Position Summary

The Security Analyst plays a critical role in protecting First Brands Group’s digital assets and infrastructure. This position is responsible for monitoring, analyzing, and responding to security incidents, maintaining compliance with internal and external policies, and supporting the continuous improvement of our cybersecurity posture.

Position Description/Responsibilities:

• Monitor and respond to security alerts and incidents in a timely manner.
• Conduct internal and external security audits and support audit readiness.
• Maintain and update security documentation including incident response and disaster recovery plans.
• Collaborate with IT and business teams to assess and improve security controls.
• Develop and deliver training materials to educate employees on cybersecurity best practices.
• Analyze existing IT processes and recommend automation or efficiency improvements.
• Support vulnerability management and remediation efforts.
• Participate in a rotational on-call schedule for security incident response.
• Assist in the implementation and enforcement of security policies and procedures.
• Work directly with auditors to ensure compliance with regulatory and organizational standards.

Required Technical and Professional Expertise:

• Bachelor’s degree with 2-4 years of relevant experience (cybersecurity policy, and compliance, etc.). An equivalent combination of education and experience may be considered.
• Experience with audit processes and segregation of duties.
• Strong understanding of cybersecurity frameworks (e.g., NIST Cybersecurity Framework CSF, ISO 27001).
• Familiarity with SIEM tools, endpoint protection, and network security technologies.
• Ability to translate technical concepts into business-friendly language.
• Excellent written and verbal communication skills.
• Strong troubleshooting and problem-solving abilities.
• Proficiency in Microsoft Office Suite, especially Excel.
• Project management experience and ability to work across all levels of the organization.
• Commitment to continuous learning and staying current with cybersecurity trends.
• Ability to manage multiple tasks and priorities effectively.

Preferred Qualifications:

• Experience with Vulnerability Management, Endpoint and Network Detection Response technologies like Rapid7
• Experience with Linux, Windows, and Network Operating Systems
• Experience and understanding of Microsoft Active Directory
• Experience with XDR solutions like SentinelOne
• Experience with Cloud Security configurations best practices using Microsoft Azure Purview, Security and conditional access