{"schemaVersion":"jobsearcher.job.v1","id":"f36b0e30cba22eb7d7f1de65","url":"https://jobsearcher.com/jobs/f36b0e30cba22eb7d7f1de65","canonicalUrl":"https://jobsearcher.com/jobs/f36b0e30cba22eb7d7f1de65","title":"Information Security Analyst","description":"For more than 30 years, ECI Software Solutions has been providing industry-specific, cloud-based business management software and services to small and medium-sized businesses. With divisions focused on manufacturing, wholesale/retail distribution, building and construction, and field service, ECI's solutions integrate into every aspect of a customers' business to help them level the playing field, run day-to-day operations more efficiently, and free them up to focus on what matters most. It’s how business gets done.\n\nWho is ECI?\n\nAt ECI, our mission is to enable the entrepreneurial spirit of small and medium-sized business owners. But ECI doesn’t simply deliver amazing software solutions; we also have an award-winning company culture.\n\nWe offer competitive benefits focused on employee well-being, including paid volunteer time off!\nWe have been named by Achievers on its prestigious 50 Most Engaged Companies To Work For list for the last five years.\nWe have received international recognition for our high levels of employee engagement through Certification as a Great Place to Work six years in a row.\nOur culture of creativity, innovation, and leadership has garnered over a dozen International Business Awards (Stevie®).\nCome join a worldwide team with a strong culture of inclusion, professional development, and collaboration.\n\nTo apply for this position, please attach a detailed resume that demonstrates your qualifications and skill set pertaining to this position. Applications without a resume will not be considered.\n\nECI delivers cloud-based business critical ERP, CRM and line of business applications to more than 20,000 customers across the globe. The Information Security Analyst works as part of ECI’s Information Security team and will lead our cybersecurity assurance program. The successful candidate will understand the security industry best practices and regulations as well as how to perform regular audits of ECI’s business procedures and processes to ensure security and compliance of systems we operate.\n\nJOB DESCRIPTION\n\nECI is looking for an Information Security Analyst to work with our global Information Security Team to help expand and improve our cyber risk department. At ECI, we understand that it takes an enormous effort and a lot of time to build customer trust in our products and services. We work hard to earn and maintain that trust every single day by delivering products and experiences that really make a difference to the success of our customer’s business. ECI’s Information Security Team, including this Security Analyst position, is critical to building and maintaining that trust.\n\nAre you detail oriented? Do you communicate well in oral and written form? Can you collaborate with teams or individuals at all levels of a corporation? If so then this is a great job for you. This position will capitalize on your current experience and security skill set while promoting and providing opportunities to expand your knowledge in many other areas of security. You will work to help identify risk, perform assessments, achieve regulatory compliance, conduct internal audits, work with third party security providers and vendors, provide monthly reporting and more.\n\nDUTIES AND RESPONSIBILITIES\n\nPerform evaluation of internal operations, controls, communications, risk assessments and maintenance of documentation as related to regulatory compliance and recommend appropriate changes.\nSupport the creation of a comprehensive risk management and regulatory oversight program, including specifications for product and service design aligned with the NIST framework.\nProvide clear direction to internal ECI teams on industry regulatory specifications applicable to their products and services.\nBuild security documentation for customers and internal users, build management level metrics and reporting for activities that are owned by the Risk Manager.\nCoordinate industry and regulatory certifications, including managing certification vendors (e.g., CMMC, ITAR, SOC2, ISO 27001, GDPR, etc.).\nDaily, Weekly and Monthly operations verification and reporting across scheduled security activities such as, infrastructure penetration and vulnerability scans, patch management, Anti-virus and phishing reports, user access, etc.\nDaily monitoring and follow-up of security logs & alerts as needed.\nSupport the organizations InfoSec and data privacy policies.\nWork with internal groups to conduct audits, assessments, vulnerability and penetration testing, leveraging third party partners to assist with these activities as needed.\nRespond to and record information security inquiries and incidents. Recommend mitigation and remediation strategies.\nParticipate in the evaluation and testing of new security tools and countermeasures.\nParticipate in execution of vendor risk assessments.\nChampioning security awareness training and social engineering campaigns\nOther related duties may be assigned.\nQUALIFICATIONS\n\nBachelor’s degree or 5+ years of experience in Information Security, Risk Management and Data Protection.\nWork within a framework to identify security gaps and mitigation recommendations.\nExperience with penetration and vulnerability testing techniques a plus.\nAble to help strategize methods of detecting/preventing threat actor tactics and techniques.\nGood understanding of security defense measures and mechanisms.\nFamiliar with Incident Response concepts a plus.\nFundamental technical understanding of key technologies such as operating systems, networks, application development, databases, virtualization, and cloud infrastructures\nSubstantial experience with policy frameworks and regulations such as CMMC, SOC2, ITAR, ISO 27001/27002, NIST, GDPR, etc.\nExperience with Risk Management in compliance and/or security context\nStrong communication and organizational skills, outstanding attention to detail, and excellent problem-solving and follow-up skills\nMust be able to participate in team meetings to support team Lead/Manager with stakeholder requirements, business needs to articulate technical processes and objectives.\nA commitment to further ECI’s culture and values and to providing extraordinary service.\nPrefer candidate to hold one or more of the following certifications: CISA, CISM, CISSP, CIPP\n#LI-REMOTE\n#LI-CV1\n\nIn addition to our competitive salary and award winning culture, we offer an excellent benefit package. We even offer our employees a day off to serve their community! Our company core values are our “CODE”: Crave Greatness, Own the Outcome, Deliver Awesome and Embrace Community.","company":"Eci Software Solutions","rawCompany":"eci software solutions","city":"Houston","state":"TX","isRemote":false,"isActive":false,"createdAt":"2026-04-12T20:34:52.798Z","occupations":[{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"13-1199.07","title":"Security Management Specialists","slug":"security-management-specialists"}],"industries":[{"code":"541690","title":"Other Scientific and Technical Consulting Services","slug":"other-scientific-and-technical-consulting-services"},{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541330","title":"Engineering Services","slug":"engineering-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Information Security Analyst","description":"For more than 30 years, ECI Software Solutions has been providing industry-specific, cloud-based business management software and services to small and medium-sized businesses. With divisions focused on manufacturing, wholesale/retail distribution, building and construction, and field service, ECI's solutions integrate into every aspect of a customers' business to help them level the playing field, run day-to-day operations more efficiently, and free them up to focus on what matters most. It’s how business gets done.\n\nWho is ECI?\n\nAt ECI, our mission is to enable the entrepreneurial spirit of small and medium-sized business owners. But ECI doesn’t simply deliver amazing software solutions; we also have an award-winning company culture.\n\nWe offer competitive benefits focused on employee well-being, including paid volunteer time off!\nWe have been named by Achievers on its prestigious 50 Most Engaged Companies To Work For list for the last five years.\nWe have received international recognition for our high levels of employee engagement through Certification as a Great Place to Work six years in a row.\nOur culture of creativity, innovation, and leadership has garnered over a dozen International Business Awards (Stevie®).\nCome join a worldwide team with a strong culture of inclusion, professional development, and collaboration.\n\nTo apply for this position, please attach a detailed resume that demonstrates your qualifications and skill set pertaining to this position. Applications without a resume will not be considered.\n\nECI delivers cloud-based business critical ERP, CRM and line of business applications to more than 20,000 customers across the globe. The Information Security Analyst works as part of ECI’s Information Security team and will lead our cybersecurity assurance program. The successful candidate will understand the security industry best practices and regulations as well as how to perform regular audits of ECI’s business procedures and processes to ensure security and compliance of systems we operate.\n\nJOB DESCRIPTION\n\nECI is looking for an Information Security Analyst to work with our global Information Security Team to help expand and improve our cyber risk department. At ECI, we understand that it takes an enormous effort and a lot of time to build customer trust in our products and services. We work hard to earn and maintain that trust every single day by delivering products and experiences that really make a difference to the success of our customer’s business. ECI’s Information Security Team, including this Security Analyst position, is critical to building and maintaining that trust.\n\nAre you detail oriented? Do you communicate well in oral and written form? Can you collaborate with teams or individuals at all levels of a corporation? If so then this is a great job for you. This position will capitalize on your current experience and security skill set while promoting and providing opportunities to expand your knowledge in many other areas of security. You will work to help identify risk, perform assessments, achieve regulatory compliance, conduct internal audits, work with third party security providers and vendors, provide monthly reporting and more.\n\nDUTIES AND RESPONSIBILITIES\n\nPerform evaluation of internal operations, controls, communications, risk assessments and maintenance of documentation as related to regulatory compliance and recommend appropriate changes.\nSupport the creation of a comprehensive risk management and regulatory oversight program, including specifications for product and service design aligned with the NIST framework.\nProvide clear direction to internal ECI teams on industry regulatory specifications applicable to their products and services.\nBuild security documentation for customers and internal users, build management level metrics and reporting for activities that are owned by the Risk Manager.\nCoordinate industry and regulatory certifications, including managing certification vendors (e.g., CMMC, ITAR, SOC2, ISO 27001, GDPR, etc.).\nDaily, Weekly and Monthly operations verification and reporting across scheduled security activities such as, infrastructure penetration and vulnerability scans, patch management, Anti-virus and phishing reports, user access, etc.\nDaily monitoring and follow-up of security logs & alerts as needed.\nSupport the organizations InfoSec and data privacy policies.\nWork with internal groups to conduct audits, assessments, vulnerability and penetration testing, leveraging third party partners to assist with these activities as needed.\nRespond to and record information security inquiries and incidents. Recommend mitigation and remediation strategies.\nParticipate in the evaluation and testing of new security tools and countermeasures.\nParticipate in execution of vendor risk assessments.\nChampioning security awareness training and social engineering campaigns\nOther related duties may be assigned.\nQUALIFICATIONS\n\nBachelor’s degree or 5+ years of experience in Information Security, Risk Management and Data Protection.\nWork within a framework to identify security gaps and mitigation recommendations.\nExperience with penetration and vulnerability testing techniques a plus.\nAble to help strategize methods of detecting/preventing threat actor tactics and techniques.\nGood understanding of security defense measures and mechanisms.\nFamiliar with Incident Response concepts a plus.\nFundamental technical understanding of key technologies such as operating systems, networks, application development, databases, virtualization, and cloud infrastructures\nSubstantial experience with policy frameworks and regulations such as CMMC, SOC2, ITAR, ISO 27001/27002, NIST, GDPR, etc.\nExperience with Risk Management in compliance and/or security context\nStrong communication and organizational skills, outstanding attention to detail, and excellent problem-solving and follow-up skills\nMust be able to participate in team meetings to support team Lead/Manager with stakeholder requirements, business needs to articulate technical processes and objectives.\nA commitment to further ECI’s culture and values and to providing extraordinary service.\nPrefer candidate to hold one or more of the following certifications: CISA, CISM, CISSP, CIPP\n#LI-REMOTE\n#LI-CV1\n\nIn addition to our competitive salary and award winning culture, we offer an excellent benefit package. We even offer our employees a day off to serve their community! Our company core values are our “CODE”: Crave Greatness, Own the Outcome, Deliver Awesome and Embrace Community.","datePosted":"2026-04-12T20:34:52.798Z","dateModified":"2026-04-12T20:34:52.798Z","hiringOrganization":{"@type":"Organization","name":"Eci Software Solutions","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Houston","addressRegion":"TX","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"f36b0e30cba22eb7d7f1de65"},"url":"https://jobsearcher.com/jobs/f36b0e30cba22eb7d7f1de65"}}