Information Security Risk Analyst II
Mariner Finance · Nottingham, MD, US
About this role
**Information Security Risk Analyst II** **Base Salary Range:** USD $93,772.38 – USD $118,076.32 /Yr **About Mariner Finance** Since 1927, Mariner Finance has provided customers with creative, flexible, and convenient lending options. Headquartered in Baltimore, Mariner Finance operates coast-to-coast with physical locations in over half the states. The company’s focus is exceptional customer service and delivering a variety of loans. **Benefits** For benefits details, visit: https://www.marinerfinance.com/careers/benefits/ --- ## Job Details In this role, you will support daily information security risk operations by performing vulnerability assessments and helping mitigate security risks to maintain **availability, integrity, and confidentiality**. ### Responsibilities and Duties - Ensure Mariner’s adherence to industry standards and best practices across security responsibilities (datacenters, networks, telephony, systems, databases, applications, and physical security systems). - Support Mariner Finance’s **Payment Card Industry (PCI)** program. - Provide technical expertise and guidance to senior management on security issues. - Assist with creating and distributing security communications (e.g., blog posts, job aids). - Contribute to security policies and procedures across planning, implementation, training, and monitoring/enforcement. - Help ensure appropriately managed controls meet legal and regulatory compliance requirements. - Validate and test security architecture/design solutions and produce engineering specifications with recommended vendor technologies. - Build and maintain relationships with internal teams and third parties for security development and support. - Participate in vendor management processes to protect corporate and customer data. - Work with the legal team to evaluate security controls. - Collaborate with senior team members to define corporate security requirements and evaluate systems against established standards. - Perform internal risk assessments with IT staff and business units. - Manage external risk assessments/third-party and internal audit processes with IT and Compliance. - Validate results of internal/external risk assessments and deliver prioritized remediation plans. - Track and coordinate remediation validation. - Provide oversight for: awareness program, privilege management system, brand protection technology, and enterprise managed security service provider. - Serve as a member of the Security Incident Response Team and provide high-level technical consultancy to resolve issues quickly. - Participate in investigations of security incidents and prepare incident report documentation. - Perform additional functions as needed to support consistent quality customer service. --- ## Required Qualifications - Bachelor’s degree in a related discipline (Computer Science, Information Systems Management, Engineering, or similar); additional applicable experience may substitute. - Minimum **5 years** of security administration and vulnerability assessment/management experience. - Certifications: **CISA / CISM** - Strong system administration experience in **Microsoft Windows** environments. - Strong scripting experience to automate tasks and manipulate data. - Experience creating technical diagrams, topology maps, reports, and presentations. - Ability to explain complex concepts to both technical and nontechnical audiences (verbal and written). - Ability to collaborate across departments and
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.