Information Security Analyst

Who We Are:

It's exciting, to find yourself standing in a pivotal moment in time. It’s even more exciting to be out front leading it. At QTS, our world-class data centers are supporting our customers most strategic growth initiatives, positioning us at the forefront of today’s dynamic digital transformation.

As AI and cloud drive the demand for increased speed, capacity and capability, QTS has emerged as the global digital infrastructure leader, committed to connecting the world for good. Driven by purpose and fueled by a spirit of innovation, QTS designs, builds and operates some of the world’s most advanced, forward-thinking data centers. QTS is a portfolio company of Blackstone. 

QTS is Powered by People. People who play a vital role in our company’s culture, innovation and growth. People who are committed to contributing to the communities where we operate and work. People who are knowledgeable, resourceful and mission driven. Together, we do great things.

The Impact You Will Have:

The Information Security Analyst (ISA), will be a contributing member of the Information Security Office (ISO) in the design,  support, and execution of information security solutions and services using a risk based approach. The ISA will work directly with all QTS business units in support of maintaining and identifying opportunities to improve the information security posture of both QTS and its customers. The ISA will be an active participant in the daily execution of information security related compliance controls including monitoring, scanning, analysis, reporting, validation, and evidence archival. Where appropriate, the ISA will serve QTS and its customers in a consultative role as a corporate information security subject matter expert, SME. Prospective candidates will have solid and proven experience in information security and compliant controlled environments. Strong time management, organizational, and multi-tasking skills are crucial to ensuring success in this position.

What You Will Do:

• Provide technical, business, and information security analysis support in the design, development, and implementation of vulnerability management processes.
• Own and manage roles, groups and permissions within assigned information security tools.
• Organize and prepare various vulnerability scan result outputs and reports.
• Provide statistical reports to management on vulnerability remediation progress.
• Serve as primary contact for technical vendor management for assigned tools.
• Lead the execution, organization, verification, reporting, and evidence archival of User Access Certification campaigns.
• Coordinate multiple vendor and authoritative resource vulnerability notifications to aggregate a weekly internal notification to all QTS technical lines of business.
• Review and analyze daily audit reports for indications of possible information security incidents and indicators of compromise.
• Contribute to the management and scheduling of information security and compliance related vulnerability scans.
• Participate in the vulnerability management process through the review, analysis, validation, reporting, and evidence archival of remediation efforts.
• Provide advice on information security issues related to the systems and workflows at QTS to ensure internal security controls for the organization are appropriate and operating as intended to meet compliance requirements.
• Participate in information security incident response activation as necessary.
• Contribute to the performance of regular corporate risk assessments and business impact analyses.
• Provide information security advice and guidance to Corporate Lines of Business (LOBs).
• Assist management with the development and publishing of Information Security policies, procedures, standards and specifications.
• Participate in Corporate and Client facing audit engagements, as requested, to ensure QTS adherence to applicable standards and compliance initiatives (e.g. NIST, FedRAMP, PCI DSS, SOC I & SOCII, and others)
• Collaborate with QTS business units and law enforcement agencies to manage security vulnerabilities.
• Participate in the design, review, and support of information security solutions to reduce the Corporation's risk profile (e.g. Network/Host IDS, Vulnerability Scanning and Management, & Incident Response)
• Conduct security research towards keeping abreast of the latest information security issues; researching and reporting on security trends and emerging industry solutions.

What You Need to Be Successful:

• 4 year degree in computer science or related field or equivalent experience.
• Minimum of 5+ years in Information Securi