Information Security Analyst

We’re in search of an experienced Information Security Analyst with GRC (Governance, Risk, and Compliance),Audit & Compliance Support experience.

Information Security Analyst

Frankfort, KY (Hybrid Job)

Long-term Indefinite Contract

Hybrid: 3 Days onsite from Frankfort, KY, 2 days remote weekly.

• 4–7 years of experience in information security, GRC, oraudit/compliance support.
• Familiarity with standards such as NIST 800-53, ISO 27001, SOC 2, HIPAA,PCI-DSS, or GDPR.
• Experience participating in security audits and assembling evidencepackages.
• Coordinate with COT to schedule security scans (Penetration testing,vulnerability scans, etc.) and review, interpret and respond to findings.
• Knowledge and understanding of:
• Open Worldwide Application Security Project(OWASP) Top 10
• API Security (OAuth2, OpenID Connect)
• Container security
• Ability to review CI/CD pipelineconfigurations (i.e. Jenkins, Git Hub Actions, Azure Dev Ops) for securitycontrol compliance
• Ability to review secrets management practices (i.e. Hashi Corp Vault, AWS Secrets Manager, etc.) for policy compliance.
• Understanding of application layer threats and controls
• Knowledge of and experience with Agile processes

• Bachelor's degree, or equivalent combination of recent, relevant work experience.

Harvey Nash is a national, full-service talent management firm specializing in technology positions. Our company was founded with amission to serve as the talent partner of choice for the information technologyindustry.

Our company vision has led us to incredible growth and success in a relatively short period of time and continues to guide us today.

We are committed to operating with the highest possible standards of honesty,integrity, and a passionate commitment to our clients, consultants, and employees.

We are part of Nash Squared Group, a global professional services organization with over forty offices worldwide.