Technical Cybersecurity Associate

As a Cybersecurity Analyst, you will be part of our Cybersecurity Department that covers information security, privacy, and product security risks and certifications. You will report to the Cybersecurity Manager - Assurance. In this role, you will collaborate with members of InterSystems Technical Services, Managed Services, and Risk & Compliance teams to provide risk management and assurance support across InterSystems products, services, and operations.

• Reports to the Cybersecurity Manager - Assurance.
• Collaborates with the Senior Cybersecurity Manager – Operations as part of engagement with operational functions.
• Partners with Managed Services (hosting and operations in private and public cloud) and Technical Services (internal IT) teams to provide risk management and assurance support.

This role focuses on technical assurance and operations activities with a focus on collection and coordination of operational data as evidence to support external audits and certifications, the cybersecurity internal audit program, customer cybersecurity operations inquiries, and risk assessment/control validation across products, services, and operations.

• Coordinate across stakeholders to gather information and evidence supporting cybersecurity assurance activities.
• Maintain clear documentation of requests, responses, and remediation actions to support traceability and repeatability.
• Coordinate the collection and provision of evidence in support of cybersecurity audits including SOC2, ISO 27001, HITRUST, and FedRAMP.
• Support risk management and assurance activities across products, services, and operations.
• Support subject matter experts in the development, implementation, and maintenance of documentation.
• Participate in Information Security Management System (ISMS) activities in alignment with ISO 27001, HITRUST, AICPA Trust Services Criteria, NIST CSF and/or other leading business and IT control frameworks.
• Assist with readiness exercises in preparation for external assessments.
• Respond to customer security questionnaires and inquiries in accordance with internal control principles and business/technical knowledge.
• Conduct internal evaluations as part of the Cybersecurity internal audit function.
• Collaborate with subject matter experts at InterSystems to remediate identified deficiencies.
• Identify key risks and controls within a distributed, international organization.
• Support investigations or evidence gathering as needed in coordination with operational teams.
• Leverage AI tooling where appropriate to improve process efficiency.

• Experience: 1–3+ years of experience in one or more of the following areas: cybersecurity, IT risk, audit, cybersecurity operations (or equivalent transferable experience).
• Education: Bachelor’s degree in a related field (e.g., Cybersecurity, Computer Science, Information Systems, Business) or equivalent practical experience.
• Technical Foundations: Foundational understanding of networking and operating systems, including how logs/telemetry are used for monitoring and investigations.
• Computing environments: Exposure to and some experience with different computing environments, such as Kubernetes platforms, virtual machines, and infrastructure as code.
• AI: Demonstrate understanding of AI and how it could be used in this position.

• Frameworks & Controls: Familiarity with at least one cybersecurity/control framework or audit standard (e.g., NIST CSF, HITRUST, ISO/IEC 27001, SOC 2, CIS Controls, FedRAMP).
• Cloud/Infrastructure: Exposure to or certifications related to Kubernetes and/or major cloud platforms (AWS, Azure, Google Cloud).
• Certifications (general/cybersecurity foundations): Security+, Network+, A+ (or equivalent foundational credentials).
• Tooling & Platforms: Experience with ticketing/work management and documentation tools (e.g., Jira, Confluence, ServiceNow) and/or GRC platforms; familiarity with dashboards/reporting tools (e.g., Excel/Google Sheets; Power BI/Tableau).
• Assurance experience: Prior experience supporting third-party assessments, customer cybersecurity questionnaires, audit evidence collection, or certification readiness activities.

We are an equal-opportunity employer and do not discriminate because of race, color, religion, sex, national origin, ancestry, marital status, veteran status, age, disability, sexual orientation or gender identity or expression or any other legally protected category. InterSystems is an E-Verify Employer in the United States.