Security Analyst

This is a remote position.

Overview

This is a remote consulting opportunity supporting a government client.

Role Summary

The Security Analyst provides specialized expertise in information security, supporting enterprise initiatives by ensuring that IT projects are designed, assessed, and implemented in accordance with security and privacy requirements.

The role is responsible for conducting security assessments, defining security requirements, and developing documentation that supports secure, compliant, and resilient solutions aligned with industry standards.

Key Responsibilities

• Capture and assess current-state security solutions to establish baselines for new IT projects
  
• Conduct on-premise and cloud-based security assessments for proposed systems and initiatives
  
• Identify security risks, vulnerabilities, and gaps in system design and implementation
  
• Conduct privacy impact assessments for new IT projects in collaboration with business units
  
• Ensure alignment with relevant privacy legislation and regulatory requirements
  
• Apply industry standards such as NIST to assess and guide security practices
  
• Lead security requirements gathering activities for IT projects in collaboration with business analysts
  
• Develop and maintain enterprise security documentation including policies, standards, baselines, guidelines, and procedures
  
• Lead or support vulnerability assessments, penetration testing, and security audits for IT projects
  
• Participate in planning and design of business continuity and disaster recovery strategies
  
• Collaborate with project teams, IT operations, and business stakeholders to provide security guidance
  
• Conduct research into emerging security threats, tools, and technologies
  

Key Deliverables

• Security assessment reports and risk analyses
  
• Privacy impact assessments and compliance documentation
  
• Security requirements and control frameworks for IT projects
  
• Enterprise security policies, standards, and guidelines
  
• Vulnerability assessment and penetration testing results
  
• Business continuity and disaster recovery security inputs
  
• Security documentation maintained within the enterprise repository
  

Requirements