It Information Security Analyst Ii

The Weaver Experience
Weaver is a full-service national accounting, advisory and consulting firm with opportunities for professionals in many different fields. We seek to bring a human element to the world of accounting, which includes creating a diverse, collaborative and entrepreneurial workplace culture. Our leaders truly care about the well-being of all our employees and encourage them to pursue their ambitions.
While our business is based in numbers, our success is truly based on people. It's why we commit to supporting our people not just in their professional growth, but also in their ability to lead balanced, integrated lives. At the foundation of that commitment are our core values. Weaver's core values were created specifically to empower our people to deliver extraordinary service and be their best selves. Our goal is to balance high development with high performance in order to meet the long-term goals of each individual, team and our firm.
Learn more about our services, industry experience and culture at weaver.com.
Position Profile
Weaver is looking for an Information Security Analyst II to join our InfoSec team. The Information Security Analyst II assists in developing, implementing, and administering plans, policies, and procedures to ensure ongoing compliance and security of the firm's information resources. The ideal candidate will be comfortable interfacing with firm staff, clients, and vendors while completing various tasks and projects such as due diligence questionnaires, vulnerability assessments, updating security policies and procedures, or planning and deployment of technical solutions. Support may be required outside of normal business hours, as dictated by projects and incidents.
Duties and Responsibilities

• Monitor, analyze, and respond to incident detection and escalation alerts from cybersecurity tools and associated information systems.
• Assist with responding to due diligence questionnaires from clients or coordinating assessments of third-party vendors.
• Administer IT security solutions involving endpoints, servers, and hosted services.
• Manage Security Awareness Training Program to include reviewing and updating content, creating quarterly assignments, and tracking progress.
• Support vulnerability management program by following up with remediation plans on conducted penetration tests and vulnerability scans to ensure that vulnerabilities across the firm are identified and remediated.
• Research the latest information technology security trends, threats, and stay current with regulations, security frameworks and certifications.
• Monitor and respond to eDiscovery requests.
• Assist in completion of IT Quarterly Statement of Integrity.
• Actively on-call 24x7. Some travel may be required.
• Adhere to the Firm's policies and procedures, Core Value, demonstrate their importance to others, and provide input to management on suggested modifications to Firm policies and procedures as necessary.
• Perform other duties as assigned.

Education and Skills

• Bachelor's degree in IT or a related field, or equivalent professional experience.
• Prefer one or more certifications such as CISSP or Security+.
• 5 years of combined technical and Information Security experience, with 2 years of experience focused on security.
• Experience with certifications such as SOC 1 and 2, or ISO 27001.
• Aptitude for analyzing and interpreting complex technical information covering IP networking, common operating systems, and business applications.
• Understanding of multiple regulatory requirements and frameworks such as NIST, ISO, PCI DSS, HIPAA, GDPR, or CCPA.
• Strong project management and communications skills, ability to support multiple concurrent projects, present ideas in business-friendly and user-friendly language.
• Ability to create and maintain technical documentation and training materials.
• Self-motivated and directed, with an attention to detail.

Base pay range: $75,000.00 to $90,000.00 per year. Exact compensation may vary based on skills and experience.
Accounting for more than numbers!At Weaver, we recognize that everyone brings different strengths, backgrounds and working styles to our team. We cultivate a safe and inclusive work environment that celebrates each individual's unique qualities through visibility, progression, advocacy and support. We are proudly an equal opportunity employer.
Employee Referral Program Eligible
We appreciate you exploring a career with Weaver! Interested applicants should apply directly to the job posting. At this time, we are not accepting resume submissions by third party staffing agencies for this role.