<p>obert Half is seeking a Software Engineer II – AI Engineer to analyze, design, program, debug, test, implement, and support the privacy, security, and governance controls that protect generative AI technologies. This role safeguards GenAI-enabled applications, including LLM-powered workflows, RAG pipelines, plugins, skills, and autonomous agents, by embedding data protection, security guardrails, and responsible AI governance across the development lifecycle. </p><p> </p><p>This role supports SDLC documentation across all phases, with a focus on data privacy, security guardrails, governance, compliance, and risk management. It also works with users to define requirements and support applications in production. </p><p><strong>What You’ll Do</strong> </p><ul><li>Design and implement data privacy controls, including PII/PHI detection, redaction, and data minimization. </li><li>Build security guardrails, including prompt-injection defense, jailbreak prevention, and output filtering. </li><li>Establish governance for plugins, skills, and agents, including registration, approval, and lifecycle management. </li><li>Review and vet third-party plugins, skills, and agent tools for security, privacy, and compliance risks. </li><li>Define and enforce access controls, authentication, and least-privilege permissions for AI components. </li><li>Implement guardrails for autonomous agents, including action scoping, tool-use restrictions, and human-in-the-loop approval. </li><li>Apply data classification, retention, and residency policies across GenAI data flows. </li><li>Monitor AI systems for policy violations, data leakage, and anomalous plugin, skill, or agent behavior. </li><li>Maintain audit trails and logging for plugin, skill, and agent activity. </li><li>Support compliance with regulations and frameworks, including GDPR, CCPA, and the EU AI Act. </li><li>Provide Level II production support for security, privacy, and governance incidents. </li><li>Support incident response, including containment, escalation, and remediation. </li></ul>
<p>Our client is seeking an experienced <strong>Infrastructure Security Engineer</strong> to support and secure a hybrid Microsoft environment spanning both on-premises and cloud platforms. This role is ideal for a hands-on professional with deep experience across traditional server and network infrastructure, along with responsibility for enterprise security tooling, threat monitoring, and ongoing security operations. The organization is currently in a hybrid state and actively transforming to a more cloud-centric environment, so this individual will play a key role in both day-to-day operational security and longer-term modernization efforts. Based on general knowledge.</p><p><br></p><p><strong>Key Responsibilities</strong></p><ul><li>Manage and secure core infrastructure, including servers, networks, firewalls, switches, VPNs, and related systems in a hybrid on-premises and cloud environment. Based on general knowledge.</li><li>Administer, maintain, and optimize security tools such as endpoint protection, vulnerability management, SIEM, email security, identity and access management, and monitoring platforms. Based on general knowledge.</li><li>Monitor infrastructure and security events, investigate alerts, respond to incidents, and support remediation efforts. Based on general knowledge.</li><li>Partner with infrastructure and leadership teams to strengthen security controls across Microsoft technologies, including Active Directory, Azure, Microsoft 365, and related platforms. Based on general knowledge.</li><li>Support the company’s transition from traditional on-premises infrastructure to cloud-based solutions by helping design and implement secure architectures and best practices. Based on general knowledge.</li><li>Perform vulnerability assessments, patch management coordination, system hardening, and access reviews across servers, endpoints, and network devices. Based on general knowledge.</li><li>Develop and maintain security documentation, standards, procedures, and incident response processes. Based on general knowledge.</li><li>Assist with compliance, audit readiness, and security improvement initiatives. Based on general knowledge.</li><li>Collaborate with internal teams and third-party vendors to ensure reliable infrastructure performance and effective security coverage. Based on general knowledge.</li></ul>
<p>Security Analyst with 1-2 years of experience, responsible for monitoring security alerts, investigating suspicious activity, and assisting with incident response, threat hunting, vulnerability management, intrusion detection/prevention, and log analysis. Works with senior security team members to contain and mitigate threats, escalate incidents as needed, and help strengthen the organization’s overall security posture.</p>
<p>We are seeking a Security Analyst to monitor, detect, and respond to threats across the environment. This role sits at the center of the security program, protecting systems and data while helping mature the organization's overall posture.</p><p><strong>Responsibilities</strong></p><ul><li>Monitor SIEM alerts and investigate potential security incidents</li><li>Perform triage, containment, and remediation of threats</li><li>Conduct vulnerability scanning and track remediation to closure</li><li>Support endpoint detection and response tooling and tune alerting</li><li>Assist with security awareness, phishing simulations, and user training</li><li>Contribute to compliance efforts such as HIPAA, NIST, PCI, or CIS controls</li><li>Document incidents, findings, and response actions</li><li>Partner with IT teams to harden systems and enforce security standards</li></ul><p><br></p>
<p>We are seeking a Cybersecurity Analyst to help protect enterprise systems, networks, and data. The ideal candidate will assist with security monitoring, vulnerability management, incident response, and regulatory compliance initiatives.</p><p>Responsibilities</p><ul><li>Monitor security alerts and investigate suspicious activity.</li><li>Conduct vulnerability scans and remediation efforts.</li><li>Support incident response and forensic investigations.</li><li>Review firewall, endpoint, and system logs.</li><li>Assist with security awareness programs.</li><li>Implement and maintain security controls.</li><li>Support compliance initiatives such as NIST and CIS.</li></ul><p><br></p>
<p><strong>Security Analyst</strong></p><p><br></p><p><strong>Company Overview</strong> </p><p>A manufacturing organization is seeking a Security Analyst to help protect its technology environment and strengthen cybersecurity operations. This role offers broad exposure to security monitoring, incident response, risk reduction, and security improvement initiatives.</p><p><br></p><p><strong>Role Summary</strong> </p><p>The Security Analyst will monitor and respond to security threats while helping maintain and improve enterprise security controls. The ideal candidate is hands-on, analytical, and comfortable working across security operations, vulnerability management, and incident response.</p><p><br></p><p><strong>Key Responsibilities</strong></p><ul><li>Monitor and investigate security alerts and suspicious activity.</li><li>Support incident response, investigation, and remediation efforts.</li><li>Maintain and improve security monitoring and protection technologies.</li><li>Identify vulnerabilities and coordinate remediation activities.</li><li>Support data protection, identity, endpoint, and cloud security initiatives.</li><li>Analyze security trends and recommend improvements to controls and processes.</li><li>Collaborate with technology teams on security and risk-reduction initiatives.</li></ul><p><strong>Additional Details</strong></p><ul><li>Work model: Primarily remote</li><li>Occasional travel may be required</li><li>Full-time position</li></ul>
<p>We are looking for an experienced IT security leader to oversee daily cybersecurity operations and strengthen the organization’s overall security posture in Glens Falls, New York. This role will guide security monitoring, incident response, vulnerability management, and compliance efforts while providing direction to a small team of security professionals. The ideal candidate brings both hands-on technical depth and the leadership skills needed to improve processes, manage critical tools, and support a secure technology environment.</p>
We are looking for an experienced IT Security Manager to lead security operations and strengthen cyber defense capabilities for a financial services organization in Bensalem, Pennsylvania. This role will guide daily security monitoring, incident response, and threat detection efforts while partnering with technology leaders to safeguard enterprise systems and data. The ideal candidate brings a strong background in cybersecurity operations, team leadership, and the continuous improvement of security processes, tools, and reporting.<br><br>Responsibilities:<br>• Lead daily security operations activities, ensuring effective monitoring, alert handling, and response coordination across the environment.<br>• Direct investigations into cybersecurity events, drive containment and recovery efforts, and ensure critical incidents are escalated appropriately to technical teams and leadership.<br>• Refine operating models for the security function by improving team coverage, escalation paths, service expectations, and standard procedures.<br>• Maintain and enhance operational documentation, including response workflows, playbooks, runbooks, and supporting records for consistent execution.<br>• Oversee the performance and optimization of core security technologies such as SIEM, endpoint detection, threat intelligence, and logging platforms.<br>• Expand monitoring coverage by working with infrastructure and application teams to integrate new systems and improve enterprise visibility.<br>• Strengthen detection capabilities by developing use cases, tuning alert logic, and incorporating threat intelligence into security operations.<br>• Guide proactive threat hunting efforts and track emerging attack methods, vulnerabilities, and industry developments that may affect the organization.<br>• Support audit and compliance initiatives by preserving evidence, documenting incidents thoroughly, and partnering with risk and compliance teams on remediation activities.<br>• Prepare dashboards and performance reporting that communicate incident trends, response effectiveness, operational metrics, and significant cyber risks to management.
<p><strong>Overview</strong></p><p>We are seeking a <strong>Lead Data Security Engineer</strong> to drive and enhance enterprise-wide data protection initiatives across cloud and on-premises environments. This individual will serve as a technical leader responsible for designing, implementing, and optimizing data security programs focused on <strong>Data Loss Prevention (DLP), Cloud Access Security Broker (CASB), data governance, and information protection</strong>.</p><p>The ideal candidate combines deep hands-on expertise with strong leadership capabilities, helping to safeguard sensitive data, improve security posture, support compliance initiatives, and mentor other security professionals.</p><p><br></p><p><strong>Key Responsibilities</strong></p><ul><li>Lead the design, implementation, and ongoing improvement of enterprise DLP and CASB programs.</li><li>Architect and manage data discovery, classification, labeling, and protection strategies across cloud and on-prem environments.</li><li>Drive enterprise data governance and information protection initiatives throughout the data lifecycle.</li><li>Conduct and lead DLP investigations, incident response activities, and remediation efforts involving sensitive data exposure or exfiltration risks.</li><li>Integrate data security telemetry into security monitoring and detection platforms to improve visibility and threat detection capabilities.</li><li>Partner with Security Operations and Threat Hunting teams to identify and investigate potential data exfiltration threats.</li><li>Support internal audits, compliance requirements, legal hold processes, and eDiscovery activities.</li><li>Evaluate and recommend security technologies, vendors, and platform enhancements related to data protection and cloud security.</li><li>Collaborate with infrastructure, cloud, legal, compliance, and business stakeholders to establish and enforce data protection standards.</li><li>Provide technical leadership, mentorship, and guidance to security team members and cross-functional partners.</li></ul><p><strong>*Please note: </strong>This position is onsite Monday-Friday in Johns Creek, GA. Do not apply to this posting if you're not already local to metro Atlanta and willing to work 100% onsite. No exceptions will be made.</p>
<p><strong>Senior Cloud Security Engineer</strong></p><p><br></p><p><strong>Company Overview</strong></p><p>A global firm based in Los Angeles, California is seeking a Senior Cloud Security Engineer to strengthen its cybersecurity program across cloud, data, endpoint, identity, and enterprise environments. This is an opportunity to join a collaborative technology organization where security, risk management, and operational excellence are critical to the business.</p><p><br></p><p><strong>Role Summary</strong></p><p>The Senior Cloud Security Engineer will be a hands-on member of the Information Security team responsible for securing cloud infrastructure, enterprise data platforms, endpoints, identities, and business-critical systems. This role has a particular emphasis on Microsoft Azure security and will partner closely with data engineering and technology teams to secure modern cloud-based data environments. The ideal candidate combines strong cloud security architecture and engineering expertise with practical experience across security operations, incident response, vulnerability management, data protection, and risk management.</p><p><br></p><p><strong>Key Responsibilities</strong></p><ul><li>Serve as a security engineering resource for Microsoft Azure architecture, integrations, network security, identity, access controls, secrets management, and cloud security posture.</li><li>Partner with data engineering teams to secure cloud-based data and analytics platforms through appropriate authentication, encryption, network controls, logging, and secrets management.</li><li>Review security configurations and architecture for new cloud, application, and data platform integrations prior to production deployment.</li><li>Monitor, investigate, and respond to security events involving cloud, endpoint, email, identity, data protection, and enterprise systems.</li><li>Lead vulnerability identification, prioritization, remediation tracking, patch management, and cloud security configuration improvements.</li><li>Support identity security initiatives including Microsoft Entra ID, conditional access, managed identities, least privilege, and identity governance.</li><li>Develop and enhance cloud security monitoring, alerting, data protection, and incident response capabilities.</li><li>Apply Infrastructure-as-Code practices to help automate, standardize, and enforce secure cloud configurations.</li><li>Conduct security assessments and collaborate with technology vendors and managed security providers to identify and remediate risk.</li><li>Support governance, risk, compliance, audit, business continuity, and disaster recovery activities across the organization.</li></ul><p><strong>Additional Details</strong></p><ul><li>3 days onsite, 2 days remote</li><li>Hands-on security engineering role spanning cloud infrastructure, data platforms, security operations, and enterprise security</li><li>Close collaboration with data engineering, IT, technology vendors, and managed security providers</li><li>Opportunity to work across a broad cybersecurity technology stack within a highly regulated environment</li><li>Candidates must be authorized to work in the United States</li></ul>
We are looking for a Security Forward Deployed Engineer to support cybersecurity initiatives for a long-term contract opportunity in Cincinnati, Ohio. This role focuses on strengthening network defenses, improving firewall operations, and delivering hands-on engineering support in complex enterprise environments. The ideal candidate brings strong experience with security technologies and works effectively across teams to maintain secure, reliable infrastructure.<br><br>Responsibilities:<br>• Design, implement, and support security controls that protect enterprise network environments.<br>• Administer and optimize Check Point and Cisco ASA firewall platforms to maintain strong perimeter security.<br>• Review, update, and enforce firewall rules, access policies, and segmentation standards based on business and security needs.<br>• Troubleshoot security incidents, connectivity issues, and policy conflicts across network security devices.<br>• Partner with infrastructure and operations teams to align cybersecurity solutions with technical and operational requirements.<br>• Maintain accurate configuration records and apply configuration management practices to support consistency and compliance.<br>• Assess existing firewall technologies and recommend improvements that strengthen protection and performance.<br>• Provide engineering support for security-related changes, deployments, and ongoing environment enhancements.
<p>Security-focused Database Administrator responsible for protecting enterprise Oracle and IBM DB2 environments. This role owns database hardening, least-privilege access control, activity monitoring, and audit/compliance readiness across on-premises and cloud platforms. The ideal candidate blends deep DBA fundamentals with a security-first mindset and hands-on experience with database security tooling.</p><p><strong>Key Responsibilities</strong></p><ul><li>Administer and secure production and non-production Oracle and IBM DB2 databases, with security controls as a primary responsibility rather than an afterthought.</li><li>Manage <strong>Oracle Data Safe</strong> end to end: security assessments, user risk assessments, sensitive data discovery, data masking, activity auditing, and SQL Firewall policy management.</li><li>Design, implement, and maintain <strong>row-based access controls</strong> — Oracle Virtual Private Database (VPD), Oracle Label Security, and Real Application Security; DB2 Row and Column Access Control (RCAC) and Label-Based Access Control (LBAC).</li><li>Own <strong>user maintenance and access governance</strong>: account provisioning and deprovisioning, roles, privileges, grants/revokes, profiles, and password/authentication policies.</li><li>Conduct periodic access reviews and recertification; enforce separation of duties and least-privilege principles.</li><li>Deploy, configure, tune, and monitor <strong>Imperva</strong> (Database Activity Monitoring / Data Security Fabric / database firewall): policies, alerting, blocking rules, and audit reporting.</li></ul><p><br></p>
We are looking for an experienced Penetration Tester to join our cybersecurity team and enhance the security of our Windows-based systems. The ideal candidate will play a key role in identifying vulnerabilities, conducting simulated attacks, and implementing strategies to safeguard critical infrastructure, including servers, endpoints, and Active Directory environments. This position offers an opportunity to apply advanced penetration testing techniques and collaborate with IT teams to strengthen security measures.<br><br>Responsibilities:<br>• Perform penetration tests and security evaluations of Windows environments, including Active Directory, servers, endpoints, and domain controllers.<br>• Execute red team scenarios to simulate real-world attack tactics, techniques, and procedures.<br>• Identify and exploit vulnerabilities within Windows systems, applications, and networks, documenting findings comprehensively.<br>• Develop and utilize custom scripts and tools using programming languages such as PowerShell, Python, C++, or C#.<br>• Work closely with IT teams to address security gaps and implement mitigation strategies.<br>• Prepare detailed reports outlining vulnerabilities and actionable recommendations to fortify Windows infrastructure.<br>• Stay updated on emerging threats, attack vectors, and techniques targeting Windows-based systems.<br>• Evaluate Group Policy Objects and other system configurations to ensure adherence to security standards.<br>• Support the improvement of cybersecurity practices by sharing insights and conducting knowledge transfer sessions.
We are looking for a Security Systems / IT Support Technician to provide on-site support for a university environment in Union, New Jersey. This Long-term Contract position focuses on maintaining electronic security and access control systems while also assisting with day-to-day technical support needs across campus. The ideal candidate brings strong communication skills, a service-oriented approach, and the ability to work effectively with students, faculty, and staff in a hands-on setting.<br><br>Responsibilities:<br>• Diagnose and resolve issues involving electronic security equipment and door access systems to help maintain a secure campus environment.<br>• Provide front-line technical assistance for help desk requests, supporting end users with hardware, software, and access-related concerns.<br>• Travel between university campus locations as needed to respond to service requests, perform troubleshooting, and coordinate issue resolution.<br>• Communicate clearly with campus users and internal teams to gather details, explain solutions, and ensure timely follow-up on support needs.<br>• Perform on-site support five days per week, delivering dependable technical assistance in a fast-paced academic setting.<br>• Assist with system configuration, maintenance activities, and operational support related to security infrastructure and connected technologies.
<p><strong>Job Title</strong></p><p>Data Loss Prevention (DLP) Engineer</p><p><br></p><p><strong>Company Overview</strong></p><p>A globally recognized professional services organization based in Los Angeles, California, with offices across major U.S. cities, is committed to delivering high-impact services in a highly regulated, client-centric environment. The organization prioritizes data protection, security, and compliance, leveraging advanced technology to safeguard sensitive information across a complex, distributed enterprise. Their technology teams play a critical role in maintaining trust, confidentiality, and operational excellence.</p><p><br></p><p><strong>Role Summary</strong></p><p>The DLP Engineer will serve as the dedicated owner of the enterprise Data Loss Prevention program, supporting a distributed workforce anchored in Los Angeles, California. This role is responsible for designing, implementing, and optimizing DLP strategies to protect sensitive data across endpoint, network, email, and cloud environments. The position is highly collaborative, working closely with IT, security teams, and business stakeholders to ensure secure data handling and regulatory compliance.</p><p><br></p><p><strong>Key Responsibilities</strong></p><ul><li>Design, implement, and manage enterprise DLP solutions across endpoint, network, email, and cloud platforms</li><li>Develop, tune, and maintain DLP policies, rules, and classifiers to detect and prevent data loss</li><li>Monitor DLP alerts, investigate potential data incidents, and support incident response processes</li><li>Partner with cross-functional teams to align DLP controls with business requirements and data protection policies</li><li>Integrate DLP systems with security tools such as SIEM and endpoint detection platforms</li><li>Support data classification initiatives and enforce secure data handling standards</li><li>Optimize DLP performance by reducing false positives and improving detection accuracy</li><li>Manage DLP coverage for collaboration and cloud tools including productivity and file-sharing platforms</li><li>Produce reports and metrics on DLP activity, risks, and program effectiveness</li><li>Collaborate with stakeholders on compliance requirements, audits, and data privacy initiatives</li></ul><p><strong>Compensation & Benefits</strong></p><ul><li>$150,000–$160,000 + discretionary bonus</li><li>Comprehensive medical, dental, and vision coverage</li><li>401(k) with employer contributions and profit-sharing plan</li><li>Paid vacation, sick time, and personal days</li><li>Competitive benefits package supporting overall well-being</li></ul><p><strong>Additional Details</strong></p><ul><li>Remote work environment aligned to core collaboration hours</li><li>Must be located near a major company office for occasional in-person needs: Atlanta, Austin, Boston, Chicago, Dallas, Houston, Los Angeles (HQ in DTLA), Miami, New York, Salt Lake City, San Francisco, Seattle, Silicon Valley, Washington D.C., Wilmington</li><li>Structured schedule aligned with standard business hours</li><li>High-impact role within a centralized information security team</li></ul>
<p>We are looking for an experienced compliance and regulatory specialist to support a Financial Services organization in Minneapolis, MN. This contract-to-hire role is entirely remote, and focuses on interpreting regulatory expectations for field social media activity and helping the business maintain effective controls, sound processes, and clear risk-based guidance. The ideal candidate will bring strong analytical judgment, research skills, and the ability to translate detailed requirements into practical recommendations for business partners and leadership.</p><p><br></p><p>Candidates must hold active FINRA registrations to be considered:</p><ul><li>FINRA Series 24 (General Securities Principal)</li><li>FINRA Series 7 (General Securities Representative)</li><li>FINRA Series 63, 65, or 66</li></ul><p>NICHE EXPERTISE:</p><ul><li>Broker-dealer or wealth management compliance experience focused on advisor communications, marketing compliance, and social media supervision under FINRA and SEC rules.</li><li>Direct hands-on experience utilizing communications supervision and archiving platforms such as Hearsay, Global Relay, or Yext.</li></ul><p>RESPONSIBILITIES:</p><ul><li>Review, evaluate, and supervise social media activities and marketing communications generated by financial advisors for FINRA and SEC compliance.</li><li>Conduct regulatory research, interpret rules and industry guidance, and translate findings into practical supervisory controls and procedures.</li><li>Identify compliance deficiencies, deliver constructive feedback to field representatives, and drive corrective actions.</li><li>Execute compliance testing, monitoring, and oversight activities across digital communication channels.</li><li>Consult with legal, marketing, and business leaders to support strategic growth while mitigating regulatory exposure.</li></ul>
We are looking for an AI Security Architect to help shape and strengthen the security posture of enterprise AI capabilities in Pennsylvania. This contract opportunity is ideal for a security specialist who can guide the safe adoption of AI platforms, agent-based tools, and AI-assisted development practices while aligning with internal standards and regulatory expectations. The role works closely with technology, risk, compliance, and business teams to evaluate emerging capabilities, address evolving threats, and support responsible innovation.<br><br>Responsibilities:<br>• Develop and refine security architecture for AI platforms, intelligent agents, and AI-assisted coding solutions to support secure deployment and ongoing operations.<br>• Assess platform enhancements, configuration updates, and newly introduced AI features to identify potential risk and recommend practical safeguards before implementation.<br>• Establish and improve protective controls for AI environments, including permissions, monitoring, logging, data safeguards, and usage restrictions.<br>• Analyze how sensitive and regulated information is handled within AI workflows, and support governance efforts related to classification, labeling, and responsible data use.<br>• Review connectors, plugins, integrations, and agent-driven capabilities to confirm appropriate access levels and reduce exposure across teams and systems.<br>• Conduct structured security evaluations of AI tools, models, and services to verify alignment with internal policies and relevant industry guidance.<br>• Research new AI security technologies and threat patterns, including prompt-based attacks, model misuse, and unintended data exposure, and identify opportunities for improvement.<br>• Partner with stakeholders across IT, risk, compliance, and business functions to communicate findings and advance secure AI adoption.<br>• Support secure software development by reviewing AI-generated code practices and incorporating AI-focused security checks into engineering workflows.<br>• Produce meaningful security metrics, including key risk and performance indicators, to strengthen monitoring and decision-making for AI security operations.
We are looking for an experienced Security Analyst III to join a long-term contract opportunity in Providence, Rhode Island. This role focuses on monitoring cyber threats, investigating security events, and strengthening enterprise network defenses through risk-based analysis and operational support. The position also plays a key part in firewall security administration, helping ensure access controls, policy decisions, and remediation activities align with cybersecurity standards and business needs. Shift coverage is required for this role.<br><br>Responsibilities:<br>• Monitor security platforms and related data sources to identify suspicious activity, unauthorized access attempts, intrusion indicators, and compliance-related concerns across the network environment.<br>• Investigate security alerts and incidents, perform root-cause analysis, and document findings to help reduce repeat issues and improve response effectiveness.<br>• Track and report network and cybersecurity events, maintaining accurate records of incident status, impact, and remediation progress.<br>• Troubleshoot security and network issues, recommend corrective actions, and support timely recovery of secure services while minimizing operational disruption.<br>• Assist with targeted system or network configuration updates that enhance protection measures and support regulatory or policy-driven security requirements.<br>• Evaluate firewall requests and existing rule sets to identify excessive access, configuration weaknesses, policy conflicts, and opportunities to reduce risk.<br>• Recommend and support firewall modifications, policy cleanup efforts, and recertification activities to improve compliance, strengthen least-privilege access, and address audit findings.<br>• Review firewall configurations against security baselines and hardening expectations, and use policy analysis tools to assess rule effectiveness and exposure.<br>• Partner with infrastructure and operational technology teams to help design, test, and implement firewall changes with limited business impact.<br>• Contribute to incident response activities and support ongoing security operations performed during scheduled shift coverage.
<p>We are seeking an experienced <strong>PCI Technical Engineer</strong> to help build, strengthen, and automate a PCI DSS compliance program within a highly regulated financial services environment.</p><p>This is a hands-on role for someone who understands PCI DSS at a deep level and has <strong>built and matured a PCI program from the ground up</strong>. The ideal candidate will have experience defining PCI scope and boundaries, understanding the Cardholder Data Environment (CDE), establishing and validating controls, supporting audits, remediating findings, and continuously improving the program.</p><p>This role is also focused on <strong>automation and process improvement</strong>. We are looking for someone who is a creator and problem solver—someone who sees a manual process and asks, <em>“How can we make this better and automate it?”</em></p><p>What You’ll Do</p><ul><li>Build, implement, and mature <strong>PCI DSS compliance programs</strong> from the ground up.</li><li>Define and maintain <strong>PCI scope and boundaries</strong>, including identifying systems, applications, networks, processes, and people that fall within PCI requirements.</li><li>Develop a strong understanding of the <strong>Cardholder Data Environment (CDE)</strong> and how payment card data moves through the environment.</li><li>Establish, document, and validate technical and administrative controls required for PCI DSS compliance.</li><li>Lead PCI audit preparation, evidence gathering, auditor coordination, remediation, and ongoing compliance activities.</li><li>Gather and validate technical artifacts and evidence required to demonstrate compliance.</li><li>Identify control gaps and partner with technical teams to develop and implement remediation plans.</li><li>Continuously assess and mature the PCI program as the technology environment and business requirements evolve.</li><li><strong>Automate PCI evidence collection, control validation, reporting, and other repetitive compliance processes.</strong></li><li>Identify opportunities to automate manual GRC and Information Security processes beyond PCI.</li><li>Develop repeatable processes and solutions that improve efficiency, accuracy, and audit readiness.</li><li>Support internal audits and financial services regulatory examinations.</li><li>Document technical processes and controls in a clear and accurate manner.</li><li>Develop metrics and reporting that communicate compliance, control effectiveness, risk, and remediation status to leadership.</li><li>Partner with Information Security, Infrastructure, Application, Risk, Audit, and other technical teams.</li><li>Help establish and maintain security policies, standards, procedures, and controls related to PCI and Information Security.</li></ul>
<p>We are looking for an experienced Identity Access Analyst to join our Information Technology team in Glens Falls, New York. This position plays a key role in advancing identity and access practices, improving control over user permissions, and supporting audit and cybersecurity objectives across the organization. The ideal candidate brings strong expertise in access governance, authentication technologies, and secure account administration within enterprise environments.</p>