<h3>Job Description</h3>
Job DescriptionSalary: 
Title: Information Security Analyst Location: CA Start Date - End Date: 10/13/2025 - 04/17/2026 Job Description: Under general direction, this position: Analyzes information security practices to ensure alignment with industry standards and guidelines. Identifies, investigates, and resolves security breaches detected by security solutions. Contributes to the creation and maintenance of security policies, standards, guidelines, and procedures. Leads and delivers staff training on information security and breach prevention.
 What You Will Do: Staying current on information security trends, news and security standards, especially those related to the healthcare industry Participating in the development of security standards and best practices for the organization Participating in the evaluation, design and implementation of new information security solutions to protect the organization's computer networks from cyber attacks Assessing the efficacy of existing security measures and processes to ensure that these measures and processes meet Health Insurance Portability and Accountability Act (HIPAA) and Federal Information System Controls Audit Manual (FISCAM) security standards and making recommendations for improvement Recommending security enhancements to management and senior ITS staff Analyzing software and systems requirements and providing objective advice on the level of security risks and remediation options Monitoring computer networks for security issues in order to reduce the risk of security incidents Leading investigation of security breaches and other cyber security incidents in collaboration with the Information Security Manager and the infrastructure team Documenting security breaches and assessing the damage caused Collaborating with the infrastructure team to ensure security measures and software to protect systems and information infrastructure, including firewalls and data encryption programs, are up to date Conducting system vulnerability audits and assessments on a proactive basis and collaborating with the infrastructure team to perform tests and uncover network vulnerabilities Managing efforts with vendors on annual security audit, including pen testing Assisting with developing and documenting preventive measures to ensure system security Staying informed of best practices and new developments in the field, analyzing applicability, making related recommendations, and developing written documentation of adopted practices Documenting computer security procedures, and tests Assisting with the development of policies, procedures, standards, and guidelines related to information security Developing information, training materials and presentations to educate the organization about information security management, data security, and prevention of breaches Assisting staff with the installation and utilization of new security products and procedures Conferring with staff regarding issues such as computer data access needs, security violations, and programming changes Monitoring systems and providing frequent training to staff regarding how to detect and avoid phishing attempts Reviewing any violations of security procedures and providing remedial training to staff, as needed Performs other duties as assigned
 You Will Be Successful If: In-depth knowledge of HIPAA and FISCAM security guidelines. Strong understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts. Proficiency with operating systems, virtualization, and security systems. High proficiency in Windows-based PC systems and Microsoft Office Suite. Working knowledge of penetration testing, patch management, and security frameworks (NIST, ISO 27001, COBIT). Familiarity with project management principles and customer service practices. Awareness of emerging security technologies such as AI, IoT, and blockchain. Strong analytical, problem-solving, and decision-making skills. Clear and concise writing and communication skills, with ability to present technical content to non-technical audiences. Experience creating training materials and leading staff training. Ability to manage multiple priorities, meet deadlines, and adapt to shifting needs. Leadership ability to facilitate meetings, resolve issues, and guide staff. Strong collaboration skills and diplomacy across teams and levels of the organization. Willingness to respond to after-hours information security incidents.
 What You Will Bring: Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field. 8 years of professional level information technology experience 3 years of experience performing information security functions in a health care environment (a Master?s degree may substitute for two years of the required experience); or an equivalent combination of education and experience may be qualifying Experience working in the health care industry Certification as a Certified Information Systems Security Professional (CISSP) issued by the International Information System Security Certification Consortium (ISC2), Certified Information Security Manager (CISM) issued by the Information Systems Audit and Control Association (ISACA), and/or Certified Ethical Hacker (CEH) issued by the Council of E-commerce Consultants (EC-Council), or equivalent

Information Security Analyst

<h3>Job Description</h3>
Job Description
Job Overview:
Resource will work as an Information Security Analyst responsible for auditing and monitoring systems containing confidential information. This position is also responsible for helping the organization manage its risks by monitoring the organization’s IT systems for inefficiencies, inaccuracies, mismanagement, etc. Tasks will include assisting with the configuration of data, application, network, and IAAM logs; assisting with log reporting tools; and monitoring systems for security problems. The position participates in all aspects of the technology audit and monitoring including the planning, control analysis, testing, issue development, and reporting phases. This position will also participate in all federal and state audits against DCS technology systems. Employee works in an Information Technology Division of a State Agency, the Department of Child Services (DCS-IT) under the guidance of the Security Manager.
&nbsp;
&nbsp;
The essential functions of this role are as follows: • Monitors and keep supervisor informed of status of information security and confidentiality conditions, including problem areas and recommended enhancement; • Interfaces with user customers to understand their security needs and implement procedures to accommodate them including training and assessment. • Assists with preparing for security audits (e.g. IRS, SSA, OCSE, FBI, SBOA) and remediating any findings; assists with creating and submitting reports relevant to security audits. • Develop information security policies and standards for protection of information systems in compliance with state and federal requirements (e.g. IRS, SSA, OCSE, FBI, IOT) and guidelines (e.g. NIST SP 800-53). • Develops Standard Operating Procedures (SOP) for implementing security polices; • Recommends appropriate security safeguards to be included during development of new information technology systems and legacy systems; • Ensures maximum utilization of computer hardware and software features to secure automated systems and associated data; • Develops and implements procedures for use of information security management software; • Proposes information security software enhancements; • Performs periodic audits to assure security policies and standards are being followed and are effective. • Develops recommendations for enhancements and generates reports where necessary; • Keeps abreast of new laws and changes affecting privacy standards, network security, cloud security, remote access, and physical security; • Mentors and provides guidance to new or other staff as needed; • Performs related duties as assigned. • Assist on other task as assigned. Thorough knowledge of information security management tools, policies, and standards of information security procedures; • Thorough knowledge of state and federal legislation and regulatory laws pertaining to information system security and privacy; • Thorough knowledge of software vulnerabilities, vulnerabilities scanning tools, and vulnerabilities remediation; • Familiarity with domain structures, user authentication, and digital signatures; • Ability to develop and maintain information security standards; • Ability to understand and apply complex computer logic to work; • Ability to work effectively with a wide range of information technologists, including systems administrators, technical support, application development, end users and management; • Experience in assessing security needs of teams and assist in their security training. • Ability to communicate effectively both orally and in writing; • Ability to be a team member as well as a team leader depending on the situation; • Degree in information security or technology preferred; • Security certification preferred (e.g. CISSP). • Network Admin experience preferred.
Company DescriptionClient is a leading platform and digital solution engineering company, uniquely positioned to deliver on the end-to-end transformation process from technology consulting, enterprise application &amp; platform provision, and full-scale implementation. 
<h3>Company Description</h3>
Client is a leading platform and digital solution engineering company, uniquely positioned to deliver on the end-to-end transformation process from technology consulting, enterprise application &amp; platform provision, and full-scale implementation.

<h3>Job Description</h3>
Job Description
Hybrid position. Must live in the Indianapolis area.
Pay: $42.70/hour
In this role you will:
• Monitor and keep supervisor informed of status of information security and confidentiality conditions, including problem areas and recommended enhancement • Interface with user customers to understand their security needs and implement procedures to accommodate them including training and assessment • Assist with preparing for security audits (e.g. IRS, SSA, OCSE, FBI, SBOA) and remediating any findings; assist with creating and submitting reports relevant to security audits • Develop information security policies and standards for protection of information systems in compliance with state and federal requirements (e.g. IRS, SSA, OCSE, FBI, IOT) and guidelines (e.g. NIST SP 800-53) • Develop Standard Operating Procedures (SOP) for implementing security polices • Recommend appropriate security safeguards to be included during development of new information technology systems and legacy systems • Ensure maximum utilization of computer hardware and software features to secure automated systems and associated data • Develop and implement procedures for use of information security management software • Propose information security software enhancements • Perform periodic audits to assure security policies and standards are being followed and are effective • Develop recommendations for enhancements and generates reports where necessary • Keep abreast of new laws and changes affecting privacy standards, network security, cloud security, remote access, and physical security

<h3>Job Description</h3>
Information Security Analyst

Country: United States of America

Your Journey Starts Here:
Santander is a global leader and innovator in the financial services industry. We believe that our employees are our greatest asset. Our focus is on fostering an enriching journey that empowers you to explore diverse career opportunities while nurturing your personal growth. We are committed to creating an environment where continuous learning and development are prioritized, enabling you to thrive both professionally and personally. Here, you will find ample opportunities to connect and collaborate with talented colleagues from around the world, sharing insights and driving innovation together. Join us at Santander, where you are supported by a culture of engagement and a commitment to your success.

An exciting journey awaits, if you are interested in exploring the possibilities We Want to Talk to You!


The Difference You Make: The Sr. Specialist, Information Security develops and implements information security standards and procedures. Provides tactical information security advice and examining the ramifications of new technologies. Ensures that all information systems are functional and secure. Plans, implements, upgrades, or monitors security measures for the protection of computer networks and information. In addition, the incumbent ensures security controls are in place that will safeguard digital files and vital electronic infrastructure. They may respond to computer security breaches and viruses.
<ul>
<li>Work closely with the New York Information Security and Santander US Identity and Access Services teams, and Business Owners to address any New York related IAM, PAM and Single Sign On (SSO) related issues including related regulatory requirements to mature the information security program.</li>
<li>The submission, approval, creation, and removal of accounts, entitlements, application roles, and business roles follows documented processes and procedures with clearly defined roles and responsibilities.</li>
<li>User Active Directory accounts unused for the previous 90 calendar days are reviewed for inactivity and, if confirmed to be inactive, disabled or removed.</li>
<li>All certified access rights are documented and current. Technology Platform Owners identifies users whose access rights violate the Separation of Duty (“SoD”) rules and are reviewed with managers/supervisors. Any exceptions are documented, risk-assessed, and formally approved within 30 business days of the management review.</li>
<li>The recertification process is performed as a formal review of information assets to confirm that all granted access rights entitlements remain valid, updated, and in full compliance with the Segregation of Duties (SoD) rules and Principle of Least Privilege.</li>
<li>All assets are onboarded to the Privileged Access Management System (PAMS) such as CyberArk and a process is defined to periodically review and recertify the accounts including groups they belong to.</li>
<li>Perform risk assessments and control gap analysis against Information Security Policies and Standards.</li>
<li>Support coordination for closure of gaps identified with Standard Requirements and Cyber Risk Assessment methodology.</li>
<li>Analysis, evidence gathering and documenting compliance with Federal Financial Institutions Examination Council (FFIEC) Cybersecurity Assessment Tool (CAT), NYDFS 23 NYCRR 500 cybersecurity or any other regulatory requirements.</li>
</ul>
 What You Bring: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Bachelor's Degree or equivalent work experience: Computer Science, Engineering or Information Technology Management, or equivalent field. 3+ Years Experience in information security, governance, IT audit, or risk management.
<ul>
<li>Experience in information security, identity and access management, privileged access management, Single Sign On, Azure Active Directory integration, Cloud Framework, IT audit, or information technology risk management</li>
<li>Knowledge of risk assessments and compliance of major regulatory initiatives (e.g., SOX, NYDFS)</li>
<li>Knowledge with cyber security and information security program management and frameworks (e.g., NIST CSF, ISO/IEC 27000, etc.)</li>
<li>Possess the ability to perform under pressure in a challenging environment.</li>
<li>A hunger to learn and take on challenging opportunities contributing to the success of information security team.</li>
<li>Possess a highly developed sense of personal accountability and follow-through with an ability to effectively prioritize multiple tasks and projects.</li>
<li>Proven ability to work in team environment.</li>
<li>Must take ownership, demonstrate a sense of urgency, and ensure accuracy and quality.</li>
<li>Bilingual in Spanish is a plus.</li>
</ul>

It Would Be Nice For You To Have: Established work history or equivalent demonstrated through a combination of work experience, training, military service, or education.

What Else You Need To Know:
The base pay range for this position is posted below and represents the annualized salary range. For hourly positions (non-exempt), the annual range is based on a 40-hour work week. The exact compensation may vary based on skills, experience, training, licensure and certifications and location.

Base Pay Range
Minimum:
$63,750.00 USD
Maximum:
$105,000.00 USD

Link to Santander Benefits:
Santander Benefits - 2025 Santander OnGoing/NH eGuide (foleon.com)

Risk Culture:
We embrace a strong risk culture and all of our professionals at all levels are expected to take a proactive and responsible approach toward risk management.

EEO Statement: 
At Santander, we value and respect differences in our workforce. We actively encourage everyone to apply. Santander is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, genetics, disability, age, veteran status or any other characteristic protected by law. Working Conditions:
Frequent minimal physical effort such as sitting, standing&nbsp;and walking is required for this role. Depending on location, occasional moving and lifting light equipment and/or furniture may be required. Employer Rights:
This job description does not list all of the job duties of the job. You may be asked by your supervisors or managers to perform other duties. You may be evaluated in part based upon your performance of the tasks listed in this job description. The employer has the right to revise this job description at any time. This job description is not a contract for employment and either you or the employer may terminate your employment at any time for any reason.

What To Do Next:
If this sounds like a role you are interested in, then please apply.

We are committed to providing an inclusive and accessible application process for all candidates. If you require any assistance or accommodation due to a disability or any other reason, please contact us at <a href="mailto:TAOps@santander.us" target="_blank">TAOps@santander.us</a> to discuss your needs.
 
Primary Location:&nbsp;New York, NY, Liberty Street
 
Other Locations:&nbsp;New York-New York
 
Organization:&nbsp;Banco Santander S.A.

<h3>Job Description</h3>
Job DescriptionRole : Information Security Analyst&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Location: Baton Rouge, Louisiana (Onsite) Duration: Longterm &nbsp; The scope of the proposed services will include the following: 1. &nbsp; &nbsp;Managing InfoSec Identity Management requests through the OTS Ivanti ticketing system 2. &nbsp; &nbsp;Active Directory account creation/deletion 3. &nbsp; &nbsp;Active Directory group membership management 4. &nbsp; &nbsp;Active directory file share permission management 5. &nbsp; &nbsp;Privileged account management &nbsp; Expertise and/or relevant experience in the following areas are mandatory: 1. &nbsp; &nbsp;Creating Active Directory users and groups. 2. &nbsp; &nbsp;Managing Active Directory users and groups 3. &nbsp; &nbsp;Understanding Active Directory enterprise wide deployments with multiple forests. 4. &nbsp; &nbsp;Managing and reviewing Microsoft Group Policy 5. &nbsp; &nbsp;Reviewing and processing information security requests. &nbsp; Expertise and/or relevant experience in the following areas are desirable but not mandatory: 1. &nbsp; &nbsp;Basic PowerShell Knowledge 2. &nbsp; &nbsp;Compliance, or audit experience 3. &nbsp; &nbsp;Experience managing Identity and Access Management (IAM) systems 4. &nbsp; &nbsp;Documenting, Testing, and Reviewing Information Security Controls. 5. &nbsp; &nbsp;Coordinating notifications, responses, and escalations for security events and incident management&nbsp;activities
Powered by JazzHR
Z42nr2UGjw

<h3>Job Description</h3>
Job DescriptionAppFolio is more than a company. We’re a community of dreamers, big thinkers, problem solvers, active listeners, and multipliers. At every opportunity, we set the pace while delivering innovation built to carry real estate into the future. One in which every experience feels effortless, yet meaningful. Where customers are empowered to take on any opportunity. We show up as one team, connected by our values to be a force for good. Because together, we have the power to create extraordinary outcomes for our customers, our communities, and ourselves.
&nbsp;
The Information Security Analyst will focus on detecting, investigating, and responding to account takeovers (ATO) and other security threats across AppFolio’s platforms. This role involves identifying early indicators of compromise, triaging anomalous behavior, and analyzing attacker patterns related to credential misuse, session hijacking, and social engineering. The analyst will collaborate closely with the security, fraud, risk, and engineering teams to investigate suspicious activity, reduce time to containment, and protect user accounts from unauthorized access.
&nbsp;
Your impact&nbsp;
<ul>
<li>Monitor security alerts and events to detect, investigate, and respond to cybersecurity incidents in real-time.</li>
<li>Investigate suspected Account Takeover (ATO) cases by analyzing authentication logs, user behavior, device intelligence, and related signals across AppFolio’s platform.</li>
<li>Identify, contain, and remediate fraudulent activity associated with compromised accounts to minimize customer impact.</li>
<li>Collaborate closely with customer support, fraud, and engineering teams to triage reports, escalate critical threats, and support impacted users.</li>
<li>Develop detection logic and alerting mechanisms that identify early indicators of ATO attempts using SIEM, identity platforms, and threat intelligence.</li>
<li>Perform root cause analysis of account compromises and contribute to process improvements to prevent recurrence.</li>
<li>Build and maintain investigation runbooks, documentation, and workflows specific to ATO detection, response, and customer notification.</li>
<li>Analyze emerging attack trends targeting SaaS authentication flows, such as phishing, session hijacking, and token theft, to evolve defenses.</li>
<li>Contribute to internal training and knowledge sharing around ATO patterns, prevention, and investigative techniques.</li>
</ul>
Qualifications&nbsp;
<ul>
<li>Bachelor’s degree in Information Security, Computer Science, or a related field, or equivalent practical experience.</li>
<li>3-5 years of experience in incident response, fraud investigation, or security operations with a focus on user or application security.</li>
<li>Hands-on experience with identity and access management systems (e.g., Okta, Duo, or similar).</li>
<li>Experience investigating ATOs or credential-based threats using logs from SIEM, IAM, and behavioral analytics platforms. Familiarity with common ATO tactics (e.g., credential stuffing, phishing, session reuse) and the MITRE ATT&amp;CK framework.</li>
<li>Strong analytical skills with the ability to recognize subtle patterns across disparate data sources. Proficiency in log analysis and querying tools (e.g., Splunk, Snowflake) to investigate activity and develop detections.</li>
<li>Ability to work independently and cross-functionally in a fast-paced, customer-impacting environment.</li>
<li>Excellent verbal and written communications skills</li>
</ul>
&nbsp;
Nice to have
<ul>
<li>Experience building detections for ATO or fraud-related activity in a SaaS environment.</li>
<li>Familiarity with fraud signals such as IP reputation, device fingerprinting, geolocation anomalies, and behavioral risk scoring.</li>
<li>Cyber Security certifications such as GIAC GCIH, GCFA, GCFE, or AWS Security Specialty.</li>
<li>Understanding of OAuth, SAML, and session management in web and mobile applications.</li>
<li>Experience working with customer support, fraud, and legal teams in the context of user-impacting security events.</li>
</ul>
&nbsp;
LocationFind out more about our locations by visiting our site.&nbsp;Compensation &amp; BenefitsThe compensation that we reasonably expect to pay for this role is: $94,400 - $118,000 base pay. The actual compensation for this role will be determined by a variety of factors, including but not limited to the candidate’s skills, education, experience, and internal equity.
Please note that compensation is just one aspect of a comprehensive Total Rewards package. The compensation range listed here does not include additional benefits or any discretionary bonuses you may be eligible for based on your role and/or employment type. Regular full-time employees are eligible for benefits - see here.
&nbsp;#LI-KB1

8,313 information-security-analyst Jobs