IT, Security & Compliance Analyst

As our IT, Security & Compliance Analyst, you will play a crucial role in managing our day-to-day IT operations while leading key projects related to IT security and compliance. This is a one-person role for now where you will handle the IT needs of the company, ensuring the smooth operation of our systems, while also leading initiatives related to IT security and compliance with frameworks like SOC2. You'll be responsible for handling everything from setting up employee devices to managing office access control and ensuring compliance with industry standards.

What you will do as our IT, Security & Compliance Analyst:

IT Operations

• Ensure and scale our IT practices within the organization.

• Oversee the management and maintenance of the organization's IT infrastructure, including servers, network devices, and workstations.

• Optimize cost management of software solutions.

• Ensure the stability and reliability of the organization's networks.

• Monitor network traffic for anomalies, security threats, and performances issues.

• Promptly resolve technical issues when they arise.

• Continuously assess and enhance IT systems and services to meet organizational needs.

• Maintain an up-to-date inventory of assets, including software licenses, hardware, and security tools.

Security and Compliance Projects

• Develop, implement and maintain comprehensive security policies, procedures, and best practices to ensure compliance with industry standards and regulations.

• Conduct regular security assessments, audits, and risk assessments to identify and mitigate vulnerabilities, compliance gaps, and potential security threats.

• Work closely with internal and external auditors to facilitate successful compliance certifications and audits.

• Ensure data protection and privacy by overseeing compliance efforts related to sensitive information.

• Provide security training and awareness programs for employees to enhance security culture and practices.

• Respond to security incidents, investigate breaches, and implement corrective actions as necessary.

• Collaborate with third-party vendors and partners to ensure compliance with security requirements in contracts and agreements.

• Stay current with industry trends, emerging threats, and regulatory changes, and recommend necessary updates to policies and procedures.

• Lead regular meetings with the security committee to report on current security status, discuss ongoing issues, and strategize future improvements.

What you will need to succeed:

• Bachelor's degree in IT, Computer Science, Cybersecurity, or a related field.

• Minimum of 5 years of experience in IT management, network administration, and cybersecurity.

• Proficiency in compliance standards (e.g., SOC2, GDPR) and data privacy regulations.

• Familiarity with risk assessment and management methodologies.

• Industry-recognized certifications (e.g., CISSP, CISM, CISA) are a plus.

• Strong leadership, communication, and problem-solving skills.

• Experience with security tools and technologies (e.g., firewalls, IDS/IPS, SIEM, endpoint protection).

• Ability to manage multiple projects simultaneously and meet deadlines.

• Strong analytical and critical thinking skills.

• Knowledge of cloud security and experience with cloud service providers (preferably AWS) is a plus.