- Professional
- Bureau à Reston
As an Associate Data Security Analyst, you will be working alongside the information security team members to analyze information from designated information security systems, assist with information security requirements for key areas of the business and work on assigned information security tasks. This includes, but is not limited to, data security, vendor risk evaluation, network security and incident response.
Primary Responsibilities
Vendor Risk Management Tasks
- Assist with NVR’s Vendor Risk Management program to conduct vendor risk assessments, periodic vendor re-assessments.
- Collaborate and coordinate with external vendors, internal teams for new vendor evaluations, existing vendor re-evaluations, reviewing questionnaire responses, conduct follow up as needed.
- Effectively track vendor evaluation requests from start to end, write vendor assessments, and provide appropriate recommendations where applicable.
Operational Security Tasks
- Assist with NVR’s Security Operations Center, review reports, review and investigate alerts generated by the SOC.
- Assist senior colleagues in matters such as; security engineering, compliance reviews, end user training etc..
- Assist in the creation, documentation, and implementation of security policies, procedures and practices.
- Conduct proactive research and investigations to identify threats/vulnerabilities and identify remediation/mitigation procedures.
- Collaborate and work closely with other IT teams/users to identify and resolve issues.
Project-related Security Tasks
- Assist project teams with performing risk and vulnerability assessments on business processes and infrastructure systems. Working with appropriate parties to develop appropriate resolution and/or mitigation plans.
Incident Response
- Assist in coordinating detection, analysis and remediation activities on attacks that impact information assets.
- Assist in conducting forensic and detailed log analysis in support of incident remediation activities, documenting and tracking incidents to closure.
Qualifications
- Bachelor’s degree or equivalent in computer science or equivalent discipline.
- Demonstrated technical competencies in operating systems, networking, security tools and cloud services.
- Knowledge of security industry practices and standards.
- Awareness of security assessments, incident response activities and working in environments subject to regulations (e.g., SOX, Data Privacy) and audit oversight.
Preferred Qualifications
- 1-2 years of experience in an information security role.
- Security-related industry certifications are preferred, but not required (e.g., CISA, CISSP, GSEC, Security+)
