Information Security Analyst

3 weeks ago


Minneapolis, United States The Nature Conservancy Full time

OFFICE LOCATION United States #PDN #LI-REMOTE WHO WE ARE The mission of The Nature Conservancy (TNC) is to conserve the lands and waters upon which all life depends. As a science-based organization, we develop innovative, on-the-ground solutions to the world's toughest environmental challenges so that people and nature can thrive. Our work is guided by our values, which include a commitment to diversity and respect for people, communities, and cultures. From a rewarding mission to career development and flexible schedules, there are many reasons to love life #insideTNC. Want to know more? Check out our TNC Talent playlist on YouTube to hear stories from staff or visit Glassdoor. One of TNC's primary goals is to cultivate an inclusive work environment so that employees around the globe have a sense of belonging and feel that their unique contributions are valued. We know we'll only achieve our mission by hiring and engaging a diverse staff that reflects the communities in which we work. Recognizing that people bring talent and skills that have been developed outside the scope of a job, we take a holistic approach to recruitment that considers life experience in addition to the professional requirements listed in our postings. Please apply - we'd love to hear from you. To quote a popular saying at TNC, "you'll join for the mission, and you'll stay for the people." WHAT WE CAN ACHIEVE TOGETHER The Information Security Analyst (ISA) is responsible for supporting information security and risk management activities centered around external party information and application security. You will be a member of the Information Security Risk Management Team - the Yellow Team. This team helps safely implement systems and integrate third party organizations into TNC's technology landscape, tracks information security risk, and manages human information security risk through a staff information security education and outreach program. The Information Security Analyst will participate in the implementation, and maintenance of an external party information security risk management program. You will assess the information security risk profile of the Nature Conservancy's vendors, contractors and other external parties that have access to our data and systems and will work with affected business units to mitigate or accept the risks those external parties pose. WE'RE LOOKING FOR YOU The Information Security Analyst is responsible for participating in information security-related activities. In pursuit of this mission, the ISA coordinates tactical information security activities with information technology and other staff in a complex, decentralized global organization. The ISA performs the following activities: Act as a contact for all security review requests, both for internal and external party systems and services. Work with Privacy, and Legal teams to complete external party risk assessments. Perform technical assessments on both internal and external/third party systems and services. This position requires routine contact with IT as well as non-technical staff. This position reports to a Director of Information Security and supervises no staff. In this position you will: Participate in the implementation, and maintenance of the external party information security risk management program as part of TNC's overall external party due diligence review process. Participate in the assessment, monitoring, and documentation of the security posture and risk profile of external parties with access to TNC data, information, and records or to TNC systems. Participate in the security-oriented reviews of contracting-related documentation and provide security guidance to RFI/RFP/RFQ processes. Work with Privacy and Legal teams to document the classification of data, information, and records held or processed by external parties. Work with Information Technology staff to document the specifics of implemented technology solutions. Provide assessment of ext rnal party or internal system security based on provided architectural and operational documentation. Perform technical testing to validate the security-related behavior of a system, service, or piece of software. Work with business unit, IT staff, or external party to resolve any findings from security testing. Provide other Information Security teams with documentation of system configuration and expected behavior for applications and services. Provide advice and consultation to staff on information security-related policies, procedures, and best practices. Write documents for and deliver presentations to both technical and non-technical audiences. Participate in security incident response activities. Resolve issues independently within program area. Willing to work flexible hours. Work environment involves only infrequent exposure to disagreeable elements and minor physical exertion and/or strain. WHAT YOU'LL BRING Bachelor's degree in relevant technical discipline and 3 years of experience in an information technology department in any role, or seven years of experience without a degree. Experience having a strong customer service orientation Experience with Microsoft Office 365 programs DESIRED QUALIFICATIONS Experience working in a decentralized global organization, supporting staff and/or systems located in multiple states and/or countries. Multi-lingual skills and multi-cultural or cross-cultural experience appreciated. Time management and attention to detail. Experience in defining and documenting complex systems requirements. Experience in communicating effectively with internal and external audiences. Proficient with a written language other than English, particularly Spanish or Portuguese. Experience working with a Third-Party Risk Management platform. Experience with Cloud technology including AWS or Microsoft/Azure offerings for Infrastructure as a Service (IaaS), Platform as a Service (PaaS), or Software as a Service (SaaS). Experience with security-related aspects of information systems including endpoint security products, client operating system configuration and networking technologies. Experience with Agile tools and concepts. Certifications such as Security+, GISF, Associate of (ISC)2, CIPP, CRISC, or PCIP WHAT WE BRING Since 1951, TNC has been doing work you can believe in. Through grassroots action, we have grown from a small non-profit into one of the most effective and wide-reaching environmental organizations in the world. Thanks to more than 1 million members, over 400 scientists, and the dedicated efforts of our diverse staff and partners, we impact conservation around the world TNC offers a competitive, comprehensive benefits package including health care benefits, flexible spending accounts, a 401(k) plan with an 8% employer match, parental leave, accrued paid time off, life insurance, disability coverage, employee assistance program, other life and work well-being benefits. Learn more about our benefits on our Culture Tab on nature.org/careers. We're proud to offer a flexible work environment that supports of the health and well-being of the people we employ.



  • Minneapolis, Minnesota, United States Omni Inclusive Full time

    Job Summary:Omni Inclusive is seeking an experienced Information Security Analyst to support the Bank in its role as a Fiscal Agent for the Department of Treasury and the Bureau of the Fiscal Service. The ideal candidate will have a strong background in NIST-based information security control and risk management frameworks, as well as a commitment to...


  • Minneapolis, Minnesota, United States Omni Inclusive Full time

    Job Summary:Omni Inclusive is seeking an experienced Information Security Analyst to support the Bank in its role as a Fiscal Agent for the Department of Treasury and the Bureau of the Fiscal Service. The ideal candidate will have a strong background in NIST-based information security control and risk management frameworks, as well as a commitment to...


  • Minneapolis, Minnesota, United States Jack Link's Full time

    Information Security Internship OpportunityAt Jack Link's, we're committed to creating a safe and secure environment for our team members. As an Information Security Intern, you'll play a crucial role in helping us achieve this goal.Key Responsibilities:Gain a comprehensive understanding of our attack surface and identify potential vulnerabilities.Develop...


  • Minneapolis, Minnesota, United States ATPCO Full time

    Information Security Internship OpportunityAt Jack Link's, we are seeking a highly motivated and detail-oriented Information Security Intern to join our team for Summer 2025. As an Information Security Intern, you will have the opportunity to gain hands-on experience through formal and informal training, visibility into threat intelligence, analyze the...


  • Minneapolis, Minnesota, United States Wells Fargo Full time

    About this RoleWells Fargo Cybersecurity is seeking a Senior Lead Information Security Analyst to support Centralized Cybersecurity Domain Governance Program activities. The Senior Lead role will be responsible for supporting implementation and execution of Centralized Cybersecurity Domain Governance Program activities and driving consistency in the...


  • Minneapolis, Minnesota, United States Omni Inclusive Full time

    Job Title: Information Security AnalystOmni Inclusive is seeking an experienced Information Security Analyst to support the Bank in its role as a Fiscal Agent for the Department of Treasury and the Bureau of the Fiscal Service.Job Summary:The successful candidate will support the Information System Security Officer (ISSO) to ensure that all relevant IT...


  • Minneapolis, Minnesota, United States Omni Inclusive Full time

    Job Title: Information Security AnalystOmni Inclusive is seeking an experienced Information Security Analyst to support the Bank in its role as a Fiscal Agent for the Department of Treasury and the Bureau of the Fiscal Service.Job Summary:The successful candidate will support the ISSO to ensure that all relevant IT security requirements prescribed by Client...


  • Minneapolis, Minnesota, United States Wells Fargo Full time

    About this role:We are seeking a highly skilled Senior Lead Information Security Analyst to join our Cybersecurity team as part of the Identity Access Management Execution and Governance Team at Wells Fargo.Key Responsibilities:Act as an advisor to leadership to drive risk governance routines and initiatives pertaining to IAM domain health and adherence...


  • Minneapolis, Minnesota, United States TEKsystems Full time

    About the Role:We are seeking a skilled Cyber Security Analyst to join our DLP group within the Cyber Security organization. The ideal candidate will have experience with Symantec DLP and be able to write policies and rules to prevent data loss.Key Responsibilities: Develop and implement data loss prevention policies and rules Configure Symantec DLP to meet...


  • Minneapolis, United States CliftonLarsonAllen Full time

    Job Description CLA is a top 10 national professional services firm where our purpose is to create opportunities every day, for our clients, our people, and our communities through industry-focused wealth advisory, digital, audit, tax, consulting, and outsourcing services. Even with more than 8,500 people, 130 U.S. locations, and a global reach, we promise...


  • Minneapolis, Minnesota, United States FRSecure LLC Full time

    Job Title: Information Security ConsultantFRSecure LLC is seeking an experienced Information Security Consultant to join our team. As a key member of our security team, you will work closely with clients to identify and mitigate security risks, develop and implement security strategies, and provide expert advice on information security best practices.Key...


  • Minneapolis, Minnesota, United States Federal Reserve Bank Full time

    Job Title: Information Security ManagerJoin the Federal Reserve Bank of Minneapolis as we seek an experienced Information Security Manager to support our role as a Fiscal Agent for the Department of Treasury and the Bureau of the Fiscal Service.About the RoleWe are looking for a seasoned professional to lead a small team of security professionals and serve...


  • Minneapolis, Minnesota, United States Apex Systems Full time

    Sr Information Security EngineerApex Systems is a world-class IT services company seeking a highly skilled Sr Information Security Engineer to join our team.Key Responsibilities:Lead or participate in computer security incident response activities for moderately complex events.Conduct technical investigation of security-related incidents and post-incident...


  • Minneapolis, United States Jack Link's Full time

    Company DescriptionRunning with Sasquatch is more than just a clever marketing campaign. As a Jack Link s team member, Running with Sasquatch means we roll up our buffalo plaid sleeves and do the hard work first. We don t shy away from challenges. In fact, we push hard and take risks. True to our North Woods roots, we're a bunch of ordinary people who...


  • Minneapolis, United States Rose International Full time

    •**Only qualified Information Security Engineer candidates located near the Minneapolis, MN area to be considered due to the position requiring an onsite presence***Qualifications: 5 years of experience API Gateway AWS Java/J2EE expertise is neededThe Information Security Engineer will participate in driving the development and operations...


  • Minneapolis, Minnesota, United States U.S. Bank Full time

    Job Title: Senior Information Security ManagerU.S. Bank is seeking a highly experienced Senior Information Security Manager to lead our information security program and ensure the confidentiality, integrity, and availability of our systems and data.Key Responsibilities:Develop and implement information security policies, procedures, and standards to ensure...


  • Minneapolis, Minnesota, United States Hennepin County Medical Center Full time

    Job Title: Senior Information Security EngineerHennepin County Medical Center is seeking a highly skilled Senior Information Security Engineer to join our team. As a key member of our Information Security team, you will be responsible for protecting our digital information and computer network through the design, planning, implementation, and continued...


  • Minneapolis, Minnesota, United States MESSERLI & KRAMER P.A. Full time

    Job Title: Information Security Governance ManagerMesserli & Kramer P.A. is seeking an experienced Information Security Governance Manager to join our team. As a key member of our Information Security team, you will be responsible for overseeing the firm's Information Security and Governance program, ensuring compliance with internal policies and external...


  • Minneapolis, Minnesota, United States MESSERLI & KRAMER P.A. Full time

    Job Title: Information Security Governance ManagerMesserli & Kramer P.A. is seeking an experienced Information Security Governance Manager to join our team. As a key member of our security team, you will be responsible for overseeing the firm's information security and governance program, ensuring compliance with internal policies and external regulations,...


  • Minneapolis, Minnesota, United States Jack Link's Protein Snacks Full time

    Job Title: Information Security InternAt Jack Link's Protein Snacks, we're committed to creating a safe and secure environment for our team members. As an Information Security Intern, you'll play a critical role in helping us achieve this goal.Job SummaryWe're seeking a highly motivated and detail-oriented individual to join our Information Security team as...