Information Security Analyst - Web and Email Security

Outstanding long-term contract opportunity! A well-known Financial Services Company is looking for a Information Security Analyst in Charlotte, NC or Irving TX(Hybrid). W2

Work with the brightest minds at one of the largest financial institutions in the world. This is a long-term contract opportunity that includes a competitive benefit package! Our client has been around for over 150 years and is continuously innovating in today's digital age. If you want to work for a company that is not only a household name, but also truly cares about satisfying customers' financial needs and helping people succeed financially, apply today.

Contract Duration: 18 + Months

Required Skills & Experience

3+ years of experience in Information Security, Cybersecurity Operations, Risk Management, or a related field.

• Knowledge of web security, email security, SaaS security, or cloud security concepts.
• Experience analyzing security events, logs, reports, and operational data.
• Understanding of cybersecurity frameworks, security controls, and risk management practices.
• Strong analytical, problem-solving, and investigative skills.
• Experience creating reports, dashboards, and security metrics.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities in a fast-paced environment.

What You Will Be Doing

Security Operations & Administration

• Monitor and administer web and email security technologies, including secure web gateways, web proxies, content filtering platforms, email security controls, and cloud security monitoring tools.
• Analyze security events, alerts, and trends to identify emerging risks, policy violations, or operational concerns.
• Perform investigations related to web access, email security, SaaS application usage, and policy exceptions.
• Support incident response activities involving web, email, or cloud-based threats.

Control Execution & Governance

• Execute and validate key security controls in accordance with documented procedures and regulatory requirements.
• Perform periodic reviews of web proxy policies, email security rules, entitlement access, and content filtering configurations.
• Support evidence collection, documentation, and reporting activities for audits, risk assessments, and control testing.
• Maintain control documentation, standard operating procedures, and security knowledge articles.

Risk Assessment & Analysis

• Conduct security reviews of business requests involving internet access, email capabilities, third-party applications, and cloud technologies.
• Assess risks associated with requested exceptions and recommend appropriate mitigating controls.
• Identify gaps in security posture and develop recommendations to improve effectiveness and operational efficiency.

Metrics, Reporting & Communications

• Develop and maintain operational metrics, dashboards, and executive reporting.
• Analyze security performance indicators and communicate findings to stakeholders.
• Prepare concise summaries, documentation, and presentations for leadership, audit, and risk management audiences.
• Track remediation activities and provide status updates on security initiatives and control health.

Collaboration & Continuous Improvement

• Partner with engineering teams to support implementation of new security capabilities.
• Participate in user acceptance testing, change management reviews, and solution deployments.
• Recommend process improvements, automation opportunities, and operational efficiencies.
• Support strategic initiatives within Web & Email Security and broader Cybersecurity program.

Preferred Qualifications

• Experience with secure web gateways, web proxies, content filtering, CASB, Microsoft 365 security services, or cloud security technologies.
• Knowledge of email security controls, phishing mitigation techniques, and data loss prevention concepts.
• Experience supporting audits, compliance reviews, or regulatory examinations.
• Professional certifications such as Security+, CISSP, CCSP, GSEC, or equivalent.

Posted By: Rene Sadlier