Senior Information Security Analyst

American Institutes For Research - Chicago, IL

Full-time - Mid Level

Remote - Chicago, IL

Professional, Scientific, and Technical Services

About the position

The Senior Information Security Analyst at AIR is a pivotal role responsible for coordinating and organizing information security activities across the institution. This position involves conducting security assessments, ensuring compliance with security requirements, and leading risk management activities to protect AIR's information technology assets. The analyst will collaborate with cross-functional teams to address complex security challenges and contribute to meaningful projects that impact communities globally.

Responsibilities

• Execute internal controls assessments for AIR web applications, secure data enclaves, general support systems, and other key systems to support internal and external client security requirements.
• Perform continuous monitoring activities to ensure compliance with internal and external requirements.
• Assist with the development and maintenance of security authorization package deliverables, including the system security plan, risk assessment, contingency plan, configuration management, system design, and privacy impact threshold/assessment documents.
• Perform and support third-party risk assessments and risk monitoring activities, including vetting new software and artificial intelligence (AI) use cases.
• Oversee the remediation of findings utilizing standard Plan of Action and Milestones (POA&M) processes resulting from both internal and external security assessments.

Requirements

• Practical experience in all phases of security assessment and authorization, particularly in federal agency work.
• Experience in conducting internal audits of information security controls.
• Knowledge of compliance frameworks relevant to information security.

Nice-to-haves

• Experience with artificial intelligence (AI) security use cases.
• Familiarity with risk management frameworks and methodologies.

Benefits

• Remote work options within the U.S.
• Opportunities for professional development and career growth.
• Participation in industry conferences and events.