IT Operations Security Analyst w/ GRC Exp| Midshift | Hybrid

Infinit-O isn’t just about business process optimization, we’re about people. For over 20 years, we’ve been helping some of the world’s fastest-growing companies in Financial Services, Healthcare, and Technology achieve multiple strategic advantages through data-driven solutions, high-performance teams, and cutting-edge technology. Our world-class Net Promoter Score of 75 reflects our commitment to excellence and client satisfaction.

But what truly sets us apart is our culture. At Infinit-O, we believe that diversity, equity, and inclusion are the foundation of innovation and sustainable growth. We embrace differences, empower perspectives, and create equal opportunities for everyone. Our people-first approach has earned us the Great Place To Work Certification three times, and as a B Corp Certified company, we’re dedicated to making a positive impact not just in business, but in the communities we serve.

With a highly engaged and innovative team, we don’t just optimize processes, we also create meaningful change.

• Serve as a security incident responder, coordinating with the necessary team to address issues.

• Conduct regular systems risk and vulnerability assessments, monitor progress, and ensure compliance with current security standards.

• Conduct internal and external penetration tests, to assess the effectiveness of security measures and identify areas for improvement.

• Conduct systems and processreview / audits and identify security gaps.

• Collaborate with the IT security head to review or develop an incident response plan that outlines procedures for identifying, responding to, and recovering from security incidents.

Requirements

• Technical Skills:

  • Strong analytical and problem-solving skills

  • Knowledge of security technologies, including firewalls, intrusion detection systems, encryption, and incident response

  • Experience with security software and tools

  • Ability to write clear and concise technical documentation

  • Ability to work independently and as part of a team

  • Certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Offensive Security Certified Professional (OSCP) are a plus.

  • Familiarity with scripting languages (Bash, PowerShell) for automating tasks is a plus.

• Soft Skills:

  • Excellent communication and interpersonal skills for conveying security risks and incidents to both technical and non-technical stakeholders.

  • Ability to work under pressure

  • Strong ethical and legal judgment

  • Commitment to lifelong learning

• Experience:

  • Must have practical experience in security analysis, incident handling, and threat intelligence.

  • Must have experience with security tools such as SIEM (Security Information and Event Management) systems, antivirus programs, and intrusion detection/prevention systems, and vulnerability scanners.

  • At least 5 years of experience working as a Network/Systems administrator or equivalent

  • At least 3 years working on IT security administration or equivalent