Overview
Client is seeking an experienced Information Security Analyst with deep knowledge of security, technology, and risk management in a large enterprise environment. This role focuses on SailPoint role review and maintenance, technology access control reviews, security consulting, and risk analysis across a broad range of enterprise platforms.
The ideal candidate combines strong technical expertise with business acumen, particularly within regulated environments, and can make sound, risk-based security decisions while partnering effectively with business and technology teams.
Core Responsibilities
• Perform SailPoint role reviews, role maintenance, and technology access control reviews across enterprise platforms.
• Review and assess access controls for Windows, Linux, databases including SQL Server, Oracle, and DB2, network appliances, and mainframe environments.
• Identify security risks, analyze complex security issues, and perform remediation activities.
• Create, maintain, and document security standards, processes, procedures, and best practices.
• Provide security requirements, guidance, and decisions for projects, operational activities, and security variance requests.
• Deliver security consulting services to multiple concurrent projects and act as the owner for assigned work.
• Partner with business and technology teams to provide security reviews, assessments, and consulting support.
• Communicate security concepts and requirements to diverse technical and non-technical audiences.
• Escalate issues appropriately and maintain thorough documentation of decisions and completed work.
• Collaborate with internal stakeholders and audit partners while building effective cross-functional relationships.
Essential Qualifications, Skills, and Technologies
• Bachelor's degree or equivalent work experience.
• Three to five or more years of experience in technology-related auditing, consulting, programming, operational banking, or related technology disciplines.
• Subject matter expert-level knowledge of both the business and technical aspects of security and technology.
• Strong broad-based technical background including distributed systems, mainframe environments, databases, web-based application development, and/or cloud technologies.
• Experience with enterprise access controls and security administration across Windows, Linux, SQL Server, Oracle, DB2, network appliances, and mainframe platforms.
• Strong risk-based analysis, problem-solving, and decision-making skills.
• Ability to understand and analyze complex business processes and technologies and provide sound recommendations.
• Project management experience or experience serving as a project team member.
• Ability to manage multiple priorities and work effectively in a fast-paced environment.
• Strong process management, time management, and organizational skills.
• Excellent interpersonal, customer service, relationship management, written communication, and verbal communication skills.
• Ability to create and implement new processes and procedures.
• Proficiency with Microsoft Office Suite.
• Ability to work independently, make fact-based decisions, and operate effectively outside established comfort zones.
• Demonstrated ability to handle challenging client situations and complex organizational environments.
Preferred Skills or Experience
• Identity and Access Management (IAM) experience or background.
• Functional knowledge of both the technical and business aspects of information security.
• Experience within a regulated or financial services environment.
Work Details
• Must be willing to work after hours, overnight schedules, weekends, and participate in an on-call rotation.
Nesco Resource offers a comprehensive benefits package for our associates, which includes a MEC (Minimum Essential Coverage) plan that encompasses Medical, Vision, Dental, 401K, and EAP (Employee Assistance Program) services.
Nesco Resource provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.
