Senior Cybersecurity Analyst

At Armanino, you determine your career path. This means it's possible to pursue challenges you are passionate about, in industries you care about.

Armanino is proud to be Among the top 20 Largest Accounting and Consulting Firms in the Nation and one of the Best Places to Work. We have a community of resources that are ready and willing to support your ideas, build your skills and expand your professional network. We want you to integrate all aspects of your life with your career. At Armanino, we know you don't check-out of life when you check-in t's why we've created a unique work environment where your passions, work, and family & friends can overlap.

We want to help you achieve growth by giving you access to a network of smart and supportive people, willing to listen to your ideas.

Job Responsibilities

* Own and drive ISO 27001 certification efforts, including risk registers, nonconformities, and corrective actions

* Support SOC 1 Type 2 audit readiness and remediation initiatives

* Lead Quality Management System (QMS) audits

* Support Data Loss Prevention (DLP) initiatives and assessments

* Assist with Vendor Security Management Program activities

* Evaluate and monitor security technologies (e.g., firewalls, endpoint protection, IDS, VPN, MFA)

* Validate system configurations for compliance with security standards

* Monitor server logs, network traffic, and security alerts

* Analyze findings and recommend remediation actions

* Assess and implement security patches, upgrades, or reconfigurations

* Support Windows infrastructure environments (e.g., Active Directory, Group Policy)

* Apply cloud security best practices across enterprise systems

* Maintain awareness of privacy and security frameworks (e.g., ISO 27701)

* Mentor junior cybersecurity staff and collaborate with senior team members

* Independently manage compliance projects and initiatives

* Report project status and compliance progress to leadership

Requirements

* Bachelor's degree in Computer Information Systems, Cybersecurity, or related field or equivalent work experience

* Minimum of 5 years of experience in cybersecurity, information security, or IT systems

* Certified ISO/IEC 27001:2022 Lead Auditor (BSO Lead Auditor) certification

* CISSP or equivalent information security certification

* Proven hands‑on experience driving ISO 27001 compliance initiatives

Preferred Qualifications

* Experience architecting or implementing ISO 27001 programs

* Familiarity with SOC 1 or other compliance audits

* Experience with ISO 27701 or privacy frameworks

* Knowledge of vendor security risk assessments

* Experience with compliance documentation and audits

* Familiarity with security technologies (e.g., MFA, VPN, DLP, IDS)

* Windows infrastructure and networking expertise

* Cloud security platform experience

* AI Management Systems (e.g., ISO 42001)

* Strong project management or audit coordination experience

"Armanino" is the brand name under which Armanino LLP and Armanino Advisory LLC, independently owned entities, provide professional services in an alternative practice structure in accordance with law, regulations, and professional standards. Armanino LLP is a licensed independent CPA firm that provides attest services, and Armanino Advisory LLC and its subsidiary entities provide tax, advisory, and business consulting services. Armanino Advisory LLC and its subsidiary entities are not licensed CPA firms.

Armanino provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Armanino complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Armanino expressly prohibits any form of workplace harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic…