Cybersecurity & IT Audit Controls Analyst

Job Description

Job Description

Title: Cybersecurity & Audit Controls Analyst

Location : Hybrid near Naperville, Illinois

Type: Contract to hire

Targeted Rate : $50 / Hour

Benefits: This position is eligible for Medical, Dental, Vision

Our client near Naperville, Illinois is seeking a Cybersecurity & Audit Controls Analyst to join their team on a contract to hire basis! This position will be 50% Cybersecurity Operations and 50% IT Audit Controls.

Security Operations (50%)

Incident Response

• Investigate suspicious emails and phishing attempts.
• Perform user interviews and determine extent of compromise.
• Analyze endpoint activity and email logs.
• Escalate major incidents to infrastructure teams when required.
• Document findings and maintain incident logs.

Security Monitoring

• Review security logs and alerts daily.
• Monitor and investigate suspicious activity.
• Respond to user-reported incidents.
• Validate and triage events.

Vulnerability Management

• Manage monthly vulnerability assessments.
• Coordinate remediation efforts.
• Ensure findings are tracked through closure.

Security Tool Administration

Current environment includes:

• Mimecast
• Forcepoint
• Zscaler (ZIA/ZPA)
• CrowdStrike EDR
• CrowdStrike Falcon Complete MDR
• KnowBe4

IT Controls / Audit / Change Management (50%)

• Coordinate annual IT audits.
• Support evidence gathering activities.
• Work cross-functionally with business units.
• Interpret audit questionnaires and requirements.
• Maintain IT controls and documentation.
• Support change management initiatives.
• Partner with leadership on complex audit responses.

Audit activity is expected annually, with additional governance activity driven by private equity ownership and cyber insurance requirements.

Required Qualifications

• 5+ years of IT and/or cybersecurity experience.
• Previous ownership or lead participation in at least one IT audit.
• Hands-on security operations experience.
• Experience investigating security incidents.
• Strong understanding of infrastructure, authentication, and logging.
• Experience with vulnerability management.
• Ability to work independently and know when to escalate.
• Strong documentation and communication skills.

Preferred Technical Experience

Security Platforms:

• CrowdStrike EDR
• CrowdStrike Falcon Complete
• Mimecast
• Zscaler
• Forcepoint
• KnowBe4

Additional Experience:

• Incident response
• Log analysis
• Vulnerability remediation
• Endpoint security
• Email security
• Audit coordination
• Change management
• IT controls

Soft Skills

• Initiative
• Curiosity
• Strong communication skills
• Ability to collaborate across teams
• Documentation mindset
• Problem-solving mentality
• Long-term career mindset

Addison Group is an Equal Opportunity Employer. Addison Group provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. Addison Group complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. Reasonable accommodation is available for qualified individuals with disabilities, upon request.