<p>Position Overview</p> <p>The Senior Information Security Analyst will work closely with the Enterprise Risk and Information Security Officer to provide timely and quality service to ensure compliance with Neighborhood's information security and risk policies and procedures. This position will be responsible for maintaining continuous monitoring of activities in support of the HiTrust control framework. The Senior Information Security Analyst is a member of an oversight function and supports information security, risk, and compliance governance across the enterprise.</p> <p>This role will assist in establishing information security requirements through the evaluation and understanding of business strategies and processes, developing applicable information security standards, executing control assessments to provide recommendations and develop requirements to remediate identified control gaps.</p> <p>Duties and Responsibilities -</p> <p>Responsibilities include, but are not limited to, the following:</p> <ul> <li>Responsible for the continuous monitoring program to assert the control environment is operating effectively </li><li>Develop Security Control Monitoring Test Plans and Schedule </li><li>Establish ownership of the controls, schedule regular assessments, and testing </li><li>Report control failures, gaps to stakeholders, provide recommendations and assist in developing solutions, and prepare management reports to track remediation activities </li><li>Develop and implement security policies, procedures and requirements, as well as collaborate with control owners to help implement and track enforcement of output </li><li>Perform technology risk and controls assessments such as account control assessments for systems, applications, infrastructure, and operational processes </li><li>Track corrective action plans for identified information security issues </li><li>Maintain inventory of exceptions to Information Security policy, standard, control, and configuration requirements </li><li>Manage priorities, perform tasks in an orderly fashion, and meet deadlines. Provide support to one or more projects simultaneously. Delivers projects on schedule. </li><li>Development of Key IT Metrics (KPIs and KRIs) and prepare reports for the Enterprise Risk and Information Security Officer and Senior Leadership, reporting on Information Security program achievements, successes, challenges and opportunities for improvement </li><li>Assist and train junior team members in the use of security tools, the preparation of security reports and the resolution of security issues </li><li>Analyze problems and alternative solutions and take appropriate timely action to achieve desired business results. Seeks unique and novel solutions to problems and considers impact of final resolution </li><li>Educate internal teams on information security best practices. </li><li>Assist in technical audits of IT Systems and controls. </li><li>Job Knowledge - Remains up-to-date in assigned area of responsibility possesses skills and knowledge to perform job effectively; efficiently and safely; acquires, understands, and applies technical and professional information and skills; understands and adheres to policies and procedures </li><li>Performs other duties as required. </li><li>Corporate Compliance Responsibility - As an essential function, responsible for complying with Neighborhood's Corporate Compliance Program, Standards of Business Conduct, applicable contracts, laws, rules and regulations, policies and procedures as it applies to individual job duties, the department, and the Company. This position must exercise due diligence to prevent, detect and report unlawful and/or unethical conduct by fellow co-workers, professional affiliates and/or agents. </li></ul> <p>Travel Expectations:</p> <ul> <li>Minimal travel </li></ul> <p>Neighborhood is an Affirmative Action and Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status or any other legally protected basis.</p>