Information Security Analyst
Not Disclosed•Full-TimeOn-site
location_onOn-site
About DCM Services
DCM Services is a leading provider of financial services solutions, specializing in account resolution and customer engagement. With decades of industry experience, DCM partners with top financial institutions to deliver compliant, people-first services. The company is committed to building a secure, well-governed information environment grounded in ISO 27001/2 standards.
About the Role
This Information Security Analyst role sits at the heart of DCM's mission to maintain a robust security posture. You will assist in developing, implementing, and certifying an Information Security Management System (InfoSec Program) based on ISO 27001/2 standards. The position involves owning critical documentation, managing access controls, coordinating audits, and executing phishing tests. You will work cross-functionally to ensure the company's security framework remains current and effective, bridging the gap between technical controls and business operations.
Work location
Work model: On-site
On-site
Key Responsibilities
- check_circleManage and review security events, access levels, and scorecard metrics
- check_circleMaintain the InfoSec program document lifecycle to reflect current controls
- check_circleManage access tickets for new hires, changes, and revocations
- check_circleConduct monthly phishing tests and recommend risk-reduction actions
- check_circleCoordinate and document annual Business Continuity Plan table-top exercises
- check_circleParticipate in client audits and drive remediation of security findings
- check_circleAudit Support-level vendors for compliance with the Vendor Management Program
- check_circleMonitor weekly email DLP quarantine and partner with IT on firewall reviews
- check_circleReview weekly physical access swipes to ensure ticket-based owner approval
- check_circleRespond to auditor questionnaires regarding the company's security posture
Requirements
- verifiedAssociate's degree in a related field or 4+ years of experience in IT, QA, Compliance, or Accounting
- verifiedStrong technical writing ability
- verifiedBasic awareness of ISO/IEC 27001, PCI DSS, NIST SP800-53, SOC 1, and SOC 2 frameworks
- verifiedFamiliarity with HIPAA/HITECH, GLBA, and CCPA regulatory requirements
- verifiedAwareness of security architecture principles, change management, disaster recovery, and business continuity concepts
Nice to Have
Interest in pursuing CISSP, CISA, CISM, CRISC, or CompTIA credentials.
Similar Job Opportunities
Skills, education and keywords
Skills: Iso 27001, Pci DSS, Nist SP800-53, Soc 1, Soc 2, Hipaa, Hitech, Glba, Ccpa.
Education: Associate's degree in a related field, or 4+ years of experience in IT, QA, Compliance, or Accounting.
Frequently asked questions about Information Security Analyst at DCM Services
What does a Information Security Analyst at DCM Services do?expand_more
Day-to-day, the Information Security Analyst at DCM Services will manage and review security events, access levels, and scorecard metrics; maintain the infosec program document lifecycle to reflect current controls; manage access tickets for new hires, changes, and revocations; and conduct monthly phishing tests and recommend risk-reduction actions.
What are the requirements for this Information Security Analyst role?expand_more
DCM Services is looking for candidates who meet the following requirements: Associate's degree in a related field or 4+ years of experience in IT, QA, Compliance, or Accounting; Strong technical writing ability; Basic awareness of ISO/IEC 27001, PCI DSS, NIST SP800-53, SOC 1, and SOC 2 frameworks; Familiarity with HIPAA/HITECH, GLBA, and CCPA regulatory requirements; and Awareness of security architecture principles, change management, disaster recovery, and business continuity concepts.
Where is the Information Security Analyst role at DCM Services located?expand_more
Information Security Analyst at DCM Services is based in On-site. This is a on-site role.
Is this Information Security Analyst job remote, hybrid, or on-site?expand_more
DCM Services has listed this Information Security Analyst role as on-site.
How much experience is required for this Information Security Analyst role?expand_more
Information Security Analyst at DCM Services typically requires 4+ years of relevant experience at the mid level level.
What skills do you need for the Information Security Analyst role at DCM Services?expand_more
Key skills for Information Security Analyst at DCM Services include Iso 27001; Pci DSS; Nist SP800-53; Soc 1; Soc 2; Hipaa; Hitech; and Glba.
What education is required for Information Security Analyst at DCM Services?expand_more
Educational requirements for this role: Associate's degree in a related field, or 4+ years of experience in IT, QA, Compliance, or Accounting.
What category does the Information Security Analyst role belong to?expand_more
Information Security Analyst at DCM Services is part of the it job category on Recrutus.