The Cybersecurity Analyst will lead and manage out cybersecurity operations in collaboration with external partners. This role is ideal for a hands-on security professional who thrives in a lean environment and can effectively coordinate internal security efforts with outsourced services.
Essential Functions:
-
Vendor Management: Oversee relationships with MSSPs, penetration testers, and compliance consultants.
-
Security Monitoring: Review and respond to alerts and reports from internal and external SOC and SIEM platforms.
-
Incident Coordination: Lead internal response efforts and escalate to external experts when needed.
-
Policy & Compliance: Maintain security policies, support audits, and ensure regulatory compliance (ISO 27001, GDPR, etc.).
-
Risk Management: Conduct periodic risk assessments and recommend mitigation strategies.
-
Awareness & Training: Coordinate security awareness programs for staff.
-
Reporting: Prepare monthly and quarterly security reports for leadership.
Qualifications And Requirements:
-
3+ years in cybersecurity or IT security operations
-
Familiarity with SIEM, EDR, vulnerability management, and cloud security tools
-
Experience working with MSSPs or external security vendors
-
Strong understanding of security frameworks (e.g., NIST, ISO 27001)
-
Excellent communication and coordination skills
-
Ability to work independently and manage multiple priorities
-
Certifications: CISSP, CISM, CompTIA Security+, or equivalent
-
Experience with Microsoft Defender, Sentinel, or similar platforms
-
Exposure to compliance audits and risk assessments