Information Security Analyst | Cybersecurity
Core
Monitor, analyze, and respond to cybersecurity incidents, vulnerabilities, and threats while supporting compliance frameworks like SOC 2 and ISO 27001.
Role type
Information Security Analyst (GRC & Operations)
Builds
Security posture, compliance documentation, and incident response capabilities
Domain
Cybersecurity, Governance, Risk & Compliance (GRC), Cloud Security
Required skills
Incident response, vulnerability management, risk assessment, security policy development, IAM administration, compliance auditing, cloud security, SIEM analysis, threat detection
Preferred skills
Penetration testing, DevSecOps integration, privacy regulation knowledge (GDPR/HIPAA/PCI DSS), SaaS/FinTech experience
Technologies
Microsoft Defender, CrowdStrike Falcon, SentinelOne, Splunk, Microsoft Sentinel, QRadar, Rapid7, Tenable Nessus, Qualys, Burp Suite, Wireshark, AWS Security Hub, Microsoft Azure Security Center, Google Cloud Security, Okta, Microsoft Entra ID, Active Directory, Jira, Confluence, ServiceNow (via careerplan.io/jobs/9A-00E-9E-E63-B1-602-information-security-analyst-cybersecurity)
Responsibilities
Monitor and respond to security alerts and incidents; conduct risk assessments and vulnerability scans; maintain SOC 2, ISO 27001, and NIST compliance; collaborate on DevSecOps initiatives; manage IAM and privileged access; develop security policies; assist with internal and external audits; deliver security awareness training.
Seniority
Mid-level, hands-on IC
