Information Security Analyst

• Role: Information Security Analyst
• Location: Chandler, AZ (85286) / Charlotte, NC( 28262) - Hybrid ( 3 days onsite/ 2 days remote)
• Duration: 12+Months
• Employment Type: w2 contract

• Senior Information Security Analyst to join the Cyber AI Policy and Domain Governance team within Cybersecurity Governance and Information Protection.
• This role supports the development, implementation, and operationalization of cybersecurity governance processes related to Cloud and AI technologies.
• The individual will play a key role in advancing the AI Security Governance Framework, maintaining Cloud Control Framework (CCF) governance, supporting policy lifecycle management, and ensuring alignment between cybersecurity policies, controls, cloud security requirements, and emerging AI risk management practices.
• The successful candidate will partner closely with AI Security Governance and Cloud leadership, Cybersecurity domain subject matter experts, and risk and control stakeholders to deliver the governance initiatives and maintain audit-ready documentation.

Required Qualifications:

• 4+ years of Information Security and Cloud experience
• 1+ years of experience assessing, implementing, or governing AI security requirements, including AI-specific risks such as prompt injection, model attacks, data poisoning, adversarial threats, secure AI development practices, or AI control frameworks
• Desired Qualifications:
• Familiarity with AI-specific and cloud specific cybersecurity risks, including adversarial attacks, model inversion, data poisoning, and prompt injection
• Knowledge of NIST AI RMF, and other emerging AI and cloud regulatory and compliance frameworks.
• Knowledge of COBIT, FedRamp, FFIEC, ISO, MITRE, NIST, CRI and other key industry frameworks and -authoritative sources -
• Familiarity with cloud security concepts (shared responsibility model, continuous enforcement of secure configuration, Infrastructure and Policy as Code, etc.)
• One or more professional certifications such as CISSP, CISA, CISM, CRISC, CGEIT
• Strong critical thinking skills, consistent attention to detail, and ability to meet deadlines amidst competing priorities
• Comfortable with making and presenting recommendations to a wide audience of stakeholders
• 6+ years hands-on experience working in Information Security / Cybersecurity domain
• 3+ in financial services or other highly-regulated industry; knowledge of the financial services regulatory environment
• Bachelor’s and/or master’s degree in engineering or computer Science or Information Systems