Information Security Analyst

Support information security governance, risk, compliance, and security operations for Hellmann Worldwide Logistics across the Americas (AMCS).

• Help develop, review, and enforce regional Information Security Standards (policies) for the Americas.
• Lead Governance, Risk, and Compliance (GRC) activities, including risk management, compliance reviews, and control validation.
• Identify, quantify, monitor, and report information security risks, and perform impact analysis using risk quantification controls in Jira
  .
• Perform security reviews of contracts and agreements, identify security-related legal implications and risks, and elevate concerns as needed.
• Support ISO 27001 and related framework activities, including framework assessments, governance reviews, and control validation.
• Review, update, and maintain regional security policies and supporting documentation to ensure policies remain current before expiration.
• Publish and maintain security policies and procedures in Share Point .
• Translate global security policies into regional Standard Operating Procedures (SOPs) aligned with regional and local laws and regulations.
• Monitor regional and local laws and regulations that affect information security.
• Coordinate vulnerability management, security scanning, and remediation tracking using tools such as Nessus
  , SAST
  , and DAST
  .
• Support penetration testing and red team / blue team / purple team activities, and drive remediation identified by global and regional security teams.
• Monitor security system health (for example: patch management, antivirus, endpoint protection) and report KPIs and project status.
• Initiate and monitor implementation of security safeguards in line with global standards and aligned to the global cybersecurity team.
• Validate security tooling outputs and support security control validation for production releases.
• Investigate, document, and report security incidents, including impact analysis and coordinated response support.
• Support maintenance of the Disaster Recovery Plan (DRP) and Business Continuity Management (BCM) framework.
• Act as backup to the Dev Sec Ops  / secure-delivery Security Analyst for secure-pipeline and production-release security coverage.
• Participate in production release readiness reviews to validate security requirements prior to release.
• Support integration of security controls into CI/CD pipelines and collaborate with development and Service Desk Ops teams on secure code deployment.
• Support SAST/DAST scanning and vulnerability remediation across the software delivery lifecycle.
• Serve as a bridge between Global Security Governance, the Global CISO organization, Regional IT, and Country IT teams to align activities with global standards.
• Support global security projects, share best practices, and transfer knowledge across global, regional, and local levels.
• Be a first-level interface for security-related customer inquiries and support Sales with security RFI/RFQ responses, customer security surveys, questionnaires, and audits.
• Collaborate with Network, Server, local and country IT teams, regional IT leadership, and global security teams.
• Initiate and coordinate security awareness and training activities focused on risks, attack patterns, and secure practices.
• Provide security guidance to regional and local teams, influence decisions, and elevate security risks appropriately.
• Perform other job-related assignments and fulfill responsibilities as required.

• Bachelor’s degree (B.S.) in Computer Science, Information Technology, Cybersecurity, or related field; or an equivalent combination of education and experience.
• Minimum 2 years of technical experience in Information Security or a related IT security discipline.
• Preferred experience with GRC frameworks including risk management, auditing, and compliance.
• Professional understanding of security standards, vulnerability management, and IT infrastructure.
• English required
  .
• Ability to read, analyze, and interpret complex documents and respond effectively to sensitive inquiries from managers, staff, and customers.

• Technologies: Jira, SharePoint, ISO 27001, Nessus, SAST, DAST, CI/CD, GDPR, CIS, NIST, EDR/NDR, firewalls, Microsoft Intune, Entra , Kali Linux, Python, Bash, Kanban.
• Certifications (welcome): CISSP or other Information Security certifications (not required).
• Knowledge of IT regulations (for example,
  GDPR
  ), ISO standards (for example,
  ISO 27001
  ), CIS, and NIST.
• Familiarity with vulnerability scanners (for…