Information Security Specialist-Analyst II/Information Solutions

Role overview

This role supports information security governance, risk, and compliance work by applying established practices to moderately complex issues. It coordinates with technical and business stakeholders, maintains recurring deliverables, and helps turn control requirements into practical guidance and tracked remediation.

Responsibilities - Collect and review control evidence, maintain risk and compliance records, and support audits or assessments. - Coordinate field operations requests, reporting, recurring deliverables, and follow-up across stakeholder groups. - Assess gaps, document exceptions, and track remediation actions through completion. - Translate technical findings and control requirements into clear, actionable guidance. - Help improve the accuracy, timeliness, and completeness of governance and operational outputs.

Requirements - Bachelor’s degree or equivalent work experience. - At least three years of experience in cybersecurity, compliance or audit, technology operations, or a related function. - Hands-on experience with evidence review, risk or compliance records, audits or assessments, exception documentation, and remediation tracking. - A relevant certification, such as Security+, CySA+, SSCP, CRISC Associate, CISA Associate, Microsoft SC-900, or an equivalent credential. - Strong analytical, organizational, and communication skills, with the ability to manage competing priorities with limited direction. - Working knowledge of security and compliance frameworks or requirements such as ISO 27000, HIPAA/HITECH, FERPA, PCI DSS, or NIST guidance.

Nice to have

Experience with compliance in healthcare or higher education, conducting risk assessments, using GRC or compliance tracking platforms, and familiarity with the NIST Cybersecurity Framework or NIST SP 800-53. An advanced role-related certification is also beneficial.