Information Security Analyst

Dhaka Technologies Limited Company | Contract

Stamford, United States | Posted on 02/26/2026

Dhaka Technologies Limited is seeking a highly experienced Information Security Analyst to support a municipal-level cybersecurity program for a valued client. This role will operate under executive cybersecurity leadership andwill be responsible for strengthening enterprise-wide security posture,ensuring regulatory compliance, and protecting critical infrastructure,systems, and sensitive data.

The selected professional will lead risk management initiatives, implement security controls, conduct assessments and audits, and serve as a strategic advisor on emerging cyber threats and mitigation strategies.

The Information Security Analyst will design and operationalize a comprehensive security program to ensure the confidentiality, integrity, and availability(CIA triad) of enterprise systems.

Thisrole requires close collaboration with IT, Legal, compliance stakeholders, and departmental leadership to establish governance frameworks, risk methodologies,and operational security controls aligned with federal cybersecurity standards.

Security Governance & Policy Development

• Develop,implement, and maintain information security policies, standards, and procedures.
• Establish and maintain the organization’s IT risk taxonomy, risk register, and control inventory.
• Ensure alignment with federal and industry frameworks including NIST, FISMA,FedRAMP, ISO 27001, and CIS Controls.
• Designand implement a structured annual Technology Risk and Control Self-Assessment (RCSA) framework.

Risk Management & Assessments

• Conduct targeted and ad hoc risk assessments across infrastructure, applications,and networks.
• Perform vulnerability scans and coordinate remediation efforts.
• Conduct
  
  SOC (System and Organizational Controls) testing and audits focused on operational integrity and data security.
• Participate in audits, compliance reviews, and POA&M development and tracking.

Security Operations & Incident Response

• Monitor,analyze, and respond to security events across enterprise systems.
• Investigatecybersecurity incidents and lead containment, remediation, and recovery efforts.
• Maintain and optimize security tools including: SIEM platforms, IDS/IPS systems,Data Loss Prevention (DLP) solutions, Endpoint protection tools
• Develop and maintain processes for threat intelligence monitoring and collaboration.

Advisory& Stakeholder Engagement

• Serveas the primary advisor on cybersecurity risks, trends, and mitigation strategies.
• Provide security awareness training to employees and stakeholders.
• Communicate technical risk findings in executive-ready formats.
• Collaborate cross-functionally to strengthen enterprise security maturity.
• ITRisk Taxonomy aligned with NIST Risk Management Framework (RMF)
• Application and Infrastructure Risk Assessment Methodologies
• SOC Testing Framework and RCSA Implementation Model
• Threat Intelligence and Collaboration Process Documentation
• Compliance and remediation tracking documentation

• 8–10years of progressive experience in Information Security, Risk Management, or IT Security Operations.
• Demonstrated experience developing enterprise security programs in regulated environments.
• Strong expertise with: SIEM solutions, IDS/IPS, Firewalls, Endpoint protection tools, Vulnerability management platforms
• Working knowledge of Zero Trust architecture principles.
• Deep understanding of cybersecurity frameworks including: NIST Cybersecurity Framework 2.0, NIST RMF, ISO 27001, CIS Controls
• Experience supporting cloud security environments (AWS, Azure, Gov Cloud).
• Strong analytical, investigative, and written communication skills.

• Experience working within municipal, state, or federal government environments.
• Relevant certifications such as: CISSP, CISM, CRISC, CEH, GIAC certifications
• Experience managing POA&M remediation cycles and compliance reporting.
• Security Governance & Compliance
• SOC& Control Testing
• Incident Response Leadership
• Zero Trust Architecture Principles
• Cross-Functional Stakeholder Collaboration