the blockchain ecosystem, including L1/L2 networks, DeFi protocols, and staking mechanisms.
* Deep understanding of Web2 security concepts and common vulnerabilities (e.g., OWASP Top 10, SANS Top 25).
* Strong analytical skills to identify trends and patterns in vulnerabilities.
* Excellent communication skills for engaging with internal teams.
* Passion for security and a drive to improve Web3 security posture.
* Ability to work independently and take ownership of penetration testing initiatives.
* Energy and self-drive for continuous learning in the rapidly evolving crypto space.
* Excellence in clear, direct, and kind communication with technical and non-technical stakeholders.
* Experience building relationships with product, engineering, and security teams.
*Nice to haves:*
* Participation in CTFs, bug bounty programs, or open-source security research.
* Expertise in Application Security, Network Security, or Cloud Security.
* Relevant security certifications (e.g., OSCP, GPEN).
* Experience developing and implementing security tooling to support bug bounty triage and analysis.
* Experience with bug bounty programs and platforms, including triage, validation, and researcher communication.
* Strong analytical skills to identify trends and patterns in bug bounty submissions.
* Excellent communication skills to effectively engage with bug bounty researchers.
Position ID: P69494
\#LI-remote
*Pay Transparency Notice:* Depending on your work location, the target annual salary for this position can range as detailed below. Full time offers from Coinbase also include bonus eligibility + equity eligibility**+ benefits (including medical, dental, vision and 401(k)).
Pay Range:
$152,405-$179,300 USD
Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying.
Commitment to Equal Opportunity
Coinbase is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view the *********************************************** in certain locations, as required by law.
Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please contact us at accommodations***********************************
*Global Data Privacy Notice for Job Candidates and Applicants*
Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available ********************************************************** By submitting your application, you are agreeing to our use and processing of your data as required.
*AI Disclosure*
For select roles, Coinbase is piloting an AI tool based on machine learning technologies to conduct initial screening interviews to qualified applicants. The tool simulates realistic interview scenarios and engages in dynamic conversation. A human recruiter will review your interview responses, provided in the form of a voice recording and/or transcript, to assess them against the qualifications and characteristics outlined in the job description.
For select roles, Coinbase is also piloting an AI interview intelligence platform to transcribe and summarize interview notes, allowing our interviewers to fully focus on you as the candidate.
*The above pilots are for testing purposes and Coinbase will not use AI to make decisions impacting employment*. To request a reasonable accommodation due to disability, please contact accommodations[at]coinbase.com
$152.4k-179.3k yearly 60d+ ago
Cloud Security Engineer
Ford Motor Company 4.7
Information security analyst job in Little Rock, AR
We are the movers of the world and the makers of the future. We get up every day, roll up our sleeves and build a better world -- together. At Ford, we're all a part of something bigger than ourselves. Are you ready to change the way the world moves?
The Enterprise Cyber Security Cloud Security team is responsible for working with other security and cloud services teams to ensure alignment and collaboration in securing Ford's public cloud infrastructure. The teams work closely together to identify security gaps in the cloud environments and address them.
The Cloud Security team is responsible for identifying, evaluating, and recommending cloud security tools and functions to enhance security around Ford's public cloud. The team is also responsible for developing and managing the following Security Services in Ford's public cloud environments:
- Cloud Security Automation Development
- GCP/Azure Security Compliance
- GCP VPC Service Control
- GCP Cloud Armor/ Azure WAF
**What you'll do...**
+ Partner with other Cloud Security team members to identify and develop automation for security related workflows and audits (VPC SC, DLP, Exceptions, Org Policy, etc..).
+ Lead evaluation and develop an understanding of tools needed to address security gaps.
+ Lead/Collaborate with EPEO Services teams on security gap remediation.
**You'll have...**
+ Bachelor's degree in Computer Science, Information Technology or related OR a combination of education and experience
+ 5+ years of scripting and automation experience
+ Proven experience in developing and implementing automation using scripting languages such as
+ Python, PowerShell, or Go, particularly for API integrations, security tool orchestration, and custom audit scripts.
+ Solid understanding and practical experience with Git and GitHub for version control, collaborative development, and security automation pipeline management.
+ Familiarity with CI/CD pipelines and automated deployment tools (e.g., Jenkins, Azure DevOps, GitHub Actions) to integrate security automation into the software development lifecycle.
+ Knowledge of Infrastructure-as-Code (IaC) principles and tools like Terraform.
+ Strong knowledge of security best practices and guidelines (at the enterprise-level) related to GCP and Azure Cloud deployments as well as common web application frameworks
+ Understand the functionality and secure usage of various GCP services: VPCs, IAM, security groups, compute engine, cloud storage, Security Command Center, VPC Service Control, Cloud DLP and Cloud Armor
+ Customer focused and strong team orientation
+ Self-starter and fast-learner
+ Strong communication and interpersonal skills
+ Strong problem solving and Analytical/Reasoning skills
+ Strong drive for results and ability to work independently
+ Demonstrated commitment to quality and project timing
+ Familiarity with the agile project planning process and use of Rally.
+ Document processes & procedures and developing other documentation.
**Even better, you may have...**
+ Understand the functionality and secure usage of various Azure services: Virtual Machines, Virtual Networks, Azure Active Directory, App Services, Azure SQL Databases, Storage Accounts, Kubernetes, Containers, Key vaults.
You may not check every box, or your experience may look a little different from what we've outlined, but if you think you can bring value to Ford Motor Company, we encourage you to apply!
As an established global company, we offer the benefit of choice. You can choose what your Ford future will look like: will your story span the globe, or keep you close to home? Will your career be a deep dive into what you love, or a series of new teams and new skills? Will you be a leader, a changemaker, a technical expert, a culture builder...or all of the above? No matter what you choose, we offer a work life that works for you, including:
- Immediate medical, dental, vision and prescription drug coverage
- Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
- Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
- Vehicle discount program for employees and family members and management leases
- Tuition assistance
- Established and active employee resource groups
- Paid time off for individual and team community service
- A generous schedule of paid holidays, including the week between Christmas and New Year's Day
- Paid time off and the option to purchase additional vacation time.
For a detailed look at our benefits, click here:
*******************************
This position is a range of salary grades 7-8.
Visa sponsorship is not available for this position.
SOUTHEAST MI RESIDENTS: This role is posted as remote unless you reside within 50 miles of Dearborn, MI-in which case we request on-site presence up to 4 days a week.
Candidates for positions with Ford Motor Company must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire.
We are an Equal Opportunity Employer committed to a culturally diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, disability status or protected veteran status. In the United States, if you need a reasonable accommodation for the online application process due to a disability, please call **************.
\#LI-Remote
**Requisition ID** : 54783
$71k-98k yearly est. 6d ago
IT - App Development - Data Analyst
Replacement Parts, Inc. 3.9
Information security analyst job in Little Rock, AR
The Data Analyst role is to build data and reporting solutions, with a focus on SQL coding and dashboard building. An ideal candidate will be skilled in database creation and administration, ETL processes, be a strong cross-functional communicator and collaborator, and have raw analytical skills.
The Data Analyst is a key contributor supporting many departments and applications.
The support of this complex organization provides for a tremendous amount of challenge and variety.
This job is responsible for collecting, examining, and identifying data patterns and trends that help drive actionable business insights and decision-making.
This position will use a variety of development languages and environments to perform their daily duties.
Essential Duties and Responsibilities include the following.
Other duties may be assigned.
Collecting and managing data, including exploratory data analysis (EDA).
Identifying trends and patterns in complex datasets.
Presenting findings in an easy-to-understand way to inform data-driven decisions.
Ability to produce dashboards, including graphs, tables, and other visualizations.
Manage analytics projects from start to finish (data integration, analysis, reporting).
Carrying out statistical research, prototyping new systems, and finding new ways of gathering, cleaning, and analyzing data.
Design machine learning systems and self-running AI software to automate the construction of predictive models.
Document machine learning processes.
Keep up to date with modern approaches in machine learning.
Actively working to identify improvements to internal processes, to improve conversions, revenue, ROI (or other relevant metrics).
Identify data science tool needs and build out tools to enable team as a whole.
Collaborate with unit managers, end users, development staff, and other stakeholders to integrate data mining applications with existing systems.
Provide and apply quality assurance best practices for data mining/analysis services across the organization.
Develop, implement, and maintain change control and testing processes for modifications to data models.
Monitor data mining system details within the database, including stored procedures and execution time, and implement efficiency improvements.
Respond to and resolve data mining performance issues.
Develop, code, install, test, debug, and document processes using appropriate editors.
Diagnose, troubleshoot, and document problems with existing ETL processes On the whole, operates in a rapidly changing environment with a sense of urgency with a high level of intellectual curiosity and comfort with ambiguity.
Supervisory Responsibilities This job has no supervisory responsibilities.
Competencies To perform the job successfully, an individual should demonstrate the following competencies:Analytical - Synthesizes complex or diverse information; collects and researches data.
Continuous Learning - Pursues training and development opportunities; strives to continuously build knowledge and skills; shares expertise with others.
Job Knowledge - Competent in required job skills and knowledge; exhibits ability to learn and apply new skills; keeps abreast of current developments.
Use of Technology - Demonstrates required skills; adapts to new technologies; troubleshoots technological problems; uses technology to increase productivity; keeps technical skills up to date.
Machine Learning/AI - Competent in Machine Learning and AI concepts; skilled in predictive data mining; will serve as Subject Matter Expert for department in these areas.
Problem Solving - Identifies and resolves problems in a timely manner; gathers and analyzes information skillfully; works well in group problem solving situations.
Communications - Expresses ideas and thoughts verbally; expresses ideas and thoughts in written form.
Cooperation - Offers assistance and support to co-workers; works cooperatively in group situations.
Customer Service - Responds promptly to customer needs; solicits customer feedback to improve service; responds to requests for service and assistance; meets commitments.
Planning/Organizing - Prioritizes and plans work activities; uses time efficiently.
Quantity - Meets productivity standards; completes work in timely manner.
Qualifications To perform this job successfully, an individual must be able to perform each essential duty satisfactorily.
The requirements listed below are representative of the knowledge, skill, and/or ability required.
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Education and/or Experience Bachelor's degree from four-year college or university, and one to three years related experience and/or training; or equivalent combination of education and experience.
Language Skills Ability to read, analyze, and interpret general business periodicals, professional journals, technical procedures, or governmental regulations.
Ability to write reports, business correspondence, and procedure manuals.
Ability to effectively present information and respond to questions from groups of managers, clients, customers, and the general public.
Mathematical Skills Ability to work with mathematical concepts such as probability and statistical inference, and fundamentals of plane and solid geometry and trigonometry.
Ability to apply concepts such as fractions, percentages, ratios, and proportions to practical situations.
Reasoning Ability Ability to define problems, collect data, establish facts, and draw valid conclusions.
Ability to interpret an extensive variety of technical instructions in mathematical or diagram form and deal with several abstract and concrete variables.
Computer Skills To perform this job successfully, an individual should have hands on experience with MS Access and knowledge of ODBC, JCDB, JSON, XML, linked servers, and data replication.
Experience with MS SQL Server Management Studio, PostGreSQL, FireBird, Unidata databases is helpful.
Proficiency with SSIS, SSRS, and other automation tools for ETL processing is required.
Prior exposure to multiple programming languages - Python, Java, Visual Basic, C++, C#, R is also helpful.
Demonstrable knowledge of Dashboard creation.
Physical Demands The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
While performing the duties of this Job, the employee is regularly required to sit; use hands to finger, handle, or feel; reach with hands and arms and talk or hear.
The employee is occasionally required to stand and walk.
The employee must regularly lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds.
Work Environment The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job.
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
While performing the duties of this Job, the employee is occasionally exposed to moving mechanical parts.
The noise level in the work environment is usually moderate.
Employment at Replacement Parts, Inc.
is subject to post offer, pre-employment drug testing.
Equal Opportunity Employer.
Replacement Parts, Inc.
is a drug-free workplace.
$66k-91k yearly est. 3d ago
Security Engineer II
Trustmark 4.6
Information security analyst job in Little Rock, AR
Trustmark's mission is to improve wellbeing - for everyone. It is a mission grounded in a belief in equality and born from our caring culture. It is a culture we can only realize by building trust. Trust established by ensuring associates feel respected, valued and heard. At Trustmark, you'll work collaboratively to transform lives and help people, communities and businesses thrive. Flourish in a culture of diversity and inclusion where appreciation, mutual respect and trust are constants, not just for our customers but for ourselves. At Trustmark, we have a commitment to welcoming people, no matter their background, identity or experience, to a workplace where they feel safe being their whole, authentic selves. A workplace made up of diverse, empowered individuals that allows ideas to thrive and enables us to bring the best to our colleagues, clients and communities.
We are seeking a highly skilled Cyber Security Engineer to join our team and play a pivotal role in safeguarding our organization's digital assets. The ideal candidate will possess a deep understanding of cybersecurity principles, a strong technical background, and a passion for protecting sensitive information.
You will be responsible for engineering, implementing and monitoring security measures for the protection of Trustmark's computer systems, networks and information. The role helps identify and define system security requirements as well as develop detailed cyber security designs.
**Responsibilities:**
+ Design, implement, and maintain security architectures, systems, and solutions to protect critical infrastructure and data.
+ Conduct vulnerability assessments and penetration testing to identify and mitigate risks.
+ Develop and implement security policies, standards, and procedures.
+ Monitor security systems and respond to incidents promptly and effectively.
+ Stay up-to-date with the latest cybersecurity threats and trends.
+ Collaborate with cross-functional teams to ensure security is integrated into all aspects of the business.
+ Provide technical guidance and support to internal stakeholders.
**Qualifications:**
+ Bachelor's degree in Computer Science, Information Technology, or a related field or
+ 3-5 Years of network engineering or cyber engineering experience
+ Strong understanding of cybersecurity frameworks and standards (e.g., NIST, ISO 27001).
+ Proficiency in network security, systems security, application security, and data security.
+ Hands-on experience with security tools and technologies (e.g., firewalls, intrusion detection systems, encryption, SIEM).
+ Excellent problem-solving and analytical skills.
+ Strong communication and interpersonal skills.
+ Ability to work independently and as part of a team.
**Preferred Qualifications:**
+ Certifications such as CISSP, CISA, or CEH.
+ Experience with cloud security (e.g., AWS, Azure, GCP).
+ Knowledge of scripting and programming languages (e.g., Python, PowerShell).
Brand: Trustmark
Come join a team at Trustmark that will not only utilize your current skills but will enhance them as well. Trustmark benefits include health/dental/vision, life insurance, FSA and HSA, 401(k) plan, Employee Assistant Program, Back-up Care for Children, Adults and Elders and many health and wellness initiatives. We also offer a Wellness program that enables employees to participate in health initiatives to reduce their insurance premiums.
**For the fourth consecutive year we were selected as a Top Workplace by the Chicago Tribune.** The award is based exclusively on Trustmark associate responses to an anonymous survey. The survey measured 15 key drivers of engaged cultures that are critical to the success of an organization.
All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, sexual identity, age, veteran or disability.
Join a passionate and purpose-driven team of colleagues who contribute to Trustmark's mission of helping people increase wellbeing through better health and greater financial security. At Trustmark, you'll work collaboratively to transform lives and help people, communities and businesses thrive. Flourish in a culture where appreciation, mutual respect and trust are constants, not just for our customers but for ourselves.
Introduce yourself to our recruiters and we'll get in touch if there's a role that seems like a good match.
When you join Trustmark, you become part of an organization that makes a positive difference in people's lives. You will play a vital role in delivering on our mission of helping people increase wellbeing through better health and greater financial security. Our customers tell us they simply appreciate the personal attention and knowledgeable service. Others tell us we've changed their lives.
At Trustmark, you'll be part of a close-knit team. You'll enjoy abundant opportunities to grow your career. That's why so many of our associates stay at Trustmark and thrive. Trustmark benefits from more than 100 years of experience but pairs that rich history with a palpable sense of optimism, growth and excitement for what's ahead - and beyond. This is a place where associates bring their whole selves to work each day. A place where you can be yourself. Whatever your beyond is, you can achieve it at Trustmark.
$74k-95k yearly est. 60d+ ago
IT Financial Analyst
Cayuse Holdings
Information security analyst job in Little Rock, AR
**JOB TITLE:** IT Financial Analyst **CAYUSE COMPANY:** Cayuse Commercial Services, LLC **SALARY:** $28.00-$35.00/hr **EMPLOYEE TYPE:** Full-Time Hourly Non-Exempt **The Work** The IT Financial Analyst will provide day-to-day support for invoice review and approval processing. The role will also assist IT managers with other financial tasks as assigned.
This position performs all duties and responsibilities in accordance with the Mission, Vision, and Core Values of Cayuse.
**Responsibilities**
**Key Responsibilities**
+ Monitor vendor invoice mailbox
+ Review vendor invoices
+ Match against contract or purchase order
+ Verify invoice for payment or return to vendor
+ Record invoice in general ledger
+ Notify Accounts Payable for vendor payment
+ Work with IT managers on other financial tasks as assigned
+ Respond to assigned tasks in accordance with predefined guidelines.
+ Other duties as assigned.
**Qualifications**
**Qualifications - Here's What You Need**
+ High school diploma or equivalent required
+ Two (2) to five (5) years of experience working in a finance position with focus on billing, invoicing, vendor management.
+ Preference with experience supporting an IT organization
+ Must be able to pass a background check. May require additional background checks as required by projects and/or clients at any time during employment.
**Minimum Skills:**
+ Microsoft Office experience (Work, Excel)
+ Experience with JD Edwards preferred
+ Financial billing, accounts payable experience
+ General accounting
+ Excellent communication skills
+ Experience working with suppliers and third-party vendors
+ Ability to quickly analyze a situation and react appropriately and effectively
+ Effective prioritization skills
+ Self-starter
+ Financial analysis credibility and independent judgment
+ Able to contribute to IT financial planning and operations
**Our Commitment to you / overview of benefits**
+ Medical, Dental and Vision Insurance; Wellness Program
+ Flexible Spending Accounts (Healthcare, Dependent Care, Commuter)
+ Short-Term and Long-Term Disability options
+ Basic Life and AD&D Insurance (Company Provided)
+ Voluntary Life and AD&D options
+ 401(k) Retirement Savings Plan with matching after one year
+ Paid Time Off
**Reports to:** **Program Manager**
**Working Conditions**
+ Professional remote office environment.
+ Must reside in Central or Eastern Time Zone.
+ Must be physically and mentally able to perform duties extended periods of time.
+ Ability to use a computer and other office productivity tools with sufficient speed to meet the demands of this position.
+ Must be able to establish a productive and professional workspace.
+ Must be able to sit for long periods of time looking at computer screen.
+ May be asked to work a flexible schedule which may include holidays.
+ May be asked to travel for business or professional development purposes.
+ May be asked to work hours outside of normal business hours.
**Other Duties:** _Please note this job description is not designed to cover or contain a comprehensive list of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice._
**_Cayuse is an Equal Opportunity Employer. All employment decisions are based on merit, qualifications, skills, and abilities. All qualified applicants will receive consideration for employment in accordance with any applicable federal, state, or local law._**
**Pay Range**
USD $28.00 - USD $35.00 /Hr.
Submit a Referral (*********************************************************************************************************************************
**Can't find the right opportunity?**
Join our Talent Community (********************************************************** or Language Services Talent Community (******************************************************** and be among the first to discover exciting new possibilities!
**Location** _US-_
**ID** _103881_
**Category** _Accounting/Finance_
**Position Type** _Full-Time Hourly Non Exempt_
**Remote** _Yes_
**Clearance Required** _None_
$28-35 hourly 7d ago
Information Systems Engineer II - Onsite Camden, AR
RTX
Information security analyst job in Camden, AR
Country:
United States of America Onsite
U.S. Citizen, U.S. Person, or Immigration Status Requirements:
Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
Security Clearance:
DoD Clearance: Secret
At Raytheon, the foundation of everything we do is rooted in our values and a higher calling - to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today's mission and stay ahead of tomorrow's threat. Our team solves tough, meaningful problems that create a safer, more secure world.
Test Solutions Engineering (TSE) includes all of the engineering disciplines responsible for systems design & test within the entire portfolio of Raytheon products. Our engineers are responsible for every element of the development lifecycle for test including: test requirements, test system design, flight simulations, hardware-in-the-loop, computer-in-the-loop, advanced engineering prototyping technology, flight operations for manned and unmanned vehicles, environmental testing, environmental characterization and engineering laboratory management.
We are hands-on, designing with the latest technology and tools, and integrate state of the art test solutions with the most advanced engineering systems in the world.
As part of the Test Environment Support Administration (TESA) team, you be working with both leading-edge technologies and legacy systems to support multiple products and programs throughout Raytheon. You will provide Test Equipment (TE) integration, security consultation, troubleshooting, sustainment, and compliance with the ultimate responsibility to maintain test integrity and availability of our test systems.
What You Will Do
Provide Cybersecurity compliance guidance to engineering for production and procurement of TE
Support Flight Test capabilities and processes for Raytheon test systems
Develop Cybersecurity compliant TE (Linux, IOS, Windows)
Install software packages/updates to enhance operations/testing of production hardware
Troubleshoot production and development TE to ensure connectivity, functionality, compliance, and test integrity
Collaborate with Digital Technologies to integrate TE to controlled networks or enterprises
Collaborate with Cybersecurity to ensure TE compliance (using tools such as Nessus, Splunk, Ivanti, and locally procured software)
Collaborate with engineering to ensure changes do not affect the availability or test integrity on TE
Support any and all reviews required prior for implementation of any changes to TE
This position is 100% onsite in Camden, Arkansas.
Qualifications You Must Have
Requires a Bachelor's Degree in Science, Technology, Engineering, or Mathematics (STEM)
Minimum two (2) years of prior experience with systems administration of Linux, Networking, and/or Windows (in desktop or server environments).
Experience with user account management, software installation and/or technical customer support
US Citizen - Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
Qualifications We Prefer
Experience as a System Engineer with an understanding of managing Operational Technology and/or test systems in a production environment
Experience working in a classified environment to include Special Access Programs (SAP)
DoD 8570.01m IAT II certified credentials (Sec+, CISM, etc.) within six (6) months of hire
Troubleshooting ability with all Microsoft Windows and Linux systems to quickly return system to operational status
Customer service and training skills, including oral and technical written communications
Independent problem-solving ability of hardware/software issues
What We Offer
Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Safety, Trust, Respect, Accountability, Collaboration, and Innovation.
This position offers relocation.
Learn More & Apply Now!
Please consider the following role type definitions as you apply for this role:
Onsite. Employees who are working in onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products.
This position requires a security clearance. DCSA Consolidated Adjudication Services (DCSA CAS), an agency of the Department of Defense, handles and adjudicates the security clearance process. More information about Security Clearances can be found on the US Department of State government website here: ************************************************
As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote.
The salary range for this role is 68,900 USD - 131,100 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills.Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance.This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.
RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act.
Privacy Policy and Terms:
Click on this link to read the Policy and Terms
$74k-99k yearly est. Auto-Apply 4d ago
Information Systems Engineer II - Onsite Camden, AR
RTX Corporation
Information security analyst job in Camden, AR
**Country:** United States of America ** Onsite **U.S. Citizen, U.S. Person, or Immigration Status Requirements:** Active and transferable U.S. government issued security clearance is required prior to start date.
U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
**Security Clearance:**
DoD Clearance: Secret
At Raytheon, the foundation of everything we do is rooted in our values and a higher calling - to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today's mission and stay ahead of tomorrow's threat. Our team solves tough, meaningful problems that create a safer, more secure world.
Test Solutions Engineering (TSE) includes all of the engineering disciplines responsible for systems design & test within the entire portfolio of Raytheon products. Our engineers are responsible for every element of the development lifecycle for test including: test requirements, test system design, flight simulations, hardware-in-the-loop, computer-in-the-loop, advanced engineering prototyping technology, flight operations for manned and unmanned vehicles, environmental testing, environmental characterization and engineering laboratory management.
We are hands-on, designing with the latest technology and tools, and integrate state of the art test solutions with the most advanced engineering systems in the world.
As part of the Test Environment Support Administration (TESA) team, you be working with both leading-edge technologies and legacy systems to support multiple products and programs throughout Raytheon. You will provide Test Equipment (TE) integration, security consultation, troubleshooting, sustainment, and compliance with the ultimate responsibility to maintain test integrity and availability of our test systems.
**What You Will Do**
+ Provide Cybersecurity compliance guidance to engineering for production and procurement of TE
+ Support Flight Test capabilities and processes for Raytheon test systems
+ Develop Cybersecurity compliant TE (Linux, IOS, Windows)
+ Install software packages/updates to enhance operations/testing of production hardware
+ Troubleshoot production and development TE to ensure connectivity, functionality, compliance, and test integrity
+ Collaborate with Digital Technologies to integrate TE to controlled networks or enterprises
+ Collaborate with Cybersecurity to ensure TE compliance (using tools such as Nessus, Splunk, Ivanti, and locally procured software)
+ Collaborate with engineering to ensure changes do not affect the availability or test integrity on TE
+ Support any and all reviews required prior for implementation of any changes to TE
This position is **100% onsite** in Camden, Arkansas.
**Qualifications You Must Have**
+ Requires a Bachelor's Degree in Science, Technology, Engineering, or Mathematics (STEM)
+ Minimum two (2) years of prior experience with systems administration of Linux, Networking, and/or Windows (in desktop or server environments).
+ Experience with user account management, software installation and/or technical customer support
+ US Citizen - Active and transferable U.S. government issued security clearance is required **prior** to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
**Qualifications We Prefer**
+ Experience as a System Engineer with an understanding of managing Operational Technology and/or test systems in a production environment
+ Experience working in a classified environment to include Special Access Programs (SAP)
+ DoD 8570.01m IAT II certified credentials (Sec+, CISM, etc.) within six (6) months of hire
+ Troubleshooting ability with all Microsoft Windows and Linux systems to quickly return system to operational status
+ Customer service and training skills, including oral and technical written communications
+ Independent problem-solving ability of hardware/software issues
**What We Offer**
Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Safety, Trust, Respect, Accountability, Collaboration, and Innovation.
This position offers relocation.
**Learn More & Apply Now!**
Please consider the following role type definitions as you apply for this role:
**Onsite.** Employees who are working in onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products.
This position requires a security clearance. DCSA Consolidated Adjudication Services (DCSA CAS), an agency of the Department of Defense, handles and adjudicates the security clearance process. More information about Security Clearances can be found on the US Department of State government website here: ************************************************
**_As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote._**
The salary range for this role is 68,900 USD - 131,100 USD. The salary range provided is a good faith estimate representative of all experience levels.
RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills.
Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.
Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance.
This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.
RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.
_RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act._
**Privacy Policy and Terms:**
Click on this link (******************************************************** to read the Policy and Terms
Raytheon Technologies is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.
$74k-99k yearly est. 3d ago
Senior Information Security Business Analyst
Aurecon
Information security analyst job in Manila, AR
Just imagine your future with us… At Aurecon we see the future through a very different lens. Do you? Innovation, eminence and digital are at the heart of everything we do. Are you excited about the future? Are you driven by the opportunity to work on some of the most challenging and complex projects around the world and to learn from the best? We are.
Diversity is at the core of everything we do. We work together to create a culture based on respect, trust and inclusiveness. Our differences are what fuel our creativity.
The purpose of the Senior Business Analyst (Security) role is to lead the analysis and documentation of Aurecon's project delivery needs so that our programs deliver the highest quality change into Aurecon. The Senior Business Analyst has the experience and insight to work quickly and autonomously and will be expected to produce high-quality deliverables that meet the needs of their program and stakeholders. The Senior Business Analyst will bring their confidence, work ethic and leadership skills to ensure the successful implementation of IT initiatives at Aurecon.
What will you do?
We know the work we do is vital in assisting Aurecon's business globally. Here are the key things you will do to 'bring ideas to life'.
* Responsible for gathering, documenting, and obtaining sign-off of business, functional and non-functional requirements aligned with Aurecon PMO and security standards (E8 / NIST Level 2)
* Agile/Scrum experience - Mandatory
* Work with business, IT teams and vendors to analyse and explain the feasibility of security options and recommend the most appropriate response for business partners
* Proactively build and maintain exceptional business and technology stakeholder relationships at all levels to ensure alignment between business strategy, technology, security, and solution delivery
* Responsible for collecting process information and documenting in defined templates
* Responsible for raising issues and risks and proactively proposing work arounds and resolutions for problem resolution.
* Contribute to and review requirements and process related documentation
Data Analysis activities:
* Ability to analyse large data sets into meaningful output for consumption by stakeholders
* Leveraging advanced Excel skills be able to analyse, monitor, manage and predict impacts of business scenarios
* Able to initiate and perform ad hoc queries to identify potential security issues within data sets
* Able to initiate uplift to data capture and analysis processes to improve analytical outcomes
Testing activities (nice to have):
* Create Test Approach/Plan across both functional and non-functional requirements covering the applicable Testing stages and gain endorsement
* Collaborate with Project Manager to estimate, schedule and resource the testing, identifying assumptions, dependencies, risks, and issues
Firstly, strong sense of responsibility, flexibility, and adaptability to varying request. Demonstrate excellent time management and organizational skills. And as part of a new team, you will have the opportunity to shape this role and have input into how we evolve it over time to WOW our employees and make an even bigger impact on the world.
You will also need the following capabilities:
Qualifications (Required)
* 7+ years of experience on Business Analysis, Requirements gathering, creating BRDs, etc.
* With exposure on Cyber Security / Security projects
* Strong communications skills and stakeholder management
* Agile Scrum methodology experience is preferred
At Aurecon, we know every career adventure is unique. That's why our benefits are designed to support you and your family - at every stage.
* Flexibility - 1x every fortnight reporting in the office
* Wellbeing - we priorities your health
* Recognition - your impact matters
* Family - support for modern families and carers
* Community - give back through volunteering days
* Career development - learn, lead and shape your career
Our Aurecon Attributes describe the types of people we bring together for clients. We don't expect you to have all eight of the attributes, but one that is unique to you.
Finally, we value that each of our team members brings something different to Aurecon. We look for people who have had a broad range of experiences throughout their career and can demonstrate how they have worked as part of a team to bring ideas to life. Does that sound like you?
About us
We've re-imagined engineering.
Aurecon is an engineering and infrastructure advisory company, but not as you know it!
For a start, our clients' ideas drive what we do. Drawing on our deep pool of expertise, we co-create innovative solutions with our clients to some of the world's most complex challenges. And through a range of unique creative processes and skills, we work to re-imagine, shape and design a better future.
We listen deeply and intently, which helps us see opportunities, possibilities and potential that others can't. Think engineering. Think again.
Want to know more?
You can learn more about what it's like to work at Aurecon by visiting the careers section of our website.
If you are intrigued or excited by what you have read, then we want to hear from you. Apply now!
$70k-95k yearly est. Auto-Apply 60d+ ago
Security Engineer - IR Threat Intelligence
Meta 4.8
Information security analyst job in Little Rock, AR
Meta Security is looking for a threat intelligence investigator with extensive experience in investigating cyber threats with an intelligence-driven approach. You will be proactively responding to a broad set of security threats, as well as tracking actor groups with an interest or capability to target Meta and its employees. You will also be identifying the gaps in current detections and preventions by long-term intelligence tracking and research, and working with cross-functional stakeholders to improve Meta's security posture.
**Required Skills:**
Security Engineer - IR Threat Intelligence Responsibilities:
1. Track threat clusters posing threats to Meta's infrastructure and employees, and identify, develop and implement countermeasures on our corporate network
2. Investigate, mitigate, and forecast emerging technical trends and communicate effectively with actionable suggestions to different types of audiences
3. Work closely with incident responders to provide useful and timely intelligence to enrich ongoing investigations
4. Improve the tooling of threat cluster tracking and intelligence data integration to existing systems
5. Engage constructively in cross-functional projects to improve the security posture of Meta's infrastructure, such as red team operations, surface detection coverage expansion and vulnerability management discussions
**Minimum Qualifications:**
Minimum Qualifications:
6. 5+ years threat intelligence experience
7. Bachelor's degree or equivalent experience in Security
8. Familiarity with campaign tracking techniques and ability to convert the tracking results to long term countermeasures
9. Familiarity with threat modeling framework, such as Diamond Model or/and MITRE ATT&CK framework
10. Experience intelligence-driven hunting to spot suspicious activities in the network and identify potential risks
11. Proven track record of managing and executing on short term and long term projects
12. Ability to work with a team spanning multiple locations/time zones
13. Ability to prioritize and execute tasks with minimal direction or oversight
14. Ability to think critically and qualify assessments with solid communications skills
15. Coding or scripting experience in one or more scripting languages such as Python or PHP
**Preferred Qualifications:**
Preferred Qualifications:
16. Experience close collaborating with incident responders on incident investigations
17. Familiarity with malware analysis or network traffic analysis
18. Familiarity with nation-state, sophisticated criminal, or supply chain threats
19. Production of file-based or network-based rules and signatures for detection and tracking of complex threats, such as YARA or Snort
20. Experience in one or more query languages such as SQL
21. Experience writing production code for threat intelligence tooling
22. Experience conducting large scale data analysis
23. Experience working across the broader security community
**Public Compensation:**
$154,000/year to $217,000/year + bonus + equity + benefits
**Industry:** Internet
**Equal Opportunity:**
Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.
Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at accommodations-ext@fb.com.
$154k-217k yearly 6d ago
Sr. Security Analyst
Maximus 4.3
Information security analyst job in Little Rock, AR
Description & Requirements Maximus is seeking a qualified Sr. Technical/SecurityAnalyst for multiple projects, current and upcoming. The qualified candidate will be involved in technical/security planning and assessment projects with potentially multiple state agencies. The position requires the candidate to produce/review security relevant documentation, such as system security plans, POA&Ms, assessment plans, etc., produce technical/security analyses, develop estimates, review and contribute to requirements for large systems-planning efforts in the Child Support, Child Welfare and/or Integrated Eligibility public-sector domains. The individual will report directly to a Senior Manager. Maximus is a matrix-managed organization, which means the individual will have secondary reporting relationships to one or more Project Managers, depending on which projects they are assigned.
*This role is remote but requires working standard business hours in the US time zone of the client. This position is contingent upon award. *
Essential Duties and Responsibilities:
- Collaborate with project managers on various initiatives and projects to track progress and provide support as necessary.
- Support leadership in ensuring that the project is delivered to specifications, is on time, and within budget.
- Work closely with management and work groups to create and maintain work plan documents.
- Track the status and due dates of projects.
- Manage relationships with project staff responsible for projects.
- Produce regular weekly and monthly status reports that could include; work plan status, target dates, budget, resource capacity, and other reports as needed.
- Facilitate regular meetings and reviews.
- Adhere to contract requirements and comply with all corporate policies and procedures.
Job Specific Duties and Responsibilities:
-Perform duties independently under the direction of their direct manager and/or Project Managers on specific projects.
-Review project documentation and client materials and provide analysis of technical and security related topics.
-Participate in client meetings and offer observations and insight on technical and security related topics.
-Identify risk areas and potential problems that require proactive attention.
-Review and author artifacts and other project documents and identify potential gaps, inconsistencies, or other issues that may put the project at risk. Such artifacts and documents may include but are not limited to:
*System Security Plan
*Plan of Action and Milestones (POA&M)
*Security Assessment Plan
*Risk Assessment reports
*CMS ARC-AMPE forms and documentation
*Data Conversion and Migration Management Plan
*Deployment and/or roll-out plans
-Perform security assessments, lead security audit and assessment activities, and provide direct security oversight support to assigned clients and projects.
-Identify and escalate to the Senior Manager / Project Manager risks, alternatives, and potential quality issues.
-Attend interviews, focus groups, or other meetings necessary to gather information for project deliverables in accordance with the project scope of work.
-Attend project meetings with the client, subcontractors, project stakeholders, or other Maximus Team members, as requested by the Senior Manager / Project Manager.
-Complete project work in compliance with Maximus standards and procedures.
-Support team to complete assigned responsibilities as outlined in the Project schedule.
-Support all other tasks assigned by Senior Manager / Project Manager.
Minimum Requirements
- Bachelor's degree in related field.
- 7-10 years of relevant professional experience required.
- Equivalent combination of education and experience considered in lieu of degree.
Job Specific Requirements:
-Be available to work during standard client business hours. Projects may involve clients from any US time zone, so it is possible that work outside of the individual's local business hours will be required.
-Bachelor's degree from an accredited college or university, or equivalent work experience.
-7+ years of experience in informationsecurity, with at least 3 years of security-compliance work in a regulated industry.
-5+ years of experience working with HIPAA, NIST 800-53 and/or CMS MARS-E or ARC-AMPE security frameworks.
-Familiar with operating systems: Windows, Linux/UNIX, OS/X.
-Familiar with AI tools, capabilities.
-Strong command of cloud computing topics.
-Strong command of agile software development practices as well as waterfall development practices.
-Strong desktop software skills: proficient in MS Office, Excel, Word, Project.
-Ability to explain and communicate technical subjects to non-technical audiences.
-Ability to develop advanced concepts, techniques, and standards requiring a high level of interpersonal and technical skills.
-Ability to work independently.
-Good organizational skills and the ability to manage multiple tasks and deadlines simultaneously.
-Strong interpersonal and team building skills, as well as an understanding of client relationship building are essential.
-Excellent verbal and writing skills and be comfortable working with customers.
-Ability to multi-task with supervision.
-Self-motivated fast learner.
Preferred Skills:
-Prefer a candidate with experience in the Health & Human Services industry, which may include working with programs such as Child Support, Child Welfare, or Integrated Eligibility (SNAP, TANF, and Medicaid).
-Preference for security related certifications, such as the CISSP (Certified Information Systems Security Professional).
EEO Statement
Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected characteristics.
Pay Transparency
Maximus compensation is based on various factors including but not limited to job location, a candidate's education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus's total compensation package. Other rewards may include short- and long-term incentives as well as program-specific awards. Additionally, Maximus provides a variety of benefits to employees, including health insurance coverage, life and disability insurance, a retirement savings plan, paid holidays and paid time off. Compensation ranges may differ based on contract value but will be commensurate with job duties and relevant work experience. An applicant's salary history will not be used in determining compensation. Maximus will comply with regulatory minimum wage rates and exempt salary thresholds in all instances.
Accommodations
Maximus provides reasonable accommodations to individuals requiring assistance during any phase of the employment process due to a disability, medical condition, or physical or mental impairment. If you require assistance at any stage of the employment process-including accessing job postings, completing assessments, or participating in interviews,-please contact People Operations at **************************.
Minimum Salary
$
120,000.00
Maximum Salary
$
140,000.00
$84k-112k yearly est. Easy Apply 6d ago
Field Virtual Chief Information Security Officer (vCISO)
Ascend Technologies
Information security analyst job in Little Rock, AR
This position is hybrid with some onsite responsibility in Conway, and applicants must already reside in the central Arkansas area. Relocation will not be provided. PURPOSE: A Field vCISO's primary purpose is to function as a trusted advisor to strategically improve the cybersecurity posture of Ascend clients. Field vCISOs integrate into our client organizations to manage and improve comprehensive cybersecurity programs for mid-market clients based on established frameworks such as NIST CSF, CIS Controls, HIPAA, and more.
Weekly or monthly meetings are held to present data gathered from our various solutions to demonstrate the efficacy of Ascend's cybersecurity services to client stakeholders and highlight advancement toward the client's desired maturity. Quarterly presentations to client C-suite or Board of Directors may be required. Completion of security questionnaires, review of vulnerability reports, pen test reports, risk assessments, research on non-Ascend products/services, and communication of strategy for emerging threats or business requirements are all provided to our clients by their vCISO.
Excellent communication and presentation skills are important to help make complex cybersecurity concepts clear and relatable to non-technical audiences across a multitude of industries.
RESPONSIBILITIES:
Serve as the primary contact for client informationsecurity programs, interfacing with executive teams and business leaders in person at the client's headquarters.
Develop custom cybersecurity programs and drive cybersecurity initiatives that support regulatory requirements, risk appetite, budget targets, and desired outcomes.
Leads monthly, quarterly, and annual presentations of risk management initiatives among client technical resources, key stakeholders, senior management, and board of directors.
Review status of security services via regular reports to identify areas in need of attention by Ascend, and present findings to client stakeholders.
Guide client infosec strategy for addressing gaps and implementing controls found in their desired security framework.
Manage and measure clients' security and/or compliance programs.
Understand compliance and controls to help guide clients' efforts to fully address their requirements and gather evidence in preparation for audit.
Draft and implement security policies for client organizations.
Conducts third-party risk assessments to identify technical, operational, and compliance risks and recommend risk reduction strategies.
Work with the Ascend Cybersecurity Leadership to identify Ascend services required to address security needs of clients.
Oversees the delivery of cybersecurity engineering services such as vulnerability management, endpoint protection, privilege and identity management, network security, etc.
Facilitate change, knowledge, and team understanding of the client environment and needs as priorities shift.
Actively monitors evolving threats and compliance changes and communicates findings to both Ascend and client stakeholders.
Leads cybersecurity training and tabletop exercises.
Other Responsibilities as assigned by management.
MINIMUM SKILLS, EDUCATION AND EXPERIENCE
5+ years leading informationsecurity programs and initiatives and implementing cybersecurity controls to mitigate regulatory and cybersecurity risks.
5+ Years experience in cybersecurity, and framework alignment (CMMC, DFARS, NIST 800-171, NIST CSF, HIPAA, FDIC, GLBA, ISO 27001/2, CIS, etc.).
5+ Years of strong working knowledge of system, application, network, cloud, and data security best practices.
Experience preparing for compliance audits including one or more of the following SOC2, CMMC, FDIC, or HITRUST.
One or more of the following certifications: CISSP, CISA, CISM, CRISC, GLSC, GSTRT, or equivalent.
BA/BS degree or an equivalent combination of education and experience - preferably advanced degree in related field.
Demonstrable track record of accomplishment and success.
Excellent problem solving, decision-making, communication and team building skills.
Proven experience with engaging executive level leadership to influence and provide strategic insight.
PREFERRED SKILLS, EDUCATION AND EXPERIENCE
Preferred experience as a Cybersecurity or Compliance manager.
Experience working through growth phases, acquisition changes, for mid-market organizations or small businesses as they transitioned to mid-market.
Industry Specialized Certifications for HIPAA, HITRUST, etc.
Working knowledge of Threat Protection, SIEM, SOC, EDR Platforms, Privilege and Identity Management Platforms.
Starting Compensation: $120,000/year
The salary for this position is commensurate with experience, skills, and qualifications. The range is intended to reflect our commitment to attracting top talent, and the final offer will be based on factors including, but not limited to, the candidate's previous experience, expertise in the field, relevant certifications, and the specific requirements of the role. In addition, internal equity, market trends, and geographic location may also influence the final salary.
Along with a competitive salary, we offer a comprehensive benefits package, including health, dental, and vision insurance, retirement savings options, flexible time off (FTO), and professional development opportunities. We are open to discussing compensation and benefits further during the interview process to ensure alignment with the candidate's expectations and experience.
At Ascend Technologies we firmly believe that diversity, equity, and inclusion are not only fundamental values but also powerful drivers of innovation, growth, and success. We are committed to fostering an environment where every individual feels valued, respected, and empowered.
CORE VALUES
We are seeking highly motivated individuals who have the willingness and ability to demonstrate Ascend core values:
Committed to Client Success:
Our actions and our words always align with the best interest of the client.
One Team:
We work collaboratively to overcome challenges with humility and respect and do what it takes to find innovative solutions.
Integrity:
We are unquestionably committed to doing the right thing even when it is hard.
Accountability:
We hold ourselves and each other accountable for keeping our commitments to our clients, our communities, and one another.
Transparency:
We create open lines of communication with each other and our clients, fostering relationships founded on candor and trust.
PHYSICAL DEMANDS:
Must be able to sit, stand, and bend for the duration of shift. The position is mainly sitting, with occasional lifting up to 50 lbs, such as laptop, server equipment, and, driving to the work site to meet with client(s).
$120k yearly Auto-Apply 13d ago
Engineer, Information Security and Risk
Cardinal Health 4.4
Information security analyst job in Little Rock, AR
Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare's most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500.
**_Department Overview:_**
**Information Technology** oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value.
**InformationSecurity and Risk** develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments.
**Responsibilities:**
+ **M&A Integration Execution:** Collaborate and engage with IAM Lead and other business partners on planning, design, and execution of IAM integration strategies for M&A activities, ensuring alignment with overall business and security objectives. This includes assessing the IAM landscapes of merging entities to identify challenges and solutions.
+ **Design and Implement Sailpoint IIQ Solutions:** Configure and customize Sailpoint IIQ components (Lifecycel Manager, Compliance Manager etc). Also develop workflows, rules, and connectors for identity governance.
+ **Application integration with Sailpoint IIQ:** Integrate Sailpoint IIQ with enterprise applications, directories and cloud platforms in addition to developing and maintaining connectros for provisioning and de-provisioning.
+ **Sailpoint IIQ Development and Scripting:** Write and maintain BeanShell scripts, Java code and XML configurations, develop customer Sailpoint tasks and workflows.
+ **Identity System Merging & Consolidation:** Manage the complex process of merging disparate identity providers, user directories (e.g., Active Directory, Azure AD, LDAP), and access management systems from acquired companies into the existing infrastructure.
+ **User Lifecycle Management:** Streamline and automate user provisioning, de-provisioning, and periodic access reviews for employees, contractors, and partners across all integrated systems, ensuring smooth onboarding and offboarding during M&A transitions.
+ **Security & Compliance:** Ensure IAM systems and processes comply with regulatory requirements (e.g., GDPR, HIPAA, SOX) and internal security policies, providing auditable records of access activities. Protect against data breaches by ensuring only authorized personnel can access sensitive information.
+ **Technical Troubleshooting & Support:** Troubleshoot, identify, and resolve technical identity and access management-related issues, providing expert support to internal teams and end-users during and after integration.
+ **Collaboration & Communication:** Coordinate cross-functional teams, including InformationSecurity, IT Operations, HR, and Application Development, to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non-technical stakeholders.
+ **Documentation & Best Practices:** Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends.
**Qualifications**
+ Experience with SailPoint IdentityIQ (IIQ) is a must
+ Experience with SailPoint IIQ Integrations (Workday, Active Directory/LDAP, Webservices, SCIM, JDBC, SAP)
+ Experience implementing Life Cycle Manager (LCM) Configuration workflow tasks that model business functions, including Lifecycle Requests (Role or Entitlement), Lifecycle Events (Joiner, Mover, or Leaver), and LCM Workflow Details (Workflows and Subprocesses)
+ Solid understanding of the SailPoint object model, rules, and policies
+ Experience with both lifecycle manager (LCM) and compliance manager (CM) modules
+ Knowledge of Active Directory, LDAP, Workday, and cloud platforms (GCP, MS Entra ID) is required
+ Proven track record of successful IAM implementations including large scale enterprise deployments.
+ Experience working within regulatory standards and requirements such as, SOX, HIPAA, GDPR etc. is desired.
**Anticipated salary range:** $94,900 - $135,600
**Bonus eligible:** No
**Benefits:** Cardinal Health offers a wide variety of benefits and programs to support health and well-being.
+ Medical, dental and vision coverage
+ Paid time off plan
+ Health savings account (HSA)
+ 401k savings plan
+ Access to wages before pay day with my FlexPay
+ Flexible spending accounts (FSAs)
+ Short- and long-term disability coverage
+ Work-Life resources
+ Paid parental leave
+ Healthy lifestyle programs
**Application window anticipated to close:** 12/20/2025 *if interested in opportunity, please submit application as soon as possible.
The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate's geographical location, relevant education, experience and skills and an evaluation of internal pay equity.
_Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._
_Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._
_To read and review this privacy notice click_ here (***************************************************************************************************************************
$94.9k-135.6k yearly 59d ago
Director of Information Security
Summit Utilities Inc. 4.4
Information security analyst job in Fort Smith, AR
Join our Growing Team and see why Summit Utilities, Inc was named as one of the Fastest Growing Denver Area Private Companies 2019 and 2020; Best Places to Work in Maine 2019, 2020, 2021, 2022 and 2023; and Best Places to Work in Arkansas 2020 and 2023, Oklahoma 2022 and 2023 and Missouri 2023. Summit was also recently named one of Forbes 2023 America's Best Small Employers.
Summit is a growing natural gas utility providing safe, reliable and clean burning natural gas service to homes and businesses in Arkansas, Colorado, Maine, Missouri, Oklahoma, and Texas. Being part of the Summit team means embracing excellence and innovation, committing to safety each and every day, and doing all that we can to serve each other, our customers and the communities where we live. We aim to bring warmth and energy to everything we do.
We have an exciting hybrid opportunity for a Director of Information Technology based in Fort Smith, Arkansas.
POSITION SUMMARY
The Director of InformationSecurity is a trusted senior leader responsible for protecting Summit's digital and physical information assets while upholding the highest standards of integrity, financial discipline, and organizational trust. This role oversees cybersecurity governance, risk management, and business continuity for enterprise systems - including modern threats emerging from AI technologies and data automation. The Director will develop and execute a forward-looking security strategy that supports Summit's operational excellence, compliance obligations, and AI-driven transformation initiatives. This includes defining governance frameworks, managing enterprise risk, ensuring prudent budget oversight, and cultivating a strong security culture across all levels of the organization.
This position requires a strategic thinker, a disciplined financial steward, and a leader of high character who models accountability, transparency, and ethical decision-making.
PRIMARY DUTIES AND RESPONSIBILITIES
Lead the design, implementation, and continuous improvement of Summit's enterprise informationsecurity program - covering cybersecurity, AI and data protection, risk management, and incident response.
Ensure strong alignment between security strategy, business goals, and regulatory requirements, particularly in the context of emerging AI use cases, machine learning models, and data governance.
Oversee the IT Business Continuity and Disaster Recovery (BCP/DR) programs, including Business Impact Analysis (BIA) and scenario-based recovery exercises.
Develop and enforce comprehensive policies, standards, and procedures aligned with frameworks such as NIST CSF 2.0, C2M2, and ISO 27001.
Partner with data, application, and operations leaders to ensure secure design, access control, and model integrity across AI and analytics systems.
Direct risk assessments and audits to identify vulnerabilities, ensuring mitigation strategies are financially sound and proportionate to organizational risk appetite.
Maintain strict adherence to financial controls - including vendor spend, contract review, and security-related procurement - demonstrating accountability for budget stewardship and cost transparency.
Lead and mentor a high-performing informationsecurity team, fostering a culture of ethics, service, and continuous learning.
Serve as the executive liaison for internal and external audits, compliance reviews, and regulatory reporting related to cybersecurity.
Stay ahead of evolving threats, particularly those involving AI misuse, data poisoning, and adversarial attacks, and integrate defenses into enterprise security posture.
Provide executive-level reporting on risk posture, incidents, and metrics that connect security outcomes to business and financial value.
EDUCATION AND WORK EXPERIENCE
Bachelor's or Master's degree in informationsecurity, Computer Science, Information Technology, or a related field.
10+ years of experience in informationsecurity, including at least 5 years in a senior leadership or management capacity.
Advanced security certifications strongly preferred (CISSP, CISM, CISA, CRISC, CCISO, etc.).
Demonstrated experience managing security for cloud and hybrid environments, and integrating controls for AI, analytics, and data platforms.
Proven record of financial accountability, including budget ownership, cost optimization, and vendor governance.
Experience implementing and auditing against leading security frameworks (NIST CSF, C2M2, ISO 27001, SOC 2) and regulatory standards (GDPR, HIPAA, PCI, etc.).
KNOWLEDGE, SKILLS, ABILITIES
Deep expertise in cybersecurity, risk management, and incident response, including threat intelligence, vulnerability management, and data protection.
Strong knowledge of AI and data security principles, including model governance, data ethics, and emerging threats tied to generative AI.
Uncompromising integrity and sound judgment in handling confidential and financial information.
Strong grasp of financial concepts related to technology management: budgeting, forecasting, cost-benefit analysis, and vendor contract negotiation.
Exceptional leadership and communication skills - able to translate complex security concepts into clear, actionable guidance for executives and teams.
Ability to lead under pressure with discipline, humility, and transparency.
Demonstrated track record of fostering a culture of trust, compliance, and ethical leadership
.
The above statements are intended to describe the general nature and level of work being performed by employees assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and/or skills required of all personnel so classified.
Summit offers competitive pay and medical/dental/vision and other benefits that provide flexibility, choice and support to our employees when they need it most. We understand that home and family are essential pieces of your life, and our benefits are designed to support you both at work and at home.
Summit Utilities, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or protected veteran status and will not be discriminated against on the basis of disability or veteran status.
$104k-127k yearly est. Auto-Apply 39d ago
Learn more about information security analyst jobs