Information Security Analyst in New Jersey

Responsibilities:

• Maintain and update security policies, controls, and procedures to reflect the firm’s security environment and technological changes.
• Respond to client security assessments, complete questionnaires, and support adjustments based on assessment outcomes.
• Track remediation actions, controls, and configuration changes to comply with security, legal, and audit standards, including those for SOC2, NIST 800-53, and ISO 27001.
• Support risk assessment activities by identifying IT risks and contribute to the management of the firm’s risk register and metrics.
• Help conduct internal audits of security practices, ensuring adherence to established policies and addressing findings with corrective measures.
• Provide support to external auditors by supplying necessary documentation and insights into the firm’s security practices.
• Assist in the development and delivery of security awareness training for employees and...