Security Analyst II
North Risk Partners, LLCMinnesota, United States
Posted May 5, 2026
78000 - 90000 USD
Full Time
About the Company
North Risk Partners is a fast-growing firm dedicated to serving the insurance and risk management needs of businesses and individuals.
Job Description
The Security Analyst II plays a key role in operating, improving, and maturing North Risk’s security program. This role focuses on detection, investigation, vulnerability management, access governance, endpoint and email security, and compliance support aligned to NIST CSF 2.0, NY DFS, and HIPAA requirements.
Requirements
- A combination of education and experience generally attained through an associate’s degree (in Information Technology, Cybersecurity, Networking, or related field strongly preferred), and a minimum of 5 years of progressive experience in cybersecurity, security operations, or related IT security roles
- Strong understanding of security fundamentals including: Detection response, least privilege and access governance, endpoint and email security, vulnerability management, and incident response principles
- Hands-on experience with Microsoft security technologies (Defender, Intune, Entra ID) or equivalent enterprise platforms
- Experience working in ticketing systems (e.g., ServiceNow) with strong documentation
- Ability to analyze technical data, investigate security events, and communicate findings clearly
- Experience supporting compliance or audit requirements in regulated environments
- Experience with detection tuning, alert optimization, or SIEM adjacent workflows, including email security and phishing response platforms
- Familiarity with insurance, financial services, or other regulated industries
- Ability to communicate technical findings to both technical and non-technical audiences, including written summaries for leadership
- Experience with PowerShell or other scripting languages for tasks automation is preferred
- Familiarity with NIST Cybersecurity Framework (CSF) 2.0 or similar security frameworks
- Certifications such as Security+, CySA+, SSCP, or equivalent is preferred, but not required
- Experience contributing to security architecture or control design decisions is preferred, but not required
Benefits
- Health, dental, vision, short-term and long-term disability, life, long-term care, 401(k) plan, and more