Cybersecurity Analyst at World Insurance Associates LLC in Remote

Summary: World Insurance Associates is a rapidly growing financial services organization specializing in various insurance and benefits solutions. The Cybersecurity Analyst will support the organization's cybersecurity program by performing security operations, monitoring security events, and managing risks while collaborating with cybersecurity engineers and IT teams. Responsibilities: - Monitor security alerts and events from security tools (e.g., SIEM, EDR, email security, vulnerability scanners) - Triage, investigate, and document potential security incidents and suspicious activity - Assist with incident response activities, including containment, remediation tracking, and post-incident analysis - Support vulnerability management efforts, including scan review, validation, and remediation tracking - Assist with risk assessments and security control evaluations - Participate in threat intelligence review and basic threat analysis - Support vendor security assessments, questionnaires, and evidence review - Track third-party security risks and remediation activities - Assist in maintaining third-party risk documentation and reporting - Assist with internal security audits, policy reviews, and control testing - Help gather evidence for regulatory, customer, or internal assessments - Support alignment with security frameworks and standards (e.g., NIST, ISO, NYDFS, SOC) - Assist in the development and delivery of cybersecurity awareness training - Support phishing simulations and user security education initiatives - Help promote secure behaviors across the organization - Work with cybersecurity engineers on security tool tuning, testing, and operational improvements - Document procedures, investigations, and lessons learned - Stay current on cybersecurity threats, technologies, and best practices Required Qualifications: - Experience with security tools (e.g., SIEM, EDR, email security, vulnerability scanners) - Ability to triage, investigate, and document potential security incidents and suspicious activity - Experience assisting with incident response activities, including containment, remediation tracking, and post-incident analysis - Support for vulnerability management efforts, including scan review, validation, and remediation tracking - Experience assisting with risk assessments and security control evaluations - Participation in threat intelligence review and basic threat analysis - Support for vendor security assessments, questionnaires, and evidence review - Ability to track third-party security risks and remediation activities - Experience assisting in maintaining third-party risk documentation and reporting - Assistance with internal security audits, policy reviews, and control testing - Ability to gather evidence for regulatory, customer, or internal assessments - Support for alignment with security frameworks and standards (e.g., NIST, ISO, NYDFS, SOC) - Assistance in the development and delivery of cybersecurity awareness training - Support for phishing simulations and user security education initiatives - Ability to promote secure behaviors across the organization - Collaboration with cybersecurity engineers on security tool tuning, testing, and operational improvements - Documentation of procedures, investigations, and lessons learned - Staying current on cybersecurity threats, technologies, and best practices Required Skills: SIEM, EDR, Vulnerability Management Important Skills: Risk Assessments, Security Audits Nice-to-Have Skills: Security Awareness Benefits: Competitive benefits package, Variable pay programs