高级网络安全分析师
Senior Cyber Security Analyst
**职位名称:** 高级网络安全分析师
**工作地点:** 远程（美国，纽约优先）
**关于 Rhymetec:**
Rhymetec 于 2015 年在纽约市成立，稳步发展合规、网络安全和数据隐私领域。我们的使命是帮助客户更快实现合规，让他们能够专注于核心业务，而不是构建有效且合规的信息安全计划的复杂性。
该职位为全远程办公。
**岗位职责**
高级网络安全分析师是协助我们安全项目经理的理想互补角色。该职位将与 SPM 密切合作，确保全面覆盖所有合规和安全项目管理需求，同时保持职责分离和明确的责任划分。
- 协助设计和实施符合多种框架的全面合规计划。
- 为客户配置和管理合规平台。
- 在项目执行期间作为 Rhymetec 客户与安全项目经理之间的次要联络人。
- 参加高优先级和高度敏感客户的每周会议。
- 在合规评估期间作为客户与审计师之间的次要联络人。
- 与 CSA 一起进行合规要求和安全最佳实践的培训。
- 代表客户完成安全问卷调查。
- 与客户进行事件响应桌面演练。
- 与客户进行业务连续性和灾难恢复桌面演练。
- 协作构建和管理 Rhymetec 客户的全面风险管理计划。
**任职资格**
- 计算机科学或网络安全相关专业本科及以上学历，或在相关领域有 5 年以上直接经验。
- 4 年以上在技术、网络安全和监管合规领域的相关工作经验。
- 具备客户服务经验，并能与客户建立专业关系。
- 有 SOC 2、ISO 27001、HIPAA、GDPR、CCPA 等合规框架的翻译和实施经验者优先。
- 具备扎实的逻辑安全技能，有云安全经验。
- 了解云环境（AWS、GCP、Azure）及通过 DevOps 和基础设施即服务（IaaS）技术集成安全控制。
- 优先认证：Cloud+、CySA+、CISSP、CSSP、CISM、CRISC。
**福利**
Rhymetec 提供完善的员工福利包，包括：
- 员工覆盖的医疗保险保费
查看英文原文
**Title:** Senior Cyber Security Analyst
**Location:** Remote (U.S., New York Preferred)
**About Rhymetec:**
Rhymetec was founded in New York City in 2015, growing steadily in the areas of compliance, cyber security and data privacy. Our mission is to ensure our clients are compliant faster, so they can focus on their core business and less on the complexities of building effective and compliant infosec programs.
This role is fully remote.
**Job Responsibilities**
The Senior Cyber Security Analyst is the ideal complementary role to assist our Security Program Managers. This role will work closely with the SPMs to ensure comprehensive coverage of all compliance and security program management needs while maintaining clear separation of duties and responsibilities.
- Assist in the design and implementation of comprehensive compliance programs aligned with multiple frameworks.
- Configure and manage compliance platforms for the client.
- Serve as secondary liaison between Rhymetec clients and Security Program Managers during project execution.
- Join weekly meetings with high priority and highly sensitive clients.
- Serve as secondary liaison between clients and auditors during compliance assessments.
- Conduct training sessions on compliance requirements and security best practices with CSAs.
- Complete security questionnaires on behalf of clients.
- Conduct Incident Response Tabletop exercises with clients.
- Conduct Business Continuity and Disaster recovery tabletop exercises with clients.
- Collaborate in building and managing comprehensive risk management programs for Rhymetec clients.
**Qualifications**
- Bachelor’s Degree from an accredited university in a Technology or Cybersecurity field OR 5+ years of direct experience in listed areas.
- 4+ years of work experience working with technology, cybersecurity, and regulatory compliance.
- Experience in customer service and ability to develop professional relationships with customers.
- Preferred experience in translating and implementing SOC 2, ISO 27001, HIPAA, GDPR, CCPA and other compliance frameworks.
- Strong logical security skills, with experience in cloud security.
- Understanding of cloud environments (AWS, GCP, Azure) and integrating security controls through DevOps and Infrastructure as a Service (IaaS) techniques.
- Preferred Certification(s): Cloud+, CySA+, CISSP, CSSP, CISM, CRISC.
**Benefits**
Rhymetec offers a robust employee package, including:
- Employee covered medical premiums (100%)
- Dental and Vision Benefits
- PTO and Sick Time, including 11 paid Holidays
- 401K retirement option
- Company paid Life Insurance
- Annual Subscription to TalkSpace (online counseling & therapy service)
Rhymetec is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetic, disability, age, or veteran status.