IT Security Analyst II
Core
Mid-level analyst supporting AI governance, IT compliance, security, and third-party risk management programs by translating requirements into practical controls, risk assessments, and audit readiness.
Role type
Mid-level GRC and AI Security Analyst
Builds
Compliance controls, risk registers, AI governance documentation, and vendor risk assessments
Domain
Industrial manufacturing, Cybersecurity, Governance, Risk & Compliance (GRC), AI Governance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Risk assessment, Control mapping, Audit evidence collection, Regulatory interpretation, Vendor risk evaluation, Compliance reporting, Remediation planning, Policy documentation, Stakeholder collaboration, Framework knowledge
Preferred skills
AI security knowledge, Responsible AI governance, Third-party risk management, Security certifications (Security+, CISA, CISSP Associate), NIST 800-171 or CMMC familiarity
Technologies
NIST, ISO 27001, SOC 2, CIS Controls, PCI DSS, CMMC, NIST 800-171
Responsibilities
Support day-to-day operation of IT security compliance program including control documentation and audit readiness. Assist with control mappings across frameworks like NIST, CMMC, and SOC 2. Support security and governance reviews for AI-enabled tools and platforms. Support the third-party risk management lifecycle including vendor intake and due diligence. Prepare reports and dashboards communicating compliance status and risk posture. Support internal and external audits by coordinating evidence requests and tracking follow-up actions.
Seniority
Mid-level, hands-on IC
