Information Security Analyst - GRC, Microsoft 365 Security

Own and maintain ISO 27001 and CMMC compliance programs Manage evidence, remediation tracking, and audit readiness Perform gap assessments and risk analyses Develop and maintain security policies, procedures, and runbooks Ensure documentation is audit-ready and version controlled Configure and manage DLP policies across Microsoft 365 Support Microsoft Purview and identity security controls Monitor alerts using SIEM tools Support incident response and tabletop exercises Support development and maintenance of an Acceptable AI Usage Policy Evaluate AI models and use cases for appropriate organizational application Support AI usage tracking, logging, and governance methodologies Support disaster recovery activities Provide help desk support and security guidance to end users Assist with day-to-day IT security operations and user education Work closely with IT and Compliance to maintain a strong security posture and drive compliance initiatives Requirements 2-5 years of experience in IT or information security Experience with ISO 27001 and/or CMMC Strong documentation and policy writing skills Familiarity with Microsoft 365 security Understanding of DLP, incident response, and DR Understanding of AI models and their use within an organization Willingness to support help desk operations Preferred: Experience supporting ISO or CMMC audits Preferred: Familiarity with Microsoft Purview Preferred: Experience with SIEM tools (e.g., Microsoft Sentinel, Splunk) Preferred: Knowledge of NIST frameworks Preferred: Relevant certifications (Security+,

SC-900

, etc.) Ability to perform essential duties satisfactorily Ability to occasionally lift and/or move up to 25 pounds Ability to sit for long periods of time Reasonable accommodation may be made for individuals with disabilities Core Competencies Demonstrates expertise in managing ISO 27001 and CMMC compliance programs, including documentation, policy development, and risk analysis. Proficient in Microsoft 365 security, DLP policies, and incident response, with a strong focus on maintaining audit readiness and supporting IT security operations. Highest-signal resume keywords ISO 27001 Compliance Management CMMC Compliance Management Microsoft 365 Security SIEM Tools Experience Policy Writing Skills Hard Skills Risk Analysis Gap Assessment DLP Policy Configuration Incident Response Disaster Recovery Documentation Management Audit Readiness AI Model Evaluation Help Desk SupportSecurity Policy Development Soft Skills Strong Communication User Education Certifications & Qualifications Security+ SC-900 Industry Keywords NIST Frameworks Compliance Initiatives Audit Support AI Governance Security Posture Tools & Technologies Microsoft Purview SIEM Tools Microsoft 365 #J-18808-Ljbffr Jobtailor