Job Summary:

The Cybersecurity Analyst is responsible for safeguarding the organization’s information assets through both hands-on security operations and strong governance, risk, and compliance (GRC) practices. This role ensures threats are detected and mitigated, vulnerabilities are remediated, and regulatory and industry requirements are consistently met. The analyst will work across departments to strengthen the organization’s security posture, support audits, manage risk, and ensure alignment with security best practices.

Key Responsibilities:

· Perform security risk assessments to evaluate organizational, operational, and vendor risks and recommend mitigation strategies.

· Gather and prepare information for Security Meetings with stake holders.

· Identify, assess, and remediate vulnerabilities across endpoints, servers, cloud workloads, email systems, and code repositories.

· Monitor and respond to security alerts from SIEM, DLP, IDS/IPS, web filtering, and other security tooling, as well as escalating incidents as needed.

· Lead or support cybersecurity incident response activities, including containment, investigation, eradication, recovery, and post-incident reporting.

· Automate and deploy security configurations, policies, and scripts using PowerShell, Intune, MFA policies, device compliance rules, and geolocation restrictions.

· Configure and maintain identity and access management controls including SSO, user provisioning, and RBAC permissions of SaaS applications within the Entra Identity Provider.

· Assist with deploying assets within Cloud environments following least-privilege and zero-trust principles.

· Complete security questionnaires, external due diligence reviews, and third-party risk assessments for partners and vendors.

· Support disaster recovery and business continuity activities, including planning, testing, and documentation.

· Develop, maintain, and update security policies, procedures, standards, and documentation to support compliance initiatives.

· Conduct internal audits and security control assessments aligned with compliance frameworks such as ISO 27001:2022, PCI-DSS 4.0.1, SOC 2, and NIST CSF.

· Provide security awareness training and promote a culture of compliance, risk awareness, and cybersecurity best practices across the organization.

· Prepare reports and dashboards for leadership summarizing vulnerabilities, risks, compliance status, incident trends, and security program performance.

· Stay current with regulatory changes, emerging cyber threats, and industry best practices to strengthen the organization’s security posture.

Requirements:

• 3 years of experience
• Entry level security certifications such as Security+, SSCP, GSEC