[Hiring] IT Security Analyst @Lifeway

Role Description

Lifeway is seeking an IT Security Analyst – GRC to guide day-to-day IT security governance, risk management, and compliance across the organization. You'll support third-party risk assessments, PCI compliance efforts, and internal risk reviews that help protect customer and ministry data.

• Lives out Lifeway’s mission and values, showing deep commitment to Kingdom work
• Limited travel: 2-4 times per year, typically overnight
• Support third-party risk management (TPRM) assessments and maintain the overall TPRM program
• Put security systems and programs in place to manage vulnerabilities
• Use industry frameworks to support governance and risk management across technology systems and processes
• Support IT compliance and risk assessments, including PCI scans, assessments, remediation, and Right to Be Forgotten requests
• Perform internal risk assessments to confirm Lifeway's practices are secure and meet PCI and other standards and regulations
• Contribute to developing and maintaining security policies, standards, and procedures
• Collaborate with internal and external departments on projects

Qualifications

• Bachelor's degree in computer science, cybersecurity, information technology, or a related field, required
• Master's degree in computer science, cybersecurity, information technology, or a related field, preferred
• Advanced graduate degree (PhD, etc.), not required
• Ability to travel to the Middle Tennessee area 2-4 times annually for team gatherings
• 3–5 years of IT risk, audit or compliance experience
• 1–2 years of experience performing assessments and/or audits, and identifying and addressing security control gaps, abnormal behavior patterns, and attack techniques
• Working knowledge of risk assessment and IT auditing methods
• Working knowledge of security frameworks (NIST-CSF, PCI-DSS, MITRE, OWASP)
• General knowledge of security domains and cloud security concepts, and familiarity with vulnerability assessment tools
• Actively involved in an evangelical Christian church

Requirements

• Security+ or CISSP certification, preferred
• CISA or CISM certification, preferred
• GIAC, CCSK, or CCSP certification, preferred

Benefits

• Comprehensive benefits plans including healthcare
• Vacation and sick time
• Holiday pay
• Care days
• 401(k) plan
• Maternity and parental leave
• Adoption assistance
• Mission trip time
• Equipment and resources for a productive workspace

Company Description

Lifeway has a strong Work from Anywhere (WFA) culture that is deeply focused on our mission and values. While headquartered in Nashville, TN, many of our positions are remote-eligible and have autonomy and flexibility with work hours. We believe building relationships and community is essential to how we work together, so Lifeway hosts all-team meetings several times per year and provides travel for key team gatherings for remote-based team members.