IT Security Analyst – Risk Management, Compliance & Governance Framework Specialist

Join arenaflex as an IT Security Analyst – Shape the Future of Enterprise Risk Management

Are you ready to elevate your career with a company that values innovation, integrity, and excellence? At arenaflex, we don't just move people and goods—we move the world forward. As a leading force in the transportation and logistics industry, we're seeking a talented and passionate IT Security Analyst to join our dynamic Risk Management and Compliance team. This is your opportunity to make a meaningful impact, drive transformative change, and grow with an organization that invests in its people.

About arenaflex and Our Mission

At arenaflex, we believe that success is measured not only by our operational achievements but by the positive impact we have on our employees, customers, and communities. Our commitment to excellence has made us a trusted name across the industry, and we're constantly pushing boundaries to innovate and improve. We pride ourselves on fostering a culture where creativity, collaboration, and continuous learning are at the heart of everything we do.

Our Information Security team plays a critical role in protecting arenaflex's digital assets, ensuring compliance with industry standards, and managing risks that could impact our operations. As part of our IT Risk group within the Data Security Administration Risk and Compliance organization, you'll serve as the second line of defense in managing and monitoring information security and technology risks. You'll work closely with IT Portfolios, key functional partners, and external auditors to build a robust security posture that supports our business objectives.

What You'll Do: Key Responsibilities

As an IT Security Analyst at arenaflex, you'll be at the forefront of identifying, communicating, and reducing risk across our enterprise. Your expertise will help protect our organization from evolving cyber threats while ensuring compliance with regulatory requirements. Here's what you can expect:

• Risk Assessment & Measurement: Assess, measure, and communicate risk across vendor relationships, internal controls, and cyber domains. You'll develop comprehensive risk assessments that inform strategic decision-making.


• Key Metrics Development: Establish and communicate key risk indicators (KRIs) and key performance indicators (KPIs) that provide actionable insights into our security posture.


• Regulatory Compliance: Collaborate with partners in Data Security, Information Technology, and Internal Audit to ensure compliance with SOX, PCI, and other regulatory/legal requirements. You'll be instrumental in maintaining our compliance posture.


• Control Development: Engage and interview key partners to design and develop IT controls that mitigate risk to acceptable levels. You'll create detailed control documentation, including descriptions, process steps, and testing criteria.


• Training & Education: Train and educate IT partners on IT risk, controls, and control effectiveness testing. You'll serve as a subject matter expert, empowering teams to understand and implement security best practices.


• Control Testing: Periodically test control effectiveness, working with IT partners to close gaps in control effectiveness. You'll identify weaknesses and recommend remediation strategies.


• Risk Reporting: Provide IT controls and risk data to enable reporting on control gaps and control effectiveness. Your insights will drive informed decision-making at all levels of the organization.


• Organizational Impact: Anticipate organizational impact and understand the risks associated with introducing new technologies or processes. You'll be a strategic advisor on security implications.


• Continuous Improvement: Perform special projects as assigned and embrace opportunities to drive innovative solutions to complex security challenges.

What We're Looking For: Essential Qualifications

To succeed in this role, you'll bring a unique combination of technical expertise, analytical skills, and business acumen. We're seeking candidates who are passionate about information security and thrive in collaborative environments.

Minimum Requirements:

• Educational Background: Bachelor's degree in Cybersecurity, Computer Science, Mathematics, Engineering, Information Services, or a related field.


• Framework Knowledge: Strong knowledge of risk and security frameworks such as NIST, ISO, and COSO. You should understand how to apply these frameworks in practical, business-context situations.


• Communication Skills: Excellent listening and interpersonal skills with the ability to convey ideas effectively. You must prepare clear, concise documentation that stakeholders can understand and act upon.


• Proactive Mindset: Naturally proactive with a customer satisfaction focus. You anticipate issues before they arise and take initiative to address them.


• Attention to Detail: Strong attention to detail and the ability to multitask effectively in a fast-paced environment.


• Governance Experience: Experience working in a governance environment using a risk and controls mindset. You understand how to balance security requirements with business objectives.


• Technical Background: Two years of experience across IT domains such as application development, systems, technical support and operations, or business continuity.


• Adaptability: Ability to change priorities as needed based on potential risks to the organization. You must be comfortable working on multiple projects simultaneously.


• Safety Commitment: Consistently prioritizes safety and security of self, others, and personal data. This is core to our culture at arenaflex.


• Inclusivity: Embraces diverse individuals, thinking styles, and perspectives. We believe that diverse teams drive innovation.

Preferred Qualifications (What Gives You a Competitive Edge):

• Industry Certifications: Key industry certifications such as CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), CISSP (Certified Information Systems Security Professional), or equivalent.


• Security Domain Experience: Experience across Information Security domains including governance and compliance, incident response, identity and access management, penetration testing, or e-discovery and forensics.


• Technical Tools: Experience with RSA Archer or similar GRC (Governance, Risk, and Compliance) platforms.


• Transformation Leadership: A history of driving transformative change. You've led initiatives that improved processes, enhanced security posture, or delivered measurable business value.


• Advanced Education: BS/MS in Cybersecurity, Computer Science, Mathematics, Engineering, Information Services, or related field.

Why arenaflex? Our Culture and Benefits

At arenaflex, our people are our greatest asset. We're committed to creating an environment where every employee can thrive, grow, and make a difference. Our culture is built on a shared dedication to our values: Care, Integrity, Resilience, Employee Service, and Collaboration—always, in everything we do.

Compensation and Financial Rewards:

• Competitive compensation with industry-leading profit-sharing program and performance incentives.


• 401(k) plan with generous company contributions up to 9%.


• Access to financial planning resources and retirement counseling.

Time Off and Work-Life Balance:

• Paid time off including vacation, holidays, personal days, maternity, and parental leave.


• Flexible work arrangements to support your lifestyle and productivity.


• Employee Assistance Program offering support for you and your family members.

Health and Wellness:

• Comprehensive health benefits including medical, dental, vision, short/long-term disability, and life benefits.


• Family care assistance through fertility support, surrogacy, and adoption help.


• Lactation support and sponsored backup care options.


• Holistic wellness programs supporting physical, emotional, social, and financial well-being.


• Free access to extensive mental health resources and employee support services.

Professional Growth and Development:

• Career advancement programs designed to help you achieve your long-term career goals.


• Continuous learning opportunities through training programs, certifications, and professional development resources.


• Mentorship programs connecting you with experienced leaders in the industry.

Unique Perks and Rewards:

• Domestic and international space-available flight benefits for employees and qualified dependents.


• Recognition rewards and grants through our platform "Relentless Together."


• Access to over 500 discounts, specialty savings, and voluntary benefits through Deltaperks, including car and hotel rentals, auto, home, and pet insurance, legal services, and childcare.


• Employee Resource Groups connecting you with colleagues who share common interests, promoting inclusion and providing perspective.


• Community service opportunities and partnerships focused on sustainability and environmental responsibility.

Career Growth Opportunities

At arenaflex, we believe in investing in your future. As an IT Security Analyst, you'll have access to clear career pathways that allow you to specialize or broaden your expertise. Whether you aspire to become a subject matter expert in a specific security domain, move into leadership roles, or explore adjacent areas of IT risk management, we're committed to supporting your journey.

You'll work alongside industry professionals who are passionate about what they do, learning from their expertise while contributing your unique perspective. Our culture of continuous improvement means you'll always have opportunities to grow, learn, and take on new challenges that expand your skillset and advance your career.

Join Our Team

If you're someone who, when asked to do the unimaginable, answers with a smile—"Ready and waiting!"—then arenaflex is the place for you. We need individuals who are eager to tackle complex challenges, passionate about data security, and committed to driving meaningful change.

At arenaflex, you'll find more than a job—you'll find a community that values your contributions, supports your growth, and celebrates your successes. Come climb higher with us and be part of something extraordinary.

Apply today and take the first step toward an exciting career with arenaflex!