Information Security Analyst I

New York, NY

On-Site (Omni-Work Policy) – Full Time – Associate Level

ROLE AND DEPARTMENT

The position of Information Security Analyst will report to the Director of Information Security and is responsible for supporting corporate information security initiatives to ensure the protection of the company’s information assets. The Information Security Analyst will be responsible for performing regular operational security functions, ongoing compliance-related activities, and conduction security assessments across various technologies. This position will serve as a project member on multiple projects simultaneously and will interact regularly with technical subject matter experts.

The ideal candidate will hold a Bachelor of Science degree in Information Security and have at least 4 years of experience in a Security or Technology role. The candidate must possess a strong understanding of the role of Information Security Policies and Standards and a strong understanding of vulnerability management including penetration testing, and risk frameworks.

THE ROLE

In this role you will be responsible for:

Execution of information security reviews against infrastructure, applications, and vendor services (cloud platforms).
Vulnerability identification and remediation
Execution of security root cause analysis and forensics as part of the enterprise’s Cyber Incident Response Plan.
IT compliance monitoring and issue lifecycle reporting.
Support multiple Information security projects, including; Administrator Activity Monitoring, Security Event and Incident Management, and General Security Administration.
Support the Global Privileged Access Entitlement Review Process.
Coordinate activities of vendors performing penetration tests.
Participation in various programs and initiatives supporting the further implementation of the company’s Information Security Policies and Standards.

What You’ll Bring

We’d love to see candidates who have:

Strong foundation in information technology and information security principles.
Strong knowledge of current security threats, techniques, and landscape, as well as a dedicated and self-driven desire to research current information security landscape.
Experience in threat modeling to identify risks posed by new technologies or implementations.
Familiarity with forensic tools used as part of security event investigations.
Possession of or ability to obtain professional certifications in information security or risk management, such as a CISSP, CEH, CISM or CRISC.
Basic knowledge of security and control frameworks, such as NIST CSF, ISO27001/2, COBIT, ITIL, and CIS.
Interpersonal and collaborative skills and the ability to communicate security and risk-related concepts to technical and nontechnical audiences.
Innovative, creative, curious and passionate about security and information technology.
High degree of initiative, dependability and ability to work with little supervision.
Proficiency in Office365 tools and collaboration technologies.
Ability to formulate a clear and actionable plan and execute against it.

EQUAL EMPLOYMENT OPPORTUNITES

We offer equal employment opportunity to qualified individuals without regard to race, religion, color, national origin, age, gender, disability, sexual orientation, gender identity, gender expression, marital status, veteran status, or any other characteristic protected by law. Coty complies with federal and state disability laws and makes reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact cotyjobsUS@cotyinc.com . We strongly believe that cultivating a diverse workplace gives a company strength. The combination of unique skills, abilities, experiences and backgrounds creates an environment that produces extraordinary results. EOE Minorities/Females/Protected Veterans/Disabled.

English - Please click on this link to review the Notification of Equal Opportunity Rights poster

Español - Por favor, haga un clic en el enlace para revisar el poster de la Ley de los Derechos de Igualdad de Empeo

Per the NYC Vaccine Mandate, COVID-19 vaccinations are required to work in any Coty office, Retailer, or partner facility. You may find Coty’s NYC Covid-19 Vaccination Policy here .

Coty

New Jobs

Information Security Analyst