Information Security Risk Analyst

Msa Agency - Cranberry Township, PA

Full-time - Entry Level

Cranberry Township, PA

Miscellaneous Manufacturing

About the position

The Information Security Risk Analyst at MSA Safety plays a crucial role in supporting various stakeholders to understand and manage risks associated with information security. This position is embedded within the Governance, Risk, and Compliance group and contributes significantly to the IT risk management program. The analyst will work closely with technical teams during the design phase of implementation projects and will help in automating processes and analytics to enhance the security program continuously.

Responsibilities

• Conduct risk assessments on existing and new systems and technologies.
• Assist in the development and implementation of security policies and procedures.
• Assist with SecOps Team in automation tuning and security events and incidents to identify potential risks.
• Collaborate with IT and business teams to ensure compliance with security standards.
• Document and report security risks and vulnerabilities to senior management.
• Participate in security audits and assessments.
• Drive/Deliver company standards, policies, procedures, and guidelines toward frameworks such as ISO 27001 and NIST 800-171 frameworks.
• Drive/Deliver Enterprise Security Training and Awareness Campaign surrounding policies, principles, and standards.
• Follow MSA Standard Operating Procedures and internal quality measures in completing work.
• Design, document and continually enhance security administration policies, processes, and procedures.

Requirements

• Experience with the IT industry through internships or similar programs.
• Degree in information security, Computer Science, or a related field.
• Demonstrated ability to communicate professionally and effectively in written and oral format.
• Demonstrated ability to work independently, with guidance in only the most complex situations.
• Produce high-quality work results.
• Responds to customer needs by providing accurate and timely solutions to problems presented.

Nice-to-haves

• Prior experience in Information Security Management / Compliance Programs.
• Bachelor's degree in information science, Computer Science or related discipline.