Mitchell International
6220 Greenwich Drive, San Diego, CA 92122
Remote
2022-01-13
Information Security Analyst Intern
3.4
Company Overview:
Enlyte, Mitchell is looking for an aspiring Information Security Analyst to join our Security & Risk Management (SRM) team. This role will be an opportunity to get Information Security experience as an integral part of a rapidly growing SaaS provider. As a member of the Security & Risk Management (SRM) team, this individual will contribute to numerous activities within the organization’s governance, risk, and compliance (GRC) program. Within the Company’s GRC program, this candidate will have the opportunity to contribute and lead the following activities, risk assessments/analysis, controls development and maintenance, controls audits, third-party/vendor management, security/privacy awareness and training, business continuity and crisis management maintenance, and more.
Primary responsibilities will include:
The Enlyte Family of Businesses
Mitchell | Genex | Coventry
Enlyte is the parent brand of Mitchell, Genex and Coventry, an organization unlike any other in the Property & Casualty industry, bringing together three great businesses with a shared vision of using technology innovation, clinical services and network solutions to help our customers and the people they serve. Our suite of products and services enable our employees to help people recover from challenging life events, while providing opportunities for meaningful impact and career growth.
Job Description :
This is a remote, part-time (10-20 hours/week) role that we are looking to potentially grow into a full-time role in the future.
Enlyte, Mitchell is looking for an aspiring Information Security Analyst to join our Security & Risk Management (SRM) team. This role will be an opportunity to get Information Security experience as an integral part of a rapidly growing SaaS provider. As a member of the Security & Risk Management (SRM) team, this individual will contribute to numerous activities within the organization’s governance, risk, and compliance (GRC) program. Within the Company’s GRC program, this candidate will have the opportunity to contribute and lead the following activities, risk assessments/analysis, controls development and maintenance, controls audits, third-party/vendor management, security/privacy awareness and training, business continuity and crisis management maintenance, and more.
Primary responsibilities will include:
- Develop and maintain Security policies, procedures, and standards aligned to an industry standard framework (e.g. ISO 27001, HITRUST, NIST, etc.).
- Enhance and maintain Security risk assessment methodology, assessment templates and procedures.
- Work with others to help promote effective management of identified risks in accordance with the GRC program.
- Develop and document an optimized process including the use of a GRC enablement solution to ensure that operational activities are conducted consistently and efficiently.
- Lead audit/assessment planning, collects evidence (e.g. reports, screen shots, etc.), and facilitates responses to auditors’ questions (e.g. SOC 1 and SOC 2).
- Develop, track and maintain action plans for the resolution of issues identified during assessments and audits. Provide needed assistance with the execution of those remediation plans
- Respond to customer Information Security questionnaires and other inquiries to provide assurance that their data is adequately protected via controls and processes.
- Conduct internal audits of the Company’s ISMS (Information Security Management System) to ensure controls have been properly implemented and are operating as intended.
- Assist in conducting third party vendor security reviews for new and existing vendors (due diligence and on-going monitoring).
- Assist in maintaining and propagating an effective compliance education, awareness and communication program for the Company.
- Pursuing (or completed) Bachelor’s degree from an accredited college or university in Management Information Systems, Computer Information Systems, Accounting, Finance or related field
- GPA of 3.0 or higher required
- Interest in Information Security compliance and governance frameworks (COSO, COBIT, NIST, ISO, etc).
- Interest in Information Security risk management principles and methodologies
- Able to interact and operate comfortably with all levels of the Company including senior leaders and cross-function IT departments.
- Able to handle multiple projects and tasks, make decisions and solve problems while under pressure, and prioritize and organize effectively.
- Strong interpersonal skills to support the day-to-day activities of the team and build relationships with the extended organization