Cybersecurity Analyst

We're looking for a seasoned cybersecurity professional to take ownership of our security program, from strategy to execution, and strengthen our security posture, drive compliance, and protect the business as we scale.

Requirements

• Perform a comprehensive cybersecurity risk assessment and deliver a prioritized remediation plan.
• Design and implement the organization's overall security strategy and roadmap.
• Establish security monitoring, incident response, and threat detection processes.
• Lead and mature Microsoft 365 and Azure security posture (Defender, Entra ID, Sentinel, Purview).
• Own SOC 1 and SOC 2 compliance readiness and audit preparation.
• Define and enforce IAM policies, MFA standards, and Zero Trust principles.
• Develop and maintain security policies, standards, and documentation.
• Evaluate and manage third-party vendors and SaaS platform security risks.
• Oversee vulnerability management: assessments, tracking, prioritization, and remediation coordination.
• Lead incident response, including coordination with MSPs, infrastructure teams, and leadership.
• Establish security awareness programs and build a security-conscious culture.
• Manage and mentor the Cybersecurity Analyst, providing technical direction and growth opportunities.
• Report cybersecurity risks and program status to senior leadership.
• Evaluate and recommend security tools and technologies.

Benefits

• Paid Time Off (PTO)
• USD compensation