Security Due Diligence Analyst (Night Shift)

BASIC FUNCTION

Position Overview

The Security Due Diligence Analyst is responsible for reviewing security assessment questionnaires and assessing the security posture of third-party vendors. The ideal candidate will have a strong understanding of information security principles and practices, as well as experience in conducting security assessments or reviewing security documentation.

What you'll do at Insight

• Responsible for reviewing security assessment questionnaires and assessing the security posture of third-party vendors. The ideal candidate will have a strong understanding of information security principles and practices, as well as experience in conducting security assessments or reviewing security documentation
• Conducting due diligence assessments: The Security Due Diligence Analyst is responsible for conducting comprehensive assessments of potential vendors, business partners, and other entities to evaluate their security and risk management practices
• Identifying security risks: The Analyst is responsible for identifying potential security risks associated with the entities being assessed, including risks associated with data privacy, compliance, physical security, cyber threats, and other security-related areas
• Communicating security findings: The Analyst is responsible for communicating security findings and recommendations to relevant stakeholders, including executive management, legal counsel, and other relevant parties
• Maintaining records: Throughout the due diligence process, the Analyst is responsible for maintaining accurate and complete records of all activities and findings
• Respond to requests for potential and existing clients, including but not limited to Security Questionnaires, Request for Proposals (RFPs), Master Service Agreements (MSA), Data Protection Agreements (DPA), and Security reviews for 3rd Party Vendor Onboarding

What you'll need to join Insight

• 1-3 years’ experience as a Security/Network Administrator or equivalent knowledge
• Exemplary personal and professional integrity and demonstrate strong interpersonal skills
• CompTIA Security+ is a plus
• Ability to interpret requests and assign non-security questions to different teams
• Ability to multi-task multiple requests and properly prioritize work
• Strong knowledge of compliance processes and industry best practice regulations is a plus
• Strong oral and written skills
• Familiarity with Security best practices such as audits/certifications, policies, web application, physical security, vulnerability management, and data center security etc.
• Familiarity or previous experience with IDS/IPS, SIEM, DLP, firewalls, vulnerability management systems, and endpoint security products
• Knowledge of various operating system flavors including but not limited to Windows, Linux, Unix
• Knowledge of applications, databases, middleware to address security threats against the same
• Strong attention to detail
• Excellent interpersonal skills and professional demeanor