Senior Information Security Analyst

As a Senior Information Security Analyst, you will act as an advisor and security subject matter expert supporting government partners. You will be interested in partnering with business leaders, technical teams, customers, and external stakeholders to identify risks, implement effective controls, and drive continuous improvement. To support this, a strong understanding of NIST, HIPAA, and/or state laws would be beneficial.

Success in this role requires a deep understanding of cybersecurity principles, strong analytical and problem-solving skills, excellent communication abilities, and the adaptability to navigate a dynamic regulatory and threat landscape. Ideally, you will be a collaborative leader who excels at translating complex security concepts into practical business solutions.

Candidates for this position will be required to be 100% onsite in either our West Des Moines, Iowa location, or our greater Chicago area location.

What You'll Do:

Governance, Risk, and Compliance

• Evaluates organizational compliance with contractual regulatory, and state security requirements. Supports gap and risk remediation
• Develops and implements security standards and procedures to safeguard resources ensuring compliance with HIPAA, NIST, FedRAMP and/or HITRUST requirements
• Evaluates security risks balancing business drivers, best practices and external drivers. Provides proactive solutions or recommendations through collaboration across business units
• Participates in development, review, and maintenance of System Security Plans (SSPs), security policies, standards, and procedures
• Supports annual assessments and security authorization activities
• Prepares reports for management detailing the status of security incidents, audit findings, and risk assessments

Security Operations and Vulnerability Management

• Supports vulnerability management activities. Validates creation, documentation, and completion of Plans of Action and Milestones (POA&Ms)
• Participates in incident investigations, root cause analysis, corrective actions, and lessons learned activities
• Coordinates breach notification activities and security reporting in accordance with contractual and regulatory requirements

Collaboration and Communication

• Owns and delivers tasks on projects for the security team and with internal customer projects. Ensures timely completion of deliverables
• Represents security on initiatives across Telligen. Works closely with internal customers to ensure implementation of security controls and best practices
• Stays current with industry trends, emerging threats, security technologies, and pertinent regulations
• Provides guidance and mentorship to other members of the security team
• Provides timely responses, uses professional communication, and approaches vulnerability and risk management from the perspective of business enablement

Required Skills and Experience:

• 2-year degree in Information Technology, Information Security, or related field and/or equivalent training and/or experience
• 5-7 years of work experience in IT; 3 or more years of experience must be in an information security role with demonstrated working knowledge of information security, federal and state rules and regulations, company/business unit operations, compliance policies, procedures, and/or programs in area of assignment

Preferred Skills and Experience:

• Bachelor’s degree in Computer Science, MIS, Information Assurance or related field is preferred
• CISSP, CISM, CISA, GSNA, CCSP, Security+, or equivalent industry certification preferred
• Experience with NIST, ISO, and HIPAA requirements/guidance is highly desirable