Information Security Analyst

Apply now and grow within a rapidly evolving company. GoHealth Slovakia is looking for you.

Salary

Your role

Security is a top priority for IT teams around the globe and we’re no exception. We’re looking to hire the best and we’re offering a package to match. Plus, you get a workplace environment with all the space you need to out do yourself on a regular basis.

We’re Creatix, one of Chicago’s hottest, most innovative digital product design and development firms. This unique position requires you to join our growing team in Bratislava (Slovakia) reporting to one of our major U.S. clients, an innovative health insurance company.

*** Your Role at Creatix ***
Cyberattacks are on the increase and so are your responsibilities. We expect you to be the security evangelist who helps support our client’s information security program, provides day-to-day management, supports hands-on execution of security projects, and provides security advice and guidance. This includes:

• Developing and implementing effective policies and practices to protect sensitive customer data and corporate assets.
• Ensuring compliance with security standards, governmental regulations, and company policies through development and management of training programs and periodic security audits.
• Providing input to assess and evaluate information security risks and monitor compliance with security standards and appropriate policies.
• Keeping abreast of security incidents and assisting in issue management during significant information security incidents.
• Examining impacts of new technologies on the company’s overall information security; establishing processes to review the implementation of new technologies to ensure security compliance.
• Assisting in configurations for products in the security toolkit.
• Providing accurate and timely reporting on all project deliverables.
• Managing all partner and customer security needs during the RFP process, technical due diligence, or as part of ongoing interactions.
• Assisting in internal and external audits to ensure adequate controls are in place to support ISO 27001 and HITRUST compliance certifications.

15 years of experience

For nearly 15 years, we’ve partnered with the biggest tech brands to get their ideas to market faster. As a leader in providing technical solutions in health insurance mediation, we have a robust digital platform that covers the entire life cycle of customers and helps millions of customers access affordable health insurance. We work with the cutting-edge technologies and tools, prize collaboration in all that we do, and push the boundaries with every new project.

Our technology plays a key role in our growth, and we are systematically modernizing our technological stack. We’re committed to growing a team of well-rounded engineers, operating software in a production environment and building easily maintainable software. That’s where you come in.

Required Skills

• Knowledge of network-based and system-level attacks and mitigation methods, as well as knowledge of application level attacks; especially web applications and their mitigation methods.
• Excellent communicator who can effectively work with all management teams and articulate security-related concepts to a broad range of technical and non-technical staff.
• Experience conducting and/or assisting with formal audits in support of an Information Security Management System or certifications.
• Experience with business continuity planning, auditing, and risk management, as well as third-party security management.
• Ability to effectively evaluate security and compliance requirements, understand their impact on the business, and design creative security solutions that are not disruptive to the business.
• Understanding of firewalls, encryption PKI, Intrusion Detection Systems, Security Information and Event Management (SIEM), Data Loss Prevention (DLP), Web Application Firewalls, Advanced Malware Defenses, DDOS Prevention, Application Whitelisting and Network Packet Capture Solutions.
• Knowledge of vulnerability and endpoint protection tools.
• Minimum of 1-2 years of directly supporting an information security management program.
• Minimum of 3 years of cumulative experience in at least two security specific domains.
• 3-5 years of prior experience in a hands-on IT operational role such as network or systems engineering is a nice-to-have.
• BS or MS in Computer Science, Information Systems or related field.
• Professional certifications such as SSCP, CISSP, CISM or CISA
• Experience with HIPAA , HITRUST , ISO 27001 , PCI-DSS , SOC2 reporting or SOX compliance is a strong plus.

Apply now

If you are ready to play an important role in an upwardly mobile, innovative product development company, this is your opportunity to leverage and grow your unique strengths, talents and skills.

Follow us on your
favorite social network

Bratislava
Nivy Tower
Mlynské Nivy 5
821 09 Bratislava
Košice
Hviezdoslavova 6,
040 01 Košice
ID: 3179178  Dátum zverejnenia: 19.10.2017