[Hiring] IT Security Analyst @ARK Solutions

Role Description

The IT Security Analyst will be responsible for:

• Conducting security risk assessments, data classifications, and privacy reviews for systems and applications.
• Maintaining risk registers and corrective-action plans using Archer GRC and other tools.
• Applying and interpreting security requirements and compliance standards.
• Collaborating with system and data owners to document security plans and maintain compliance evidence.
• Reviewing third-party security documentation and identifying potential gaps.
• Coordinating audit and oversight activities, managing corrective actions, and documenting findings.
• Developing and communicating security policies, standards, and procedures.
• Supporting security awareness and training programs.
• Evaluating security risks for emerging technologies and artificial intelligence initiatives.
• Assisting with security planning for continuity, incident response, and disaster recovery.
• Preparing executive and management reports on governance workload and compliance status.
• Providing security guidance to project teams and stakeholders.
• Participating in incident and post-incident governance activities.

Qualifications

• Knowledge of cybersecurity governance, risk management, and compliance practices.
• Familiarity with security frameworks and standards such as NIST 800-53, SEC530, and others.
• Ability to analyze technical and business information and recommend actions.
• Proficient in developing professional documentation and managing complex assignments.
• Strong communication skills with various stakeholders.
• Ability to handle sensitive information with discretion.

Requirements

• 5 years in cybersecurity, information security, IT security governance, or risk management.
• 3 years performing security risk assessments and compliance reviews.
• 4 years applying NIST security frameworks.
• 3 years conducting security control assessments and supporting IT audits.
• 3 years maintaining risk registers and tracking corrective actions.
• 3 years developing security documentation and executive summaries.
• Strong communication skills with technical teams, business owners, auditors, and leadership.
• 3 years managing multiple security assessments and compliance activities.