Senior Information Security Analyst

Experience : 8+ years

Help to maintain Milestone's controls framework and ensure it is consistent with the business objectives, applicable legislation, and certifications

Measure and analyze cyber security posture across the organization and recommend improvements and solutions to current cyber security issues and risks Support identifying the scope of the Governance processes, drafting and validating business cases, conducting business analysis, leading the gathering process of business requirements

Participate in the assessment of current state and issue identification, develop recommendations aligned to strategic objectives, and draft high level conceptual and detailed design recommendations

Support Milestone audits and security compliance reviews (including but not limited to: SSAE18/Soc2 Type2, ISO27000 etc.)Support company-wide annual Risk Assessments and Investigation Deep Dives

Support execution of supplier and service partner Due Diligence and ad hoc audit requests

Contribute to building and maintaining Wellpath audit, risk, and compliance maturity program

Support rest of Milestone's business units in their ability to adopt innovative solutions and technology towards delivering a data secure environment both internally and externally

Liaise with cross-functional teams to provide consulting as SME on governance and compliance requirements

Develop, maintain, and regularly update the standards and policies framework, including coordinating signoffs from affected parties

Produce management reports and support with presentations for Committee and Board meetings and Risk management reporting

Support reporting to the internal Infosec organization, including weekly meeting minutes, ad-hoc meetings, and workshop minutes