Information Security Analyst

When joining Elevations, you can expect to work for a company with:

• A leadership team that strives to make this the best place you’ve ever worked!
• A focus on supporting our employees’ mental, physical, and financial well-being
• A commitment to diversity, equity, and inclusion recognized by the Denver Business Journal and Colorado Association of Realtors
• A highly engaged workforce devoted to innovation, continuous improvement, and collaboration
• A reputation for excellence, as evidenced by being a two-time recipient of the Malcolm Baldrige National Quality Award
• A passion for consistently providing amazing experiences and creating raving fans

If you join our team, here are some of the perks you can expect:

• A competitive total rewards package with 4 weeks paid time off for full-time employees, work anniversary paid time off, paid volunteer time off, and 12 paid holidays
• Comprehensive medical, dental, and vision plans with employer contributions to supercharge your Health Savings Account
• Up to a 4% match on 401(k) contributions
• Up to twelve weeks of fully paid parental leave
• An extensive Employee Assistance Program that provides personalized care options for your whole household
• Ample opportunity to learn, develop and grow with access to Linked In Learning, career and leadership development programs, job shadowing, a mentor program, and tuition reimbursement up to $5,250/year

Hybrid:
Employees who are able to perform the essential functions of their jobs away from an Elevations location may do so with the expectation that they are onsite at least fifty percent of the time over a two-week pay period.

Information Security Analyst:
Responsible for coordinating and completing projects under the Information Security Program, this role assesses current security situations, evaluates trends, and recommends security improvements to protect data and ensure regulatory compliance while maintaining technical knowledge through continuous learning.

• Assists with maintaining Logical Security Access to various applications and systems including documentation, updates and routine reviews.
• Conducts security awareness training campaigns and phishing simulations to raise awareness and promote a security-conscious culture within the organization.
• Identifies, assesses, and manages vulnerabilities throughout the organization's technology portfolio. This includes scanning, validation, and confirming that remediation was complete. Additionally, collaborates with various teams to prioritize & remediate based on risk levels and expected SLA's.
• Monitors the organization’s networks, systems, and applications for security incidents, unusual activity, or potential threats. This included analyzing and responding to events, and identifying patterns or anomalies,
• Manages identified risks from security assessments, audits and penetration tests. Provides recommended remedial actions and works with various departments to ensure that risks and vulnerabilities are handled in a timely manner.
• Manages and maintains incident response procedures and investigates and responds to security events. This includes documenting findings, recommending actions, contributing to post incident analysis, and participating in lessons learned.
• Supports preparation and delivery of security reports, KPI, and KRI metrics to management and key stakeholders.
• Contributes to the development and maintenance of security policies, standards, and guidelines.
• Stays Informed:
  Keeps up-to-date on news, events, and emerging vulnerabilities that could be potential threats to the organization.

Manager, Information Security

This role does not have supervisory responsibility.

• 2+ years of experience in information security or technology legal/compliance
• Experience monitoring and responding to security incidents, conducting vulnerability assessments and risk analysis, and managing security controls and access management
• The ability to write effectively, to explain information security in non-technical terms
• Possess the ability to effectively develop issue papers, memorandums, letters, work plans,…