Sr. Information Assurance Analyst

Job Title: Sr. Information Assurance Analyst

Reports To: Director of Technical Operations

iPower Technologies is a rapidly growing IT Managed Services Provider dedicated to delivering exceptional computer and network support to a nationwide clientele. We pride ourselves on offering white-glove service, ensuring the confidentiality, integrity, and availability of our clients’ proprietary and business-critical digital assets and IT estate.

Job Description:

We are seeking a motivated Senior Information Assurance Analyst to join our team. In this role, you will leverage established cybersecurity and information assurance frameworks to guide our clients through their information assurance journey. Your responsibilities will include developing and implementing policies and procedures that safeguard digital assets, providing exceptional customer service, and ensuring compliance with industry standards. You will also have the opportunity to deliver the benefits of your education and experience in a fractional/consultative/virtual advisor format as the basis for iPower’s upcoming security offerings.

Key Attributes:

• Exemplary work ethic with a self-starting and self-managing mentality
• Strong organizational skills with the ability to handle multiple concurrent tasks.
• Excellent communication skills for articulating findings and recommendations
• Detail-oriented with a commitment to accurate documentation and time logging.
• Problem-solving mindset with the ability to adapt to innovative technologies.
• Polished customer service face accustomed to presenting expert knowledge to decision makers (typically not having specific knowledge of the cybersecurity space) for cross-cutting implementation and enforcement.

Responsibilities:

Frameworks & Compliance: Utilize various compliance and security frameworks, including but not limited to:

• CIS Internet Controls
• ISO 27001 Information Security Management Systems
• ISO 27017 Information Security Controls for Cloud Services

• ISO 27004 Information Security Monitoring, Measurement, Analysis

• NIST 800-53 Security and Privacy Controls for Information Systems
• NIST Cybersecurity Framework
• Service Organization Control 2 (SOC2)

Auditing & Assessment:

• Conduct audits of servers, workstations, and holistic environments to ensure compliance with established standards and best practices.
• Assess existing policies, procedures, and documentation of both the internal organization as well as those of external clients for content, accuracy, and effectiveness.

Policy Development:

• Develop and promote standard operating procedures for internal use and client implementation.
• Function as an external consultant to assist clients in implementing, modifying, and enforcing their information assurance policies and procedures.

Technical Proficiency:

• Familiarity with Microsoft Entra ID, Office 365, and Purview.
• Experience with ConnectWise Manage PSA, NinjaOne RMM, SentinelOne MDR and Artic Wolf XDR platforms.

Customer Service:

• Provide polished customer service to assist clients in implementing and reporting on information assurance policies.