field_job_employment_type

field_job_occupational_field_parents_all

field_job_experience

job_organization_name

city

state

<h3>Job Description</h3>
Job Description
Hybrid position. Must live in the Indianapolis area.
Pay: $42.70/hour
In this role you will:
• Monitor and keep supervisor informed of status of information security and confidentiality conditions, including problem areas and recommended enhancement • Interface with user customers to understand their security needs and implement procedures to accommodate them including training and assessment • Assist with preparing for security audits (e.g. IRS, SSA, OCSE, FBI, SBOA) and remediating any findings; assist with creating and submitting reports relevant to security audits • Develop information security policies and standards for protection of information systems in compliance with state and federal requirements (e.g. IRS, SSA, OCSE, FBI, IOT) and guidelines (e.g. NIST SP 800-53) • Develop Standard Operating Procedures (SOP) for implementing security polices • Recommend appropriate security safeguards to be included during development of new information technology systems and legacy systems • Ensure maximum utilization of computer hardware and software features to secure automated systems and associated data • Develop and implement procedures for use of information security management software • Propose information security software enhancements • Perform periodic audits to assure security policies and standards are being followed and are effective • Develop recommendations for enhancements and generates reports where necessary • Keep abreast of new laws and changes affecting privacy standards, network security, cloud security, remote access, and physical security

Information Security Analyst

<h3>Job Description</h3>
Information Security Analyst
Country: United States of America
Your Journey Starts Here:
Santander is a global leader and innovator in the financial services industry. We believe that our employees are our greatest asset. Our focus is on fostering an enriching journey that empowers you to explore diverse career opportunities while nurturing your personal growth. We are committed to creating an environment where continuous learning and development are prioritized, enabling you to thrive both professionally and personally. Here, you will find ample opportunities to connect and collaborate with talented colleagues from around the world, sharing insights and driving innovation together. Join us at Santander, where you are supported by a culture of engagement and a commitment to your success.
An exciting journey awaits, if you are interested in exploring the possibilities We Want to Talk to You!
The Difference You Make: The Sr. Specialist, Information Security develops and implements information security standards and procedures. Provides tactical information security advice and examining the ramifications of new technologies. Ensures that all information systems are functional and secure. Plans, implements, upgrades, or monitors security measures for the protection of computer networks and information. In addition, the incumbent ensures security controls are in place that will safeguard digital files and vital electronic infrastructure. They may respond to computer security breaches and viruses.
<ul>
<li>Work closely with the New York Information Security and Santander US Identity and Access Services teams, and Business Owners to address any New York related IAM, PAM and Single Sign On (SSO) related issues including related regulatory requirements to mature the information security program.</li>
<li>The submission, approval, creation, and removal of accounts, entitlements, application roles, and business roles follows documented processes and procedures with clearly defined roles and responsibilities.</li>
<li>User Active Directory accounts unused for the previous 90 calendar days are reviewed for inactivity and, if confirmed to be inactive, disabled or removed.</li>
<li>All certified access rights are documented and current. Technology Platform Owners identifies users whose access rights violate the Separation of Duty (“SoD”) rules and are reviewed with managers/supervisors. Any exceptions are documented, risk-assessed, and formally approved within 30 business days of the management review.</li>
<li>The recertification process is performed as a formal review of information assets to confirm that all granted access rights entitlements remain valid, updated, and in full compliance with the Segregation of Duties (SoD) rules and Principle of Least Privilege.</li>
<li>All assets are onboarded to the Privileged Access Management System (PAMS) such as CyberArk and a process is defined to periodically review and recertify the accounts including groups they belong to.</li>
<li>Perform risk assessments and control gap analysis against Information Security Policies and Standards.</li>
<li>Support coordination for closure of gaps identified with Standard Requirements and Cyber Risk Assessment methodology.</li>
<li>Analysis, evidence gathering and documenting compliance with Federal Financial Institutions Examination Council (FFIEC) Cybersecurity Assessment Tool (CAT), NYDFS 23 NYCRR 500 cybersecurity or any other regulatory requirements.</li>
</ul>
 What You Bring: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Bachelor's Degree or equivalent work experience: Computer Science, Engineering or Information Technology Management, or equivalent field. 3+ Years Experience in information security, governance, IT audit, or risk management.
<ul>
<li>Experience in information security, identity and access management, privileged access management, Single Sign On, Azure Active Directory integration, Cloud Framework, IT audit, or information technology risk management</li>
<li>Knowledge of risk assessments and compliance of major regulatory initiatives (e.g., SOX, NYDFS)</li>
<li>Knowledge with cyber security and information security program management and frameworks (e.g., NIST CSF, ISO/IEC 27000, etc.)</li>
<li>Possess the ability to perform under pressure in a challenging environment.</li>
<li>A hunger to learn and take on challenging opportunities contributing to the success of information security team.</li>
<li>Possess a highly developed sense of personal accountability and follow-through with an ability to effectively prioritize multiple tasks and projects.</li>
<li>Proven ability to work in team environment.</li>
<li>Must take ownership, demonstrate a sense of urgency, and ensure accuracy and quality.</li>
<li>Bilingual in Spanish is a plus.</li>
</ul>
It Would Be Nice For You To Have: Established work history or equivalent demonstrated through a combination of work experience, training, military service, or education.
What Else You Need To Know:
The base pay range for this position is posted below and represents the annualized salary range. For hourly positions (non-exempt), the annual range is based on a 40-hour work week. The exact compensation may vary based on skills, experience, training, licensure and certifications and location.
Base Pay Range
Minimum:
$63,750.00 USD
Maximum:
$105,000.00 USD
Link to Santander Benefits:
Santander Benefits - 2025 Santander OnGoing/NH eGuide (foleon.com)
Risk Culture:
We embrace a strong risk culture and all of our professionals at all levels are expected to take a proactive and responsible approach toward risk management.
EEO Statement: 
At Santander, we value and respect differences in our workforce. We actively encourage everyone to apply. Santander is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, genetics, disability, age, veteran status or any other characteristic protected by law. Working Conditions:
Frequent minimal physical effort such as sitting, standing&nbsp;and walking is required for this role. Depending on location, occasional moving and lifting light equipment and/or furniture may be required. Employer Rights:
This job description does not list all of the job duties of the job. You may be asked by your supervisors or managers to perform other duties. You may be evaluated in part based upon your performance of the tasks listed in this job description. The employer has the right to revise this job description at any time. This job description is not a contract for employment and either you or the employer may terminate your employment at any time for any reason.
What To Do Next:
If this sounds like a role you are interested in, then please apply.
We are committed to providing an inclusive and accessible application process for all candidates. If you require any assistance or accommodation due to a disability or any other reason, please contact us at <a href="mailto:TAOps@santander.us" target="_blank">TAOps@santander.us</a> to discuss your needs.
 
Primary Location:&nbsp;New York, NY, Liberty Street
 
Other Locations:&nbsp;New York-New York
 
Organization:&nbsp;Banco Santander S.A.

<h3>Job Description</h3>
Job DescriptionRole : Information Security Analyst&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Location: Baton Rouge, Louisiana (Onsite) Duration: Longterm &nbsp; The scope of the proposed services will include the following: 1. &nbsp; &nbsp;Managing InfoSec Identity Management requests through the OTS Ivanti ticketing system 2. &nbsp; &nbsp;Active Directory account creation/deletion 3. &nbsp; &nbsp;Active Directory group membership management 4. &nbsp; &nbsp;Active directory file share permission management 5. &nbsp; &nbsp;Privileged account management &nbsp; Expertise and/or relevant experience in the following areas are mandatory: 1. &nbsp; &nbsp;Creating Active Directory users and groups. 2. &nbsp; &nbsp;Managing Active Directory users and groups 3. &nbsp; &nbsp;Understanding Active Directory enterprise wide deployments with multiple forests. 4. &nbsp; &nbsp;Managing and reviewing Microsoft Group Policy 5. &nbsp; &nbsp;Reviewing and processing information security requests. &nbsp; Expertise and/or relevant experience in the following areas are desirable but not mandatory: 1. &nbsp; &nbsp;Basic PowerShell Knowledge 2. &nbsp; &nbsp;Compliance, or audit experience 3. &nbsp; &nbsp;Experience managing Identity and Access Management (IAM) systems 4. &nbsp; &nbsp;Documenting, Testing, and Reviewing Information Security Controls. 5. &nbsp; &nbsp;Coordinating notifications, responses, and escalations for security events and incident management&nbsp;activities
Powered by JazzHR
Z42nr2UGjw

<h3>Job Description</h3>
Job DescriptionAppFolio is more than a company. We’re a community of dreamers, big thinkers, problem solvers, active listeners, and multipliers. At every opportunity, we set the pace while delivering innovation built to carry real estate into the future. One in which every experience feels effortless, yet meaningful. Where customers are empowered to take on any opportunity. We show up as one team, connected by our values to be a force for good. Because together, we have the power to create extraordinary outcomes for our customers, our communities, and ourselves.

The Information Security Analyst will focus on detecting, investigating, and responding to account takeovers (ATO) and other security threats across AppFolio’s platforms. This role involves identifying early indicators of compromise, triaging anomalous behavior, and analyzing attacker patterns related to credential misuse, session hijacking, and social engineering. The analyst will collaborate closely with the security, fraud, risk, and engineering teams to investigate suspicious activity, reduce time to containment, and protect user accounts from unauthorized access.

Your impact&nbsp;
<ul>
<li>Monitor security alerts and events to detect, investigate, and respond to cybersecurity incidents in real-time.</li>
<li>Investigate suspected Account Takeover (ATO) cases by analyzing authentication logs, user behavior, device intelligence, and related signals across AppFolio’s platform.</li>
<li>Identify, contain, and remediate fraudulent activity associated with compromised accounts to minimize customer impact.</li>
<li>Collaborate closely with customer support, fraud, and engineering teams to triage reports, escalate critical threats, and support impacted users.</li>
<li>Develop detection logic and alerting mechanisms that identify early indicators of ATO attempts using SIEM, identity platforms, and threat intelligence.</li>
<li>Perform root cause analysis of account compromises and contribute to process improvements to prevent recurrence.</li>
<li>Build and maintain investigation runbooks, documentation, and workflows specific to ATO detection, response, and customer notification.</li>
<li>Analyze emerging attack trends targeting SaaS authentication flows, such as phishing, session hijacking, and token theft, to evolve defenses.</li>
<li>Contribute to internal training and knowledge sharing around ATO patterns, prevention, and investigative techniques.</li>
</ul>
Qualifications&nbsp;
<ul>
<li>Bachelor’s degree in Information Security, Computer Science, or a related field, or equivalent practical experience.</li>
<li>3-5 years of experience in incident response, fraud investigation, or security operations with a focus on user or application security.</li>
<li>Hands-on experience with identity and access management systems (e.g., Okta, Duo, or similar).</li>
<li>Experience investigating ATOs or credential-based threats using logs from SIEM, IAM, and behavioral analytics platforms. Familiarity with common ATO tactics (e.g., credential stuffing, phishing, session reuse) and the MITRE ATT&amp;CK framework.</li>
<li>Strong analytical skills with the ability to recognize subtle patterns across disparate data sources. Proficiency in log analysis and querying tools (e.g., Splunk, Snowflake) to investigate activity and develop detections.</li>
<li>Ability to work independently and cross-functionally in a fast-paced, customer-impacting environment.</li>
<li>Excellent verbal and written communications skills</li>
</ul>

Nice to have
<ul>
<li>Experience building detections for ATO or fraud-related activity in a SaaS environment.</li>
<li>Familiarity with fraud signals such as IP reputation, device fingerprinting, geolocation anomalies, and behavioral risk scoring.</li>
<li>Cyber Security certifications such as GIAC GCIH, GCFA, GCFE, or AWS Security Specialty.</li>
<li>Understanding of OAuth, SAML, and session management in web and mobile applications.</li>
<li>Experience working with customer support, fraud, and legal teams in the context of user-impacting security events.</li>
</ul>

LocationFind out more about our locations by visiting our site.&nbsp;Compensation &amp; BenefitsThe compensation that we reasonably expect to pay for this role is: $94,400 - $118,000 base pay. The actual compensation for this role will be determined by a variety of factors, including but not limited to the candidate’s skills, education, experience, and internal equity.
Please note that compensation is just one aspect of a comprehensive Total Rewards package. The compensation range listed here does not include additional benefits or any discretionary bonuses you may be eligible for based on your role and/or employment type. Regular full-time employees are eligible for benefits - see here.
&nbsp;#LI-KB1

<h3>Job Description</h3>
Job DescriptionDescription:
Client Solution Architects (CSA) is currently seeking an Information Systems Security Analyst to support a program at Dahlgren, VA.
 
This role is contingent on award.
 
For nearly 50 years, CSA has delivered integrated technology and operational support services to meet the defense and federal sector's most complex enterprise needs. Working from operations centers and shipyards to training sites and program offices, CSA deploys experienced teams, innovative tools and proven processes to advance federal missions. 
 
How Role will make an impact:
<ul>
<li>Computer networking concepts, protocols, and security methodologies</li>
<li>System performance and availability monitoring</li>
<li>System software and organizational design standards (e.g., International Organization of Standardization (ISO) guidelines)</li>
<li>System life cycle management principles, including software security and usability</li>
<li>System/server administration and systems engineering concepts and methods</li>
<li>Server and client operating systems</li>
<li>Network security architecture concepts (topology, protocols, defense-indepth)</li>
<li>Network systems management principles and tools</li>
<li>Basic system administration, network, and operating system hardening techniques</li>
<li>Cloud computing service and deployment models (SaaS, IaaS, PaaS)</li>
<li>Cloud security strategy and architecture</li>
<li>Data security standards Personally Identifiable Information (PII), Payment Card Information (PCI), Protected Health Information (PHI))</li>
<li>Information security program management and project management principles</li>
<li>Resource management principles and techniques</li>
<li>Risk management processes (assessment and mitigation)</li>
<li>Secure acquisitions (e.g., Contracting duties, secure procurement, supply chain risk management)</li>
<li>Information technology (IT) supply chain security and risk management</li>
<li>Applicable laws, statutes, Presidential Directives, and guidelines related to cybersecurity and privacy</li>
<li>Organizational risk tolerance and risk management approach</li>
<li>Critical IT procurement requirements</li>
</ul>
 
Requirements:
What you’ll need to have to join our award-winning team:
<ul>
<li>Clearance: Must possess and maintain an active Secret Clearance </li>
<li>Four (4) years of experience in Cybersecurity.</li>
<li>Cybersecurity principles, threats, vulnerabilities, and risk management processes</li>
<li>Encryption algorithms (e.g., Internet Protocol Security (IPSEC), Advanced Encryption Standard (AES), General Routing Encapsulation (GRE), Internet Key Exchange (IKE), Message Digest 5 (MD5), Secure Hash Algorithm (SHA), Triple Data Encryption Algorithm (3DES))</li>
<li>Data backup and recovery concepts and tools</li>
<li>Disaster recovery and continuity of operations planning</li>
<li>Host/network access control mechanisms (e.g., Access Control Lists(ACLs))</li>
<li>Incident response and handling methodologies</li>
<li>Intrusion detection methodologies and techniques</li>
<li>Network traffic analysis methods</li>
<li>Network protocols (Transmission Control Protocol /Internet Protocol (TCP/IP), and Open System Interconnection (OSI) model</li>
<li>System and application security threats and vulnerabilities (e.g., buffer overflow, cross-site scripting, SQL injection)</li>
<li>Security architecture concepts and enterprise architecture reference models</li>
<li>National and international cybersecurity laws, regulations, policies, and ethics</li>
<li>Current and emerging threats and threat vectors</li>
<li>Enterprise incident response program, roles, and responsibilities</li>
<li>Penetration testing principles, tools, and techniques</li>
</ul>

Information Systems Security Analyst

<h3>Job Description</h3>
Job Description
Job Title: Information Security Analyst 
Status: Full Time
Location: Wood River, IL
Salary: $60,000 -$72,000
Benefit Information: <a href="https://www.1stmidamerica.org/docs/default-source/pdfs/benefits-summary-at-a-glance-2026.pdf" target="_blank">https://www.1stmidamerica.org/docs/default-source/pdfs/benefits-summary…</a>
About Us: 
1st MidAmerica is a trusted financial institution dedicated to providing exceptional service to our members. We pride ourselves on our commitment to the communities we serve and our focus on delivering an array of financial products for each step in their financial journey. We are currently seeking motivated and member-oriented individuals to join our team as an Information Security Analyst.
Job Summary: 
We are seeking an Information Security Analyst to assist in the development, implementation, monitoring and reporting of Information Security programs that protect member and organizational data. Ensures all appropriate regulatory and industry measures are taken to limit the risk of loss, theft, or unauthorized access to sensitive information. Promote security awareness programs throughout the credit union and supports compliance with all applicable federal and state regulations, including GLBA, FFIEC, and NCUA guidance. 
Key Responsibilities: 
- Threat and Vulnerability Management
- Security Monitoring and Incident Response
- Governance, Risk, and Compliance 
- Third Party/Vendor Risk Management 
- Conducts and promotes Security Awareness and Training 
- Business Continuity and Disaster Recovery Support
- Metrics and Reporting 
Qualifications: 
- 3-5 years experience directly related to information security, cybersecurity operations, or GRC (Governance, Risk, Compliance) 
- Bachelor’s degree in information technology, computer science, or related field. 
- Preferred certifications include CompTIA Security+, CySA+, SSCP, or GSEC. Advanced certifications such as CISM or CISSP are desirable.
Other Skills Preferred:
- Applied knowledge of GLBA, FFIEC, PCI DSS and NIST CSF frameworks.
- Active work in data loss prevention principles.
- Practical experience with risk assessment, data protection, and incident response. - Applied experience working with key third-party tools including CrowdStrike, NodeZero (Horizon3), Zscaler, KnowBe4, and NinjaOne Patch Management or comparable tools. - Ability to analyze system vulnerabilities, recommend controls, and drive remediation. - Proficiency in managing vendor risk assessments and understanding SOC 2 and PCI reports.
What We Offer: 
- Competitive salary and benefits. 
- Opportunities for career growth. 
- Supportive team environment. 
Schedule:
- Monday – Friday 8:00 AM – 5:00 PM 
Disclaimer: Must be able to work and travel to different credit union locations as determined by management.
1st MidAmerica is an Equal Opportunity Employer.

7,871 information-security-analyst Jobs