Security Analyst

Perform cybersecurity risk assessments covering cloud environments, applications, infrastructure, AI technologies, and third-party vendors. Assess security controls, vulnerabilities, incidents, and emerging threats and develop risk-based mitigation recommendations. Support vulnerability management, incident response, security audits, regulatory compliance, and cybersecurity risk reporting. Partner with IT and business stakeholders to identify security gaps and recommend appropriate governance and control improvements. Apply established cybersecurity frameworks and industry standards to evaluate and document security risks. Assist with GRC activities, including risk tracking, control assessments, remediation monitoring, and compliance documentation. Leverage Microsoft Purview and Microsoft security technologies to support data protection, compliance, and risk management initiatives. Review security findings and translate technical risks into clear business-level recommendations. Collaborate with internal teams and third-party partners to monitor remediation activities and ensure security requirements are addressed. Stay informed on emerging cybersecurity threats, regulatory requirements, and industry best practices. Required Qualifications Knowledge of vulnerability management, incident response, SIEM, DLP, and GRC platforms. Experience evaluating security controls and developing remediation or risk mitigation plans. Strong understanding of cloud security principles and enterprise cybersecurity practices. Excellent analytical, written, verbal, and stakeholder communication skills. Ability to work effectively with both technical and non-technical teams. 6+ years of experience in cybersecurity, IT risk, security engineering, information security, or a related discipline. Strong understanding of cybersecurity risk management and security governance. Hands-on experience with frameworks and standards such as NIST, ISO 27001, FFIEC, and PCI DSS. Experience performing security and risk assessments across applications, infrastructure, cloud environments, and third-party vendors. Preferred Qualifications Experience with Microsoft Purview and Microsoft Defender. Experience supporting cybersecurity compliance and audit programs. Familiarity with AI security and emerging technology risk. Certifications such as CISSP, CISM, CRISC, or CISA. Experience working in regulated environments or highly controlled enterprise organizations. #J-18808-Ljbffr