Information Security Analyst

Support information security governance, risk, compliance, and security operations for Hellmann Worldwide Logistics across the Americas (AMCS).

Responsibilities

• Help develop, review, and enforce regional Information Security Standards (policies) for the Americas.
• Lead Governance, Risk, and Compliance (GRC) activities, including risk management, compliance reviews, and control validation.
• Identify, quantify, monitor, and report information security risks, and perform impact analysis using risk quantification controls in Jira.
• Perform security reviews of contracts and agreements, identify security-related legal implications and risks, and escalate concerns as needed.
• Support ISO 27001 and related framework activities, including framework assessments, governance reviews, and control validation.
• Review, update, and maintain regional security policies and supporting documentation to ensure policies remain current before expiration.
• Publish and maintain security policies and procedures in SharePoint.
• Translate global security policies into regional Standard Operating Procedures (SOPs) aligned with regional and local laws and regulations.
• Monitor regional and local laws and regulations that affect information security.
• Coordinate vulnerability management, security scanning, and remediation tracking using tools such as Nessus, SAST, and DAST.
• Support penetration testing and red team / blue team / purple team activities, and drive remediation identified by global and regional security teams.
• Monitor security system health (for example: patch management, antivirus, endpoint protection) and report KPIs and project status.
• Initiate and monitor implementation of security safeguards in line with global standards and aligned to the global cybersecurity team.
• Validate security tooling outputs and support security control validation for production releases.
• Investigate, document, and report security incidents, including impact analysis and coordinated response support.
• Support maintenance of the Disaster Recovery Plan (DRP) and Business Continuity Management (BCM) framework.
• Act as backup to the DevSecOps / secure-delivery Security Analyst for secure-pipeline and production-release security coverage.
• Participate in production release readiness reviews to validate security requirements prior to release.
• Support integration of security controls into CI/CD pipelines and collaborate with development and ServiceDesk Ops teams on secure code deployment.
• Support SAST/DAST scanning and vulnerability remediation across the software delivery lifecycle.
• Serve as a bridge between Global Security Governance, the Global CISO organization, Regional IT, and Country IT teams to align activities with global standards.
• Support global security projects, share best practices, and transfer knowledge across global, regional, and local levels.
• Be a first-level interface for security-related customer inquiries and support Sales with security RFI/RFQ responses, customer security surveys, questionnaires, and audits.
• Collaborate with Network, Server, local and country IT teams, regional IT leadership, and global security teams.
• Initiate and coordinate security awareness and training activities focused on risks, attack patterns, and secure practices.
• Provide security guidance to regional and local teams, influence decisions, and escalate security risks appropriately.
• Perform other job-related assignments and fulfill responsibilities as required.

Requirements

• Bachelor’s degree (B.S.) in Computer Science, Information Technology, Cybersecurity, or related field; or an equivalent combination of education and experience.
• Minimum 2 years of technical experience in Information Security or a related IT security discipline.
• Preferred experience with GRC frameworks including risk management, auditing, and compliance.
• Professional understanding of security standards, vulnerability management, and IT infrastructure.
• English required.
• Ability to read, analyze, and interpret complex documents and respond effectively to sensitive inquiries from managers, staff, and customers.

Technical Tools & Knowledge

• Technologies: Jira, SharePoint, ISO 27001, Nessus, SAST, DAST, CI/CD, GDPR, CIS, NIST, EDR/NDR, firewalls, Microsoft Intune, Entra ID, Kali Linux, Python, Bash, Kanban.
• Certifications (welcome): CISSP or other Information Security certifications (not required).
• Knowledge of IT regulations (for example, GDPR), ISO standards (for example, ISO 27001), CIS, and NIST.
• Familiarity with vulnerability scanners (for example, Nessus), EDR/NDR, firewalls, Microsoft Intune, and Entra ID.
• Familiarity with SAST/DAST tooling and CI/CD security concepts is a plus.
• Basic programming/scripting skills (for example, Python, Bash) for automating security tasks is a plus.
• Experience with Kali Linux, Kanban, and Jira is a plus.

Preferred Skills & Attributes

• Strong sense of ownership and follow-through with proactive communication.
• Strong communication skills, including translating technical risk into business language for non-technical stakeholders.
• Strong analytical and organizational skills with attention to detail.
• Process-oriented mindset and ability to work effectively under pressure.
• Positive attitude, humility, teamwork, and willingness to learn and mentor others.
• Ability to adapt and engage in continuous learning to stay current with security practices and tools.

Language Skills

• English required.
• Spanish recommended and considered an asset for this regional role.

Benefits

• Base compensation range: $80,000.00 to $90,000.00 (annual).
• Competitive health and welfare programs.
• 401(k) retirement savings plan.
• Opportunities for tuition assistance.
• Incentive compensation for eligible positions.
• Salary determination considers skills, experience, job location, internal pay equity, and job architecture.
• Hellmann Worldwide Logistics regularly reviews pay ranges against industry standards to ensure fairness.

Location & Work Style

• Miami, FL (onsite).
• Travel may be required.