Information Security Analyst

IT Security Compliance Analyst | Managed Services | $60,000–$70,000 | NYC Metro Area

A growing IT services provider is seeking a junior IT Security Compliance Analyst to support governance, risk, and compliance initiatives across multiple client environments. This role offers strong exposure to security frameworks, audits, and hands-on incident and vulnerability management within a fast-paced MSP setting.

Responsibilities

• Maintain ongoing compliance using GRC tools to perform regular security checks and controls
• Develop and manage Written Information Security Policies (WISP)
• Conduct gap assessments against internal policies and industry frameworks
• Act as a liaison between compliance and engineering teams
• Monitor security systems and identify potential threats or irregularities
• Own incident management lifecycle including documentation, investigation, and reporting
• Support and maintain vulnerability management programmes Track and validate remediation of audit findings
• Provide technical recommendations to improve security controls, including cloud environments

Requirements

• Up to 2 years’ experience supporting security audits (SOC 2, ISO 27001, PCI DSS, HIPAA)
• Understanding of security frameworks (ISO 27001, NIST, CIS, ITIL, COBIT)
• Experience with security tools and compliance processes Strong communication and stakeholder management skills
• Ability to coordinate across technical and non-technical teams

Preferred

• Experience with audit/compliance management tools Relevant certifications (Security+, Network+, A+ or similar)
• Exposure to SaaS or cloud-based environments Background in systems or network administration

Additional Information

• Managed services environment supporting multiple clients
• Clear progression within a growing security and compliance function
• Benefits package included

Interested? Apply now or send your updated resume to [email protected] - what job is this