Security Analyst II (60130)

Overall Summary: As a member of the Security Team, the Security Analysts are responsible for the management of the governance, risk, and compliance aspects of AAA Northeast.
The Security Analyst provide security recommendations on projects across the Club and ensure that the Club stays compliant with its various regulations and standards.
Summary: The Security Analyst II will support the risk management, audits, and compliance programs at AAA Northeast. They will lead some of the initiatives carried by the team of Security Analysts. Those programs align with various standards like NIST, PCI-DSS, as well as the AAA Cyber Security Quality Standard and include the vulnerability and threat intelligence management.

• Manage compliance with various IT standards and regulations by:
  • Tracking compliance with the standards
  • Identifying  gaps between our current controls and the requirements and tracking the action
  • Providing guidance to the security engineers and the business lines to implement the necessary controls
  • Organizing and assisting external auditors with their assessment of the AAA Northeast compliance or security posture
  • Providing dashboards and status updates for the management
• Oversee the vulnerability management process by:
  • Managing and assessing the efficiency of the vulnerability management process (including patch management)
  • Collaborating with other teams to implement the relevant remediations
  • Assessing the efficiency
  • Providing dashboards and status updates for the management
• Participate in the risk management operations by:
  • Completing necessary third-party vendor due diligence documentation
  • Providing security analysis of the risks and threats during projects and recommendations on the security controls needed to meet AAA Northeast security expectations and requirements
  • Developing regular and automated controls of the infrastructure to ensure that the security baseline is met and that services do not deviate from it
  • Recommending specific areas to focus on and audit
• Become a key reference for our internal partners when it comes to security and compliance by:
  • Partnering with all levels of IT and Business Line management to ensure that security testing is conducted in a cooperative, timely and efficient manner
  • Collecting business lines needs and specific risks to take into account in our risk management program

Education:

• Associates in Computer Science, Business Analytics, or other related field
• Bachelor's preferred

Certifications Preferred: 

• CompTIA Security+, CISSP, or other security certifications are a plus
• The position is required to get at least its CompTIA Security+ during the first year of employment

Experience:

• 3+ years related IT experience, preference for information security or risk management 

Skills:

• Ability to travel domestically.
• Ability to work occasional off hours as well as part of a 24x7 on-call rotation

Technical Skills:

• Knowledgeable in vulnerability management and assessment technologies (i.e. vulnerability scanners)
• Knowledgeable in information security risk and threat assessment
• Ability to think analytically, communicate complex issues, and develop control recommendations
• Knowledgeable regarding technology auditing control disciplines including thorough and general knowledge in security and one or more relevant areas of technical specialization; application development, change management, or operations
• Effective written and verbal communication skills with the ability to present control analysis and recommendations with clarity and professionalism
• Ability to work independently, set project goals, and achieve milestones with minimal direction
• Ability to work collaboratively, across teams, driving toward common goals, and working within standardized processes

Why AAA Northeast

Career Growth: With ongoing world-class training and proven career paths, you'll have the opportunity to develop expertise and advance your career within AAA Northeast.
Trusted Legacy: With over 120 years of service excellence, we have a long track record of protecting our members as well as our employees and their families.
Future-Focused: With new business offerings and increasing digital presence, we are focused on innovating for the future to sustain our success.

What We Offer

• Award-Winning: We’ve been named as a Top Employer for the last 7 years
• Health Coverage: Medical coverage with employer contributions covering up to 93% of the premium cost, plus dental and vision options.
• Retirement: 6% company match on 401(k) retirement plan contribution, with contributions fully vested and made every pay period
• Paid Time off: 3 weeks’ vacation, 12 holidays, 8 sick days, 48 hours of volunteer time annually
• Additional Perks: Free AAA membership, insurance discounts, travel commission refund, up to $625 in Wellness Incentives, up to $6k in tuition reimbursement, and more!
• Compensation: Competitive base pay, annual bonus opportunities, and for certain roles, additional monthly and/or quarterly incentive compensation. The posted salary range represents the full range grade for this role, with individual pay based on job-related skills, experience, shift, and geographic location.

At AAA Northeast, how we work together matters. We are a highly collaborative organization that values connection, transparency, and trust. Our “cameras on” approach during virtual meetings reflects our expectation that team members are present, engaged and actively participating, helping to build strong working relationships and a sense of shared accountability, no matter where we’re located.

We are also proud of our diverse culture, shaped by the talents, experiences, and perspectives of our employees. AAA Northeast is an equal opportunity employer and is committed to fair and equitable practices in recruiting, hiring, and advancement. We do not discriminate based on race, color, creed or religion, national origin, sex, age, sexual orientation, veteran status, gender identity or expression, disability, genetic information, marital status, pregnancy, or membership in any other protected class. We thrive when our team members bring their whole selves to work.