<h3>Job Description</h3>
STRATEGIC STAFFING SOLUTIONS HAS AN OPENING!
This is a Contract Opportunity with our company that MUST be worked on a W2 Only. No C2C eligibility for this position. Visa Sponsorship is Available! The details are below.
“Beware of scams. S3 never asks for money during its onboarding process.”
 
Job Title: Information Security Analyst
Location: Chandler, AZ 85286
Onsite Work
Contract Length: 6+ Months
Pay: 45-48 an hr on W2
 
Overview
We are seeking an Information Security Analysts to support a Central Access Provisioning team during a transition from a manual to an automated Identity and Access Management (IAM) environment. These roles will also provide flexible support across IAM Operations teams to address capacity needs resulting from workforce attrition and evolving operational demands.
The ideal candidates will have hands-on experience with IAM tools, strong foundational knowledge of authentication standards, and the ability to operate effectively in a regulated, security-focused environment.
 
Key Responsibilities
<ul>
<li>Support Identity and Access Management (IAM) operations, including access provisioning and related security processes.</li>
<li>Participate in low- to moderately complex information security initiatives and identify opportunities for process improvement.</li>
<li>Review, analyze, and resolve basic to intermediate information security assignments requiring research, evaluation, and selection of appropriate solutions.</li>
<li>Assist with low- to medium-risk deliverables in alignment with established policies, procedures, and compliance requirements.</li>
<li>Develop and present recommendations to address security-related issues, exercising independent judgment within defined guidelines.</li>
<li>Provide timely and accurate information to internal stakeholders and client personnel related to information security analysis.</li>
<li>Collaborate with cross-functional teams and interact effectively with multiple levels of leadership.</li>
<li>Manage priorities, meet deadlines, and deliver high-quality results in a fast-paced environment.</li>
</ul>
 
Required Qualifications
<ul>
<li>Minimum of 2 years of experience in Information Security Analysis or a related field, or equivalent experience demonstrated through a combination of work experience, consulting, training, military service, or education.</li>
<li>Hands-on experience with IAM tools, such as:</li>
<li>SailPoint</li>
<li>Okta</li>
<li>CyberArk</li>
<li>Ping</li>
<li>Microsoft Entra ID (Azure AD)</li>
<li>Working knowledge of authentication and identity standards, including:</li>
<li>LDAP</li>
<li>SAML</li>
<li>OAuth</li>
<li>OpenID</li>
<li>SCIM</li>
<li>Familiarity with security and compliance frameworks, such as ISO, NIST, SOX, and PCI.</li>
<li>Strong organizational skills with the ability to multitask and prioritize competing requests.</li>
<li>Customer-service mindset with a demonstrated ability to respond to requests in a timely and professional manner.</li>
<li>Proficiency in Microsoft Office applications, including Word, Excel, Outlook, PowerPoint, Access, and Project.</li>
</ul>

Information Security Analyst

<h3>Job Description</h3>
WorkForce Unlimited is searching for a proactive Security Analyst to analyze vulnerabilities, optimize security tools, and help our client stay ahead of emerging threats.
 
Role Summary
The Security Analyst is responsible for independently managing third-party vulnerability data sources, executing scans using proprietary tools, and collaborating with IT teams to prioritize mitigation efforts. The role involves leveraging vulnerability management tools to generate metrics and reports that track progress and effectiveness. Additionally, the Security Analyst may contribute to reviewing project scopes to recommend security benchmarks, optimizing security tool alerts and policies, and integrating logs and large data sets into existing systems.
 
Role Responsibilities
<ul>
<li>Analyze vulnerabilities from various sources and input them into the vulnerability management tool using approved methods to ensure a complete overview of exposures.</li>
<li>Evaluate existing vulnerabilities to identify problem areas or opportunities for mass-mitigation.</li>
<li>Communicate with cross-functional teams to explain risks, opportunities, or required actions.</li>
<li>Escalate vulnerabilities that exceed defined time-to-resolve thresholds.</li>
<li>Configure vulnerability scanning tools and manage ongoing scan schedules.</li>
<li>Collect and maintain departmental metrics and KPIs.</li>
<li>Identify opportunities to apply AI technologies to improve vulnerability management processes.</li>
</ul>
 
Technical Qualifications
Strong familiarity and prior experience with:
<ul>
<li>HTTP, PKI, digital signatures/encryption, SMTP, DNS, CWEs, CVEs, and related security frameworks.</li>
<li>Vulnerability and security scanning tools such as Nessus, NMAP, ZAP, BurpSuite, Invicti, Nuclei, or similar.</li>
<li>Web application scanning and web application firewalls (WAFs).</li>
<li>Containers and associated security considerations.</li>
<li>CIS Benchmarks, STIGs, or other security hardening standards.</li>
</ul>
 
Additional desirable skills or experience:
<ul>
<li>Authentication and identity protocols: SAML, Kerberos, OAuth, OIDC, LDAP.</li>
<li>Scripting and automation using PowerShell and Python.</li>
<li>CI/CD tools such as Jenkins.</li>
<li>Splunk data onboarding (indexes, sourcetypes, data models, forwarders, apps, HECs).</li>
<li>Log ingestion and transport technologies: Azure Event Hubs, Kafka, syslog.</li>
<li>EDR/XDR tools such as Microsoft Sentinel, Microsoft Defender, CrowdStrike, or similar.</li>
</ul>
 
General Qualifications
<ul>
<li>Ability to conduct independent research, analyze data, and produce clear plans of action.</li>
<li>Strong systematic thinking and troubleshooting skills.</li>
<li>Ability to create clear and detailed documentation of designs and processes for diverse technical audiences.</li>
<li>Excellent communication skills, including the ability to clearly articulate requirements, priorities, and project status.</li>
</ul>
 
Education Requirements
<ul>
<li>Bachelor’s Degree in Information Technology or a related field is preferred but not mandatory.</li>
</ul>

<h3>Job Description</h3>
Who Is Elementum?
 
Elementum is the innovative startup that’s using AI Driven Workflows so that businesses can operate faster, smarter, and cheaper. Elementum’s unique IP allows its platform to run natively inside its customers’ own data clouds, enabling instant automation without any integrations or APIs. It’s also fully pre-integrated with all of the leading public and private AI/ML/LLMs, making it the only choice for secure, AI-driven automation. Industry leaders like Sanofi, Under Armour, and Snowflake are using AI Driven Workflows to transform their operations to increase productivity, delight customers, and capture market share.
 
Job Scope
 
Elementum is looking for an experienced Information Security Analyst to join our team. This role is a key driver of Governance, Risk, and Compliance (GRC) efforts, responsible for implementing and maintaining the organization’s security program, with a special focus on securing our AI-Driven Workflow platform and its native execution environment.
The Information Security Analyst will interface directly with various teams and support security compliance efforts across the company and its products. This role reports to the company’s Senior Audit Manager.
 
What You'll Do
 
<ul>
<li>Vendor Risk Management (VRM): Conduct thorough security assessments of third-party vendors, partners, and suppliers, particularly those providing AI/ML/LLM services or data cloud infrastructure, to identify potential risks and vulnerabilities.</li>
<li>Risk &amp; Compliance: Operate and enhance Elementum’s risk management processes by conducting comprehensive risk assessments of the Elementum platform's native data cloud deployment model and developing supporting documentation.</li>
<li>Collaborate closely with internal Engineering and Product teams to ensure the security and compliance of the AI-Driven Workflow features and the native execution environment.</li>
<li>Engage with internal and external stakeholders to assess the functionality of key information security controls related to vendor or in-house developed software/systems.</li>
<li>Analyze security reports, vulnerability scans, and other relevant data to make informed decisions and recommendations for improving the security posture of our platform.</li>
<li>Manage security issues and tasks assigned to vendors to closure, actively reducing associated security risks.</li>
<li>Complete detailed customer security and compliance questionnaires to offer assurance of Elementum's security posture regarding data cloud security, access control, and AI governance.</li>
<li>Identify improvement opportunities and provide strategic feedback to senior team members and management regarding the evolving security landscape in the AI and Data Cloud space.</li>
<li>Stay up-to-date with the latest security trends, vulnerabilities, and industry best practices related to LLM security, data cloud governance (e.g., Snowflake, Databricks, etc.), and data privacy regulations (GDPR, CCPA).</li>
<li>Assist in the creation and maintenance of documentation related to third-party security assessments and internal compliance processes.</li>
</ul>
 
You Should Have
 
<ul>
<li>2-3 years of experience in vendor risk, compliance, or security roles with hands-on experience in third-party security risk management.</li>
<li>Strong familiarity with ISO 27001 and SOC 2 (given the enterprise focus), and some familiarity with other relevant security frameworks such as NIST CSF &amp; 800-53, SOX, SOC1, HITRUST/HIPAA, GDPR, CCPA, GxP, etc.</li>
<li>Demonstrable knowledge of or direct experience working with Cloud security and governance (AWS, Azure, GCP) and data cloud environments (Snowflake, Databricks).</li>
<li>Bachelor's degree in an IT-related field, cyber security, or equivalent experience.</li>
<li>2+ years of project management experience, preferably involving security compliance initiatives.</li>
<li>Experience in external or internal security audit/compliance activities.</li>
<li>Strong knowledge of risk management methods, standards, processes, governance models, and industry-standard risk analysis approaches.</li>
<li>Excellent written and verbal communication skills with the ability to present complex GRC and technical security information clearly to executives and customers.</li>
<li>Ability to think both strategically and tactically in a high-energy, fast-paced environment.</li>
<li>Proven ability to take ownership, self-motivate, and deliver results in ambiguous environments.</li>
</ul>
 
Nice to Have
 
<ul>
<li>Certifications: CRISC, CISA, or equivalent.</li>
<li>Prior experience in a startup or high-growth company operating in the AI/ML or Data Cloud space.</li>
<li>Understanding of working in regulated environments such as GDPR, CCPA, or HIPAA.</li>
</ul>
 
Competitive Benefits
 
<ul>
<li>Medical, dental, and vision coverage</li>
<li>401k matching</li>
<li>Flexible vacation policy</li>
<li>Engage with (and give high-fives to) senior management regularly</li>
<li>Get in on the ground floor of a huge opportunity</li>
</ul>

<h3>Job Description</h3>
About DHIN
The Delaware Health Information Network (DHIN) is the nation’s first statewide health information&nbsp;exchange.&nbsp;Established by statute as a not-for-profit public instrumentality, DHIN’s statutory mission is to facilitate the design and implementation of an integrated, statewide health data system to support the information needs of consumers, health plans, policymakers, providers, purchasers, and researchers to improve the quality and efficiency of health care services in Delaware.&nbsp;DHIN thus serves as an aggregator of health data from disparate sources and provides services to make that data useful in a variety of settings and to a variety of users.&nbsp;DHIN has collected and aggregated clinical data since 2007, and additionally administers Delaware’s All Payer Claims Database, with claims data from 2013 forward.&nbsp;Participation in DHIN by the health care community of Delaware is nearly universal, with expansion beyond state borders now also established.&nbsp;&nbsp;&nbsp;
 
Position Overview
The Information Security Analyst will be an integral part of delivering DHIN’s services to the Delaware healthcare community and beyond.&nbsp;Specifically, this position will have a role in developing and implementing security measures to protect DHIN’s computer networks and systems.&nbsp;This position will also manage security incidents, vulnerability remediation and provide feedback into the Continuous Service Improvement process so that DHIN continues to improve in all aspects of securing the services offered by DHIN. 
 
DHIN continues to focus on implementing industry best practices as defined by the IT Infrastructure Library (ITIL).&nbsp;After joining DHIN, all staff are required to pass the ITIL v4 Foundations certification exam. This position is required to understand both the standard and DHIN specific ITIL v4 Information Security Management and Risk Management practices.&nbsp;
 
In addition, DHIN dedicates itself to maintaining a high-level of security for all the organization’s data.&nbsp;DHIN will obtain and maintain HITRUST certification to demonstrate this dedication. This position will participate in that ongoing certification effort.
 
While delivering services, all DHIN staff interact with Delaware healthcare community stakeholders.&nbsp;The successful candidate should be able to communicate concepts clearly, concisely, and professionally to a variety of audiences.
 
DHIN’s main office is located in Dover, DE. While this position will have the flexibility to work remotely, some in-office work is required. 
 
Duties and Responsibilities
<ul>
<li>Develop and maintain in-depth knowledge of the HITRUST CSF, HIPAA/HITECH Privacy and Security Rules, and all other applicable laws, regulations, and contractual requirements affecting DHIN’s privacy and security practices.</li>
<li>Collaborate with Information Security Management and DHIN leadership to recommend policy updates that strengthen DHIN’s commitment to privacy and security.</li>
<li>Identify endpoint, system, and software vulnerabilities, risks, and threats; recommend and implement remediation actions.</li>
<li>Monitor, triage, investigate, report, and recommend remediation for potential, emerging, and active security threats or incidents.</li>
<li>Participate in regular security risk assessments.</li>
<li>Evaluate software products and services to identify risks and recommend mitigation strategies for both internal and third-party technologies.</li>
<li>Work with staff to assess security risks in current and proposed projects.</li>
<li>Participate in system testing prior to production deployment to identify and resolve security-related issues.</li>
<li>Assist system owners and business teams in defining and applying appropriate security controls and permissions.</li>
<li>Investigate suspicious activities, correlate and validate alerts, coordinate response activities with management, and document all findings.</li>
<li>Implement approved changes and improvements to the security infrastructure, including patches, updates, reports, and alert tuning.</li>
<li>Monitor and report on compliance with information security policies and procedures.</li>
<li>Maintain required security documentation.</li>
<li>Conduct regular security awareness training and phishing simulations; analyze outcomes and recommend corrective actions.</li>
<li>Collaborate with management and vendors to recommend, implement, and improve information security and risk management best practices.</li>
<li>Develop, implement, and report on automated metrics for proactive monitoring of information security functions.</li>
<li>Actively contribute to continuous improvement of security controls and practices.</li>
<li>Follow and promote industry best practices related to security and data protection.</li>
<li>Collaborate with external Information Security partners providing managed security services, endpoint management, and security tooling.</li>
<li>Support auditors and assessors by providing required evidence and developing documentation demonstrating compliance with DHIN policies and procedures.</li>
<li>Complete project-related tasks on time and within budget.</li>
<li>Present security information to the workforce and management.</li>
<li>Assist workforce members with security-related questions and issues.</li>
</ul>
 
Qualifications
<ul>
<li>Bachelor’s degree in Computer Science, Information Technology, or a related field, preferred. Equivalent work experience will be considered.</li>
<li>5-7 years of experience in Information Security and/or Information Technology, including vulnerability management solutions, endpoint protection applications and processes (preferably Microsoft Defender), Intrusion Prevention Systems (IPS), firewalls, web/email filtering, Data Loss Prevention (DLP), Security Incident and Event Management (SIEM), Mobile Device Management (MDM), and virtualization platforms, phishing management/simulation applications, IT training platforms, and other information security tools.</li>
<li>5-7 years of experience developing, communicating, and presenting Information Security concepts to varying audiences.</li>
<li>Professional certifications in Information Security (e.g., Security+, GSEC, ISC2, CISSP, CCSP) are a plus.</li>
</ul>
 
Skills &amp; Abilities
<ul>
<li>Understanding of the fundamentals of IT systems, networks, and operations, including but not limited to cloud-based systems such as Amazon AWS, required.</li>
<li>Understanding of information security frameworks and compliance requirements, such as HITRUST CSF, CIS Top 20, HIPAA, and NIST CSF/800-53.</li>
<li>Able to discuss issues at technical and business levels with audiences of various backgrounds.</li>
<li>Ability to draw conclusions, define problems, and recommend solutions.</li>
<li>Ability to focus and manage time in a fast-paced, deadline-driven environment.</li>
<li>A security mindset able to identify, assess, quantify, and mitigate risks of all types.</li>
<li>Flexible and adaptable to changing circumstances.</li>
<li>Strong work ethic and ability to work well within a team. </li>
<li>Excellent verbal and written communication skills. </li>
<li>Organized, efficient, attentive to detail.</li>
</ul>
 
Compensation and Benefits
<ul>
<li>The base salary range for this role is $113,704 to $129,352, depending on experience and credentials. There is potential for an 8% performance incentive annually based on performance against established organizational and personal goals for each fiscal year. If the full incentive is earned, the total cash compensation for this position ranges from $122,800 to $139,700. </li>
<li>22 days of paid time off annually and 13 paid holidays.</li>
<li>Highmark medical plan with employer contributions of 80% of the in-network deductible contributed to an HSA account of employee’s choice.</li>
<li>Highmark Blue Edge Dental Flex dental plan with 100% of the cost of the employee covered by DHIN (employee bears cost of dependents).</li>
<li>Voluntary vision plan offerings through VSP.</li>
<li>Wellness programs through Blue365, Spring Health, and Well360.</li>
<li>SIMPLE IRA with company matching up to 4.5%.</li>
<li>Short- and long-term disability and AD&amp;D insurance covered 100% by DHIN.</li>
<li>$50k life insurance coverage with option to increase to $100k or $150k.</li>
<li>Elective benefit options such as identify theft protection insurance, Accident, Critical Illness, and enhanced life insurance are available through AFLAC.</li>
</ul>

<h3>Job Description</h3>
Job Description
About DHIN The Delaware Health Information Network (DHIN) is the nation’s first statewide health information exchange. Established by statute as a not-for-profit public instrumentality, DHIN’s statutory mission is to facilitate the design and implementation of an integrated, statewide health data system to support the information needs of consumers, health plans, policymakers, providers, purchasers, and researchers to improve the quality and efficiency of health care services in Delaware. DHIN thus serves as an aggregator of health data from disparate sources and provides services to make that data useful in a variety of settings and to a variety of users. DHIN has collected and aggregated clinical data since 2007, and additionally administers Delaware’s All Payer Claims Database, with claims data from 2013 forward. Participation in DHIN by the health care community of Delaware is nearly universal, with expansion beyond state borders now also established.
 Position Overview The Information Security Analyst will be an integral part of delivering DHIN’s services to the Delaware healthcare community and beyond. Specifically, this position will have a role in developing and implementing security measures to protect DHIN’s computer networks and systems. This position will also manage security incidents, vulnerability remediation and provide feedback into the Continuous Service Improvement process so that DHIN continues to improve in all aspects of securing the services offered by DHIN.
 DHIN continues to focus on implementing industry best practices as defined by the IT Infrastructure Library (ITIL). After joining DHIN, all staff are required to pass the ITIL v4 Foundations certification exam. This position is required to understand both the standard and DHIN specific ITIL v4 Information Security Management and Risk Management practices. In addition, DHIN dedicates itself to maintaining a high-level of security for all the organization’s data. DHIN will obtain and maintain HITRUST certification to demonstrate this dedication. This position will participate in that ongoing certification effort. While delivering services, all DHIN staff interact with Delaware healthcare community stakeholders. The successful candidate should be able to communicate concepts clearly, concisely, and professionally to a variety of audiences. DHIN’s main office is located in Dover, DE. While this position will have the flexibility to work remotely, some in-office work is required.
Duties and Responsibilities
<ul>
<li>Develop and maintain in-depth knowledge of the HITRUST CSF, HIPAA/HITECH Privacy and Security Rules, and all other applicable laws, regulations, and contractual requirements affecting DHIN’s privacy and security practices.</li>
<li>Collaborate with Information Security Management and DHIN leadership to recommend policy updates that strengthen DHIN’s commitment to privacy and security.</li>
<li>Identify endpoint, system, and software vulnerabilities, risks, and threats; recommend and implement remediation actions.</li>
<li>Monitor, triage, investigate, report, and recommend remediation for potential, emerging, and active security threats or incidents.</li>
<li>Participate in regular security risk assessments.</li>
<li>Evaluate software products and services to identify risks and recommend mitigation strategies for both internal and third-party technologies.</li>
<li>Work with staff to assess security risks in current and proposed projects.</li>
<li>Participate in system testing prior to production deployment to identify and resolve security-related issues.</li>
<li>Assist system owners and business teams in defining and applying appropriate security controls and permissions.</li>
<li>Investigate suspicious activities, correlate and validate alerts, coordinate response activities with management, and document all findings.</li>
<li>Implement approved changes and improvements to the security infrastructure, including patches, updates, reports, and alert tuning.</li>
<li>Monitor and report on compliance with information security policies and procedures.</li>
<li>Maintain required security documentation.</li>
<li>Conduct regular security awareness training and phishing simulations; analyze outcomes and recommend corrective actions.</li>
<li>Collaborate with management and vendors to recommend, implement, and improve information security and risk management best practices.</li>
<li>Develop, implement, and report on automated metrics for proactive monitoring of information security functions.</li>
<li>Actively contribute to continuous improvement of security controls and practices.</li>
<li>Follow and promote industry best practices related to security and data protection.</li>
<li>Collaborate with external Information Security partners providing managed security services, endpoint management, and security tooling.</li>
<li>Support auditors and assessors by providing required evidence and developing documentation demonstrating compliance with DHIN policies and procedures.</li>
<li>Complete project-related tasks on time and within budget.</li>
<li>Present security information to the workforce and management.</li>
<li>Assist workforce members with security-related questions and issues.</li>
</ul>
Qualifications
<ul>
<li>Bachelor’s degree in Computer Science, Information Technology, or a related field, preferred. Equivalent work experience will be considered.</li>
<li>5-7 years of experience in Information Security and/or Information Technology, including vulnerability management solutions, endpoint protection applications and processes (preferably Microsoft Defender), Intrusion Prevention Systems (IPS), firewalls, web/email filtering, Data Loss Prevention (DLP), Security Incident and Event Management (SIEM), Mobile Device Management (MDM), and virtualization platforms, phishing management/simulation applications, IT training platforms, and other information security tools.</li>
<li>5-7 years of experience developing, communicating, and presenting Information Security concepts to varying audiences.</li>
<li>Professional certifications in Information Security (e.g., Security+, GSEC, ISC2, CISSP, CCSP) are a plus.</li>
</ul>
Skills &amp; Abilities
<ul>
<li>Understanding of the fundamentals of IT systems, networks, and operations, including but not limited to cloud-based systems such as Amazon AWS, required.</li>
<li>Understanding of information security frameworks and compliance requirements, such as HITRUST CSF, CIS Top 20, HIPAA, and NIST CSF/800-53.</li>
<li>Able to discuss issues at technical and business levels with audiences of various backgrounds.</li>
<li>Ability to draw conclusions, define problems, and recommend solutions.</li>
<li>Ability to focus and manage time in a fast-paced, deadline-driven environment.</li>
<li>A security mindset able to identify, assess, quantify, and mitigate risks of all types.</li>
<li>Flexible and adaptable to changing circumstances.</li>
<li>Strong work ethic and ability to work well within a team.</li>
<li>Excellent verbal and written communication skills.</li>
<li>Organized, efficient, attentive to detail.</li>
</ul>
Compensation and Benefits
<ul>
<li>The base salary range for this role is $113,704 to $129,352, depending on experience and credentials. There is potential for an 8% performance incentive annually based on performance against established organizational and personal goals for each fiscal year. If the full incentive is earned, the total cash compensation for this position ranges from $122,800 to $139,700.</li>
<li>22 days of paid time off annually and 13 paid holidays.</li>
<li>Highmark medical plan with employer contributions of 80% of the in-network deductible contributed to an HSA account of employee’s choice.</li>
<li>Highmark Blue Edge Dental Flex dental plan with 100% of the cost of the employee covered by DHIN (employee bears cost of dependents).</li>
<li>Voluntary vision plan offerings through VSP.</li>
<li>Wellness programs through Blue365, Spring Health, and Well360.</li>
<li>SIMPLE IRA with company matching up to 4.5%.</li>
<li>Short- and long-term disability and AD&amp;D insurance covered 100% by DHIN.</li>
<li>$50k life insurance coverage with option to increase to $100k or $150k.</li>
<li>Elective benefit options such as identify theft protection insurance, Accident, Critical Illness, and enhanced life insurance are available through AFLAC.</li>
</ul>
Company DescriptionThe Delaware Health Information Network (DHIN) is the nation’s first statewide health information exchange. Established by statute as a not-for-profit public instrumentality, DHIN’s statutory mission is to facilitate the design and implementation of an integrated, statewide health data system to support the information needs of consumers, health plans, policymakers, providers, purchasers, and researchers to improve the quality and efficiency of health care services in Delaware. DHIN thus serves as an aggregator of health data from disparate sources and provides services to make that data useful in a variety of settings and to a variety of users. DHIN has collected and aggregated clinical data since 2007, and additionally administers Delaware’s All Payer Claims Database, with claims data from 2013 forward. Participation in DHIN by the health care community of Delaware is nearly universal, with expansion beyond state borders now also established. 
<h3>Company Description</h3>
The Delaware Health Information Network (DHIN) is the nation’s first statewide health information exchange. Established by statute as a not-for-profit public instrumentality, DHIN’s statutory mission is to facilitate the design and implementation of an integrated, statewide health data system to support the information needs of consumers, health plans, policymakers, providers, purchasers, and researchers to improve the quality and efficiency of health care services in Delaware. DHIN thus serves as an aggregator of health data from disparate sources and provides services to make that data useful in a variety of settings and to a variety of users. DHIN has collected and aggregated clinical data since 2007, and additionally administers Delaware’s All Payer Claims Database, with claims data from 2013 forward. Participation in DHIN by the health care community of Delaware is nearly universal, with expansion beyond state borders now also established.

<h3>Job Description</h3>
Job Description
Are you ready to apply cutting-edge technologies to solve real world problems? Do you thrive in an environment where people leverage technology and processes to build innovative and sustainable solutions? You might just be a perfect fit for the CDO team. Since 1995, CDO Technologies has delivered the best solutions for unique business problems in the commercial and federal sectors ranging from Asset Management to IT Services. CDO employees demonstrate integrity, embrace teamwork, and embody a Can Do attitude in the delivery of superior customer service.
Position Summary:
This position will be responsible for all aspects of informational security, at times focused on accreditation. Responsibilities include, but are not limited to participating in engineering and building enterprise solutions, architectural reviews, and assisting with the evaluation of proposed technical solutions for our customers.
This is a temporary, 6 month position, from January 1st, 2026, to June 30, 2026, with possibility of extension.
Job Responsibilities:
<ul>
<li>Develop and sustain RMF A&amp;A packages to maintain Authorization to Operate (ATO)</li>
<li>Develop, complete, and process System Categorization Document and System Security Plans</li>
<li>Validate and upload RMF documentation into the Enterprise Mission Assurance Support Service (eMASS)</li>
<li>Assemble and coordinate system Plans and Procedures from the iAssure templates for all RMF families</li>
<li>Process and submit Plans of Action and Milestones (POA&amp;Ms)</li>
<li>Ensure DISA STIGs/SRGs are implemented and enforced</li>
<li>Perform Risk Analysis and Vulnerability Assessments</li>
<li>Perform annual security reviews in accordance with FISMA reporting</li>
<li>Review PPS, HW/SW listings, NSS checklists (all A&amp;A artifacts)</li>
</ul>

Minimum Requirements:
<ul>
<li>An active Secret Security Clearance is required</li>
<li>Must hold a DoD 8570.01 IAT Level 2 certification, such as Security+ CE</li>
<li>2+ years of experience in support of cybersecurity for the purposes of RMF</li>
<li>Experience developing and sustaining RMF A&amp;A packages</li>
</ul>

Preferred Qualifications &amp; Experience:
<ul>
<li>Hands-on experience with associated DoD CyberSecurity tools (i.e., ACAS/NESSUS, STIGs, Cloud SRGs)</li>
<li>Working knowledge of Cloud-based technologies and accreditations of various IaaS, PaaS, SaaS, etc.</li>
<li>Experience in DevSecOps and conducting end-to-end security testing of Applications (Web, Mobile, other APIs)</li>
<li>Experience with industry standard tools such as Fortify, Checkmarx, and practices for code reviews, static/dynamic code analysis, and vulnerability assessments</li>
<li>Knowledge of OWASP Top 10, SANS 25, NVD, CVE, etc.</li>
<li>Experience with code languages and frameworks (Java, C+, Apex, etc.)</li>
<li>End-to-end experience with attaining system ATOs</li>
</ul>
What can a CDO employee expect?
At CDO Technologies, we believe in taking care of our employees with a comprehensive benefits package. Our health and welfare benefits include two medical plan options along with a LiveHealth program to see a doctor online anytime day or night. CDO offers dental, vision, and a Flexible Spending Account for medical or childcare. Employees may also enroll in a 401(k) plan with their first paycheck. Full-time employees also receive company paid short- and long-term disability and life insurance. We also provide tuition reimbursement, professional development, and certification reimbursements. Finally, CDO also offers employees a generous leave program including paid holidays, vacation, and sick leave.
CDO is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender identity, sexual orientation, national origin, disability, or veteran status.

Information Security Analyst 2

<h3>Job Description</h3>
Job Description
Overall Responsibility:
This position is responsible for day-to-day support of the Ignite Retail Technology Security and Internal IT departments. to include the coordination and support of projects relating to system development and/or equipment. The analyst is responsible for monitoring security tools, responding to incidents, reviewing network scans, and implementing vulnerability mitigation for company assets. The analyst will support IT and security departments in maintaining robust and operational networking systems. This position is not work-from-home. The analyst is expected to be physically at the work location.
Responsibilities:
<ul>
<li>Support all aspects of the implementation, operation, and maintenance of information systems, including software applications, networking devices, phone systems, and end-user computers</li>
<li>Support cloud-based hosted systems such as Azure and AWS</li>
<li>Provide help desk and technical service assistance to on-site and remote employees</li>
<li>Maintain our PCI network in compliance by performing:</li>
<li>
<ul>
<li>Patch management</li>
<li>Log monitoring</li>
<li>Vulnerability mitigation</li>
<li>Risk Assessments</li>
<li>Penetration testing</li>
<li>User Access Management</li>
<li>Workstation maintenance</li>
</ul>
</li>
<li>Administer and maintain our Zoom Contact Center phone system</li>
<li>Conduct risk assessments on internal and external networks or systems</li>
<li>Support the technical lead or project manager on new system deployments</li>
<li>Bring consistency to project execution and system life cycle management</li>
<li>Responsible for the video surveillance monitoring, backup, and alert monitoring of the facilities</li>
<li>Other tasks assigned by the Director of Cybersecurity or IT Manager</li>
</ul>
Skills &amp; Attributes:
<ul>
<li>Advance knowledge of Linux operating system is a must</li>
<li>Familiarity with information technology controls, data, and cyber security; computer hardware and software system</li>
<li>Intermediate knowledge of Windows and Mac OS operating systems</li>
<li>Experience leading and/or managing IT projects is a plus</li>
<li>Understanding and experience with managing data networks and telecommunications systems</li>
<li>Understanding of IT infrastructure, including systems, personal computing, help desk, servers, and printers</li>
<li>Ability to effectively communicate technology, infrastructure, and project requirements with all stakeholder levels</li>
<li>Accurate oral and written communication is a must</li>
<li>Ability to lift over 50 pounds</li>
</ul>
Education:&nbsp;
<ul>
<li>Associate degree or equivalent experience</li>
<li>IT or security certifications are a plus</li>
</ul>
Company DescriptionAbout Ignite Retail Technology: Ignite Retail Technology is a locally owned and operated company based out of Twin Falls, Idaho. Over the past 23 years, our business has grown to be a national leader in developing and managing customer rewards programs across the country. We build business solutions that make retail operators smarter and more profitable while helping them anticipate and meet their customers' growing needs. With more than 21 years of experience, we're recognized as the market leader in building customer rewards programs that generate brand loyalty, build repeat store visits, and increase bottom-line sales. Ignite Retail Technology recognizes that businesses must be prepared to pivot to meet their customer base's changing needs to succeed in today's competitive retail environment. We are here to provide out retail clients with cutting-edge products and services they need to serve their customers. As a company, we have high expectations of each other and work as a cohesive team to provide excellent customer service and support to our clients. We are a family that cares for and supports each other. 
<h3>Company Description</h3>
About Ignite Retail Technology: \nIgnite Retail Technology is a locally owned and operated company based out of Twin Falls, Idaho. Over the past 23 years, our business has grown to be a national leader in developing and managing customer rewards programs across the country. We build business solutions that make retail operators smarter and more profitable while helping them anticipate and meet their customers' growing needs. With more than 21 years of experience, we're recognized as the market leader in building customer rewards programs that generate brand loyalty, build repeat store visits, and increase bottom-line sales. \n\n\n\nIgnite Retail Technology recognizes that businesses must be prepared to pivot to meet their customer base's changing needs to succeed in today's competitive retail environment. We are here to provide out retail clients with cutting-edge products and services they need to serve their customers. \n\n\n\nAs a company, we have high expectations of each other and work as a cohesive team to provide excellent customer service and support to our clients. We are a family that cares for and supports each other.

<h3>Job Description</h3>
Job Description
Mount Indie is seeking a highly skilled and experienced Cyber Accreditation Specialist with 5+ years of experience for Department of Defense (DoD) programs at the Naval Base Point Mugu located near Camarillo, CA. The Cyber Accreditation Specialist will be responsible for the development, coordination, and maintenance of cyber accreditation packages, primarily focusing on Risk Management Framework (RMF) artifacts, inheritance mapping, and Plan of Action &amp; Milestones (POA&amp;M) management supporting the Navy’s Authority To Operate initiatives. This role ensures compliance with relevant DoD and federal cybersecurity guidelines and contributes to our organization's mission support objectives by securing critical Navy information systems. 
Responsibilities
<ul>
<li>Cyber Accreditation Package Development: Develop and maintain RMF artifacts, including System Security Plans (SSP), generate &amp; control implementation evidence, inheritance maps, and POA&amp;Ms</li>
<li>Coordination and Compliance: Coordinate with Authorizing Officials (AO) and Information System Security Managers (ISSM) to define an Authority to Operate (ATO) plan, develop an interim risk acceptance strategy, and manage control inheritance from enterprise services and range systems</li>
<li>Reference Compliance: Ensure that all activities and documentation are compliant with the latest DoD and federal cybersecurity standards, such as:</li>
<li>DoDI 8510.01 Risk Management Framework (RMF)</li>
<li>NIST SP 800-53 Rev. 5</li>
<li>NIST SP 800-171 (CUI)</li>
<li>DoD Zero Trust Reference Architecture</li>
<li>DoD Cloud Security Requirements Guide (SRG) / FedRAMP baselines (aligned to IL5 unless otherwise directed)</li>
</ul>
Qualifications
<ul>
<li>5+ years of experience in cybersecurity, specifically in the development and coordination of cyber accreditation packages</li>
<li>BS or BA degree in Cybersecurity, Information Technology, or a related field. An additional 6 years of relevant work experience may be substituted for a bachelor's degree, or 4 additional years of work experience with a relevant associate degree.</li>
<li>Active Secret Clearance</li>
<li>Demonstrated experience with RMF, SSP development, and POA&amp;M management</li>
<li>Familiarity with DoD and federal cybersecurity guidelines, including DoDI 8510.01, NIST SP 800-53 Rev. 5, NIST SP 800-171, DoD Zero Trust Reference Architecture, and DoD Cloud SRG/FedRAMP baselines</li>
<li>Strong analytical and problem-solving skills</li>
<li>Ability to effectively coordinate and communicate with various stakeholders, including AO, ISSM, and other cybersecurity professionals</li>
<li>Current Security+ Certificate</li>
<li>IAM Level 2 as per DoD Directive 8570.01; and experience working with the DIACAP/Risk Management Framework processes</li>
<li>Excellent communication and interpersonal skills—verbal, non-verbal, written, and listening—for staff, customer and organizational level communications, both formal and informal</li>
<li>Ability to work independently, self-starter</li>
<li>Working knowledge and use of Microsoft Office suite programs, MS Word, Excel, Access, and PowerPoint</li>
</ul>
﻿
Preferred Qualifications:
<ul>
<li>Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent certification</li>
<li>Experience with cloud security and FedRAMP compliance</li>
</ul>

<h3>Job Description</h3>
Job Description
Job Overview:
Resource will work as an Information Security Analyst responsible for auditing and monitoring systems containing confidential information. This position is also responsible for helping the organization manage its risks by monitoring the organization’s IT systems for inefficiencies, inaccuracies, mismanagement, etc. Tasks will include assisting with the configuration of data, application, network, and IAAM logs; assisting with log reporting tools; and monitoring systems for security problems. The position participates in all aspects of the technology audit and monitoring including the planning, control analysis, testing, issue development, and reporting phases. This position will also participate in all federal and state audits against DCS technology systems. Employee works in an Information Technology Division of a State Agency, the Department of Child Services (DCS-IT) under the guidance of the Security Manager.
The essential functions of this role are as follows: • Monitors and keep supervisor informed of status of information security and confidentiality conditions, including problem areas and recommended enhancement; • Interfaces with user customers to understand their security needs and implement procedures to accommodate them including training and assessment. • Assists with preparing for security audits (e.g. IRS, SSA, OCSE, FBI, SBOA) and remediating any findings; assists with creating and submitting reports relevant to security audits. • Develop information security policies and standards for protection of information systems in compliance with state and federal requirements (e.g. IRS, SSA, OCSE, FBI, IOT) and guidelines (e.g. NIST SP 800-53). • Develops Standard Operating Procedures (SOP) for implementing security polices; • Recommends appropriate security safeguards to be included during development of new information technology systems and legacy systems; • Ensures maximum utilization of computer hardware and software features to secure automated systems and associated data; • Develops and implements procedures for use of information security management software; • Proposes information security software enhancements; • Performs periodic audits to assure security policies and standards are being followed and are effective. • Develops recommendations for enhancements and generates reports where necessary; • Keeps abreast of new laws and changes affecting privacy standards, network security, cloud security, remote access, and physical security; • Mentors and provides guidance to new or other staff as needed; • Performs related duties as assigned. • Assist on other task as assigned. Thorough knowledge of information security management tools, policies, and standards of information security procedures; • Thorough knowledge of state and federal legislation and regulatory laws pertaining to information system security and privacy; • Thorough knowledge of software vulnerabilities, vulnerabilities scanning tools, and vulnerabilities remediation; • Familiarity with domain structures, user authentication, and digital signatures; • Ability to develop and maintain information security standards; • Ability to understand and apply complex computer logic to work; • Ability to work effectively with a wide range of information technologists, including systems administrators, technical support, application development, end users and management; • Experience in assessing security needs of teams and assist in their security training. • Ability to communicate effectively both orally and in writing; • Ability to be a team member as well as a team leader depending on the situation; • Degree in information security or technology preferred; • Security certification preferred (e.g. CISSP). • Network Admin experience preferred.
Company DescriptionClient is a leading platform and digital solution engineering company, uniquely positioned to deliver on the end-to-end transformation process from technology consulting, enterprise application &amp; platform provision, and full-scale implementation. 
<h3>Company Description</h3>
Client is a leading platform and digital solution engineering company, uniquely positioned to deliver on the end-to-end transformation process from technology consulting, enterprise application &amp; platform provision, and full-scale implementation.

<h3>Job Description</h3>
The Senior InfoSec GRC Analyst is responsible for driving the development, implementation, communication, and maintenance of technology policies, standards, and procedures that are aligned to industry standards and regulatory requirements. This role ensures that technology processes adhere to regulatory requirements, manage risks effectively, and establish strong governance practices. The position also develops and implements controls, monitors compliance, and supports risk management activities.
 
Responsibilities:
<ul>
<li>Lead the development and implementation of comprehensive cybersecurity and IT policies, standards, and guidelines.</li>
<li>Continuously evaluate and update cybersecurity and IT policies to ensure they remain current and effective.</li>
<li>Ensure policies comply with relevant laws, regulations, and industry standards (e.g., NIST, FFIEC, GLBA, NYDFS, SOX, PCI-DSS).</li>
<li>Collaborate with cross-functional teams, including IT, legal, compliance, and business stakeholders, to ensure cybersecurity policies align with organizational objectives.</li>
<li>Translate complex information and documentation into clear and simple concepts for end-users.</li>
<li>Provide specialized expertise to perform framework-oriented risk assessments, identify deficiencies, generate reports, and recommend actionable solutions to mitigate risks and strengthen overall security posture.</li>
<li>Stay informed about the latest cybersecurity threats, trends, and best practices.</li>
<li>Maintain accurate and up-to-date records of policy reviews, risk assessments, training activities, and incident responses.</li>
<li>Benchmark policies against industry standards and best practices.</li>
<li>Develop and implement governance frameworks for cybersecurity policy management.</li>
<li>Monitor key performance indicators, conduct gap analyses and risk assessments, and implement frameworks as needed. Test and monitor the effectiveness of controls.</li>
<li>Establish feedback loops and analyze metrics to continuously improve cybersecurity policies based on audit findings, incident reviews, and emerging threats.</li>
<li>Lead and support internal and external audits and assessments of cybersecurity policies and practices.</li>
<li>Ensure identified audit and assessment findings and actions are tracked to closure.</li>
<li>Maintain comprehensive documentation of all cybersecurity policies, procedures, and related activities.</li>
<li>Communicate policy requirements and updates to relevant stakeholders.</li>
<li>Identify opportunities for innovation and improvement in cybersecurity policies and practices. Propose mitigation strategies and verify the effectiveness of remediation plans.</li>
</ul>
 
Requirements:
<ul>
<li>Bachelor’s Degree in Information Security, Computer Science, Information Technology, or a related field (preferred).</li>
<li>Minimum of six (6)+ years’ experience working in Cybersecurity GRC, policy development, risk management, or a similar field.</li>
<li>Experience with GRC tools (e.g., Archer, ServiceNow, OneTrust).</li>
<li>Proficiency with data analysis and reporting tools (e.g., Excel, Power BI).</li>
<li>Relevant certifications such as CISM and/or CISA (highly desirable).</li>
<li>Strong knowledge of regulatory frameworks (NIST, FFIEC, GLBA, NYDFS, SOX, PCI-DSS).</li>
<li>Understanding of risk management concepts, control frameworks, and compliance auditing.</li>
<li>Ability to provide consultation and recommendations to management.</li>
<li>Strong communication skills with the ability to present effectively to both technical and non-technical audiences.</li>
</ul>

7,483 information-security-analyst Jobs