IT Security Analyst Remote

IT Security Analyst ( Remote) Contract Length: 7 MonthsPotential Extension: YesPay Rate: $50-$60 hourly W2 We are seeking an experienced Information Security Advisor to join a growing security advisory team that supports enterprise-wide technology initiatives. This role focuses on providing security guidance, risk assessments, threat modeling, and security architecture recommendations across a diverse technology landscape that includes on-premises, cloud, hybrid, and SaaS environments.This is an excellent opportunity to work on large-scale transformation initiatives, including cloud adoption and modernization efforts, while partnering with business and technology teams to ensure security is embedded throughout the project lifecycle.Key Responsibilities * Provide security guidance during the planning, design, development, and implementation of technology solutions. * Conduct Threat Risk Assessments (TRAs) and threat modeling activities for applications, infrastructure, cloud platforms, and enterprise initiatives. * Review and assess security controls to ensure alignment with organizational standards and regulatory requirements. * Perform security advisory reviews for complex applications, platforms, and network environments. * Analyze security risks and recommend mitigation strategies. * Support cloud initiatives by providing quality assurance reviews of threat assessments and security architecture designs. * Collaborate with technology, infrastructure, development, and business teams to implement secure-by-design principles. * Evaluate existing security solutions and recommend enhancements to address emerging threats and evolving business needs. * Review vulnerability reports, validate security controls, and assess remediation plans. * Provide guidance on security policies, standards, and best practices. * Support security posture reviews and ensure appropriate security controls are implemented and maintained. * Conduct industry research and benchmarking to identify emerging threats, trends, and mitigation strategies. * Build strong relationships with business stakeholders and provide ongoing security consultation.Required Qualifications * 5+ years of hands-on experience performing security assessments for applications, infrastructure, and network environments. * 3+ years of experience conducting Threat Risk Assessments and threat modeling across on-premises, cloud, hybrid, and SaaS environments. * 2+ years of experience in security architecture, security engineering, software development, or hands-on implementation of security solutions. * 3+ years of experience reviewing vulnerability reports, validating control effectiveness, and assessing server hardening requirements. * Strong understanding of U.S. regulatory requirements and security compliance practices. * Experience identifying security risks and providing practical remediation recommendations. * Strong knowledge of application security controls, compensating controls, and security best practices.Preferred Qualifications * Experience with ServiceNow. * Knowledge of cloud platforms such as AWS, Azure, or Google Cloud Platform (GCP). * Security certifications such as CISSP, CISM, CCSP, CRISC, or similar. * Familiarity with security frameworks and standards including: * NIST 800-53 * ISO 27001 / ISO 27002 * ISO 27017 / ISO 27018 * PCI DSS * CIS ControlsDesired Skills * Excellent verbal and written communication skills. * Ability to communicate complex security concepts to technical and non-technical audiences. * Strong documentation and presentation skills. * Ability to work independently while managing multiple priorities. * Strong stakeholder management and relationship-building capabilities.Education * Bachelor's degree in Computer Science, Information Security, Information Technology, Cybersecurity, or a related field. * Equivalent combination of education and profession