Senior Information Security Analyst

As a Senior Information Security Analyst, you will play a vital role in safeguarding our systems, data, and business operations from evolving cyber threats. In this position, you will assess security risks, design and implement effective security controls, and help ensure compliance with regulatory, contractual, and organizational requirements.

Beyond technical expertise, this role serves as a trusted advisor to business and technology teams across the organization. You will partner with stakeholders to identify opportunities for improvement, provide security guidance, and champion solutions that strengthen our overall security posture while enabling business success.

We are looking for a security professional who is curious, adaptable, and passionate about continuous improvement. Success in this role requires strong analytical and problem-solving skills, the ability to communicate complex security concepts to diverse audiences, and a collaborative mindset that drives results across cross-functional teams.

This is a fully onsite role in our West Des Moines, Iowa location

Governance, Risk, and Compliance

• Reviews cybersecurity rules and regulations and consults with internal customers to determine activities necessary for adherence with requirements
• Develops strategies to validate compliance with new and existing rules and regulations
• Develops and implements security standards and procedures to safeguard resources ensuring compliance with HIPAA, NIST, FedRAMP and/or HITRUST requirements
• Evaluates security risks balancing business drivers, best practices and external drivers
• Provides proactive solutions or recommendations through collaboration across business units
• Provides training to security team and internal customers on regulations and contractual security requirements.

Security Operations and Vulnerability Management

• Recommends and assists with evaluation of security tooling
• Supports vulnerability management activities. Validates creation, documentation, and completion of Plans of Action and Milestones (POA&Ms)

Business Continuity Planning/Disaster Recovery (BCP/DR)

• Leads and/or partners on computer security incident response efforts including but not limited to preparing executive summaries, recommending mitigation strategies, and tracking remediation efforts
• Facilitates BCP/DR planning for assigned systems including coordination of documentation and testing

Documentation and Reporting

• Leads the creation and ensures the ongoing maintenance of documentation for multiple systems including but not limited to risk assessments, security plans, and disaster recovery plans
• Validates compliance of documentation with government and industry standards
• Maintains accurate and up-to-date documentation of incidents, tickets, vulnerabilities, and compliance activities
• Prepares reports for management detailing the status of security incidents, audit findings, and risk assessments

Collaboration and Communication

• Owns and delivers tasks on projects for the security team and with internal customer projects. Ensures timely completion of deliverables
• Represents security on initiatives across Telligen. Works closely with internal customers to ensure implementation of security controls and best practices
• Stays current with industry trends, emerging threats, security technologies, and pertinent regulations
• Provides guidance and mentorship to other members of the security team
• Provides timely responses, uses professional communication, and approaches vulnerability and risk management from the perspective of business enablement

• 2-year degree in Information Technology, Information Security, or related field and/or equivalent training and/or experience
• 5-7 years of work experience in IT
  
  
  
  • 3 or more years of experience must be in an information security role with demonstrated working knowledge of information security, federal and state rules and regulations, company/business unit operations, compliance policies, procedures, and/or programs in area of assignment.