Remote Jobs RockRemote Jobs Rock

IT Security Officer

📅 Jul 2, 2024
Information SecurityRisk ManagementComplianceSecurity Policy Development
Apply Now

📜 Description

  • Monitor networks for security breaches and investigate incidents.
  • Maintain firewalls, encryption software, and other tools that protect sensitive information.
  • Identify vulnerabilities in computer and network systems and research emerging security trends.
  • Prepare reports on security metrics, attempted attacks, and breaches.
  • Develop security standards and best practices, and recommend enhancements to management or senior IT staff.
  • Help users install and learn security products and procedures, and support SOC 2 certifications.

🛠️ Requirements

  • Experience in risk, compliance and information security policy development.
  • Excellent organizational and communication skills (both oral and written).
  • Strong interpersonal skills and the ability to effectively communicate with a wide range of individuals and constituencies in a diverse community.
  • Knowledge of IT processes and controls and strong understanding of risk and control frameworks such as (CoBIT, ISO, NIST, ITIL, PCI).
  • General knowledge of information security regulatory requirements and standards such as ISO 27001/2
Full job description

Responsibilities

  • Monitor organization’s networks for security breaches and investigate when one occurs
  • Use and maintain software, such as firewalls and data encryption programs, to protect sensitive information
  • Check for vulnerabilities in computer and network systems
  • Research the latest information technology (IT) security trends
  • Prepare reports that document general metrics, attempted attacks, and security breaches
  • Develop security standards and best practices for their organization
  • Recommend security enhancements to management or senior IT staff
  • Help computer users when they need to install or learn about new security products and procedures
  • Help in SOC 2 Certifications

Requirements

Requirements and skills

  • Experience in risk, compliance and information security policy development.
  • Excellent organizational and communication skills (both oral and written).
  • Strong interpersonal skills and the ability to effectively communicate with a wide range of individuals and constituencies in a diverse community.
  • Knowledge of  IT processes and controls and strong understanding of risk and control frameworks such as (CoBIT, ISO, NIST, ITIL, PCI).
  • General knowledge of information security regulatory requirements and standards such as ISO 27001/2

Sigma Software

Cyber Security Analyst (US team)

🕒 yesterday
Sigma Software👥 1001 - 5000 employees🏢 Computer Software

Investigate malicious web traffic and persistent attacks, improve threat-detection mechanisms, and support customers with timely incident response and clear reporting.

CybersecurityThreat DetectionWeb Traffic AnalysisData Analysis

Monitora e fortalece a segurança da informação, identificando vulnerabilidades, tratando incidentes e aprimorando controles, processos e práticas de segurança em colaboração com equipes e áreas da empresa.

Segurança Da InformaçãoCibersegurançaEDRSIEM
Second-Front-Systems

Information Systems Security Officer (ISSO)

🕒 4 days ago
Second-Front-Systems🏢 Software🤝 B2B

Execute DoD RMF authorization and continuous monitoring for IL4/IL5 systems, maintaining assessor-ready eMASS packages and translating security requirements into actionable guidance for cloud engineering teams.

Dod Risk Management Framework (rmf)EmassNIST 800-53NIST 800-37
Harvard University

Information Security Analyst

🕒 6 days ago
Harvard University👥 10,000+ employees🏢 Higher Education

Manage vulnerability, endpoint, cloud, vendor-risk, and data-loss prevention security operations, advising technical teams on remediation and building reports and automation to strengthen Harvard Medical School’s infrastructure.

Vulnerability ManagementCVECVSSEndpoint Security

Investigate Microsoft Defender alerts and endpoint threats, troubleshoot protection and sensor issues, support incident containment and remediation, and maintain security compliance across enterprise environments.

Microsoft Defender For EndpointSecurity Alert InvestigationEndpoint ProtectionThreat Analysis

Trusted by Remote Workers