Junior Information Security Analyst

#LI-HW1 #LI-Hybrid

The Junior Information Security Analyst will support the organization’s information security and compliance programs, with an initial focus on GovRAMP readiness. The analyst will work with information technology, application, and business teams to collect, review, and validate evidence supporting security controls.

This role will help improve documentation, identify opportunities for improvement, maintain audit readiness, and support security operations, vulnerability management, and risk management activities.

Essential Functions and Primary Duties 

• Collect, organize, and maintain GovRAMP evidence and supporting artifacts
• Review evidence for accuracy, completeness, and alignment with security control requirement
• Track evidence requests, remediation activities, exceptions, and compliance action items
• Identify control, process, and documentation gaps and recommend practical improvements
• Assist with security policies, procedures, standards, control narratives, and audit readiness activities
• Collaborate with infrastructure, application, operations, compliance, and business teams
• Support vulnerability management, risk assessments, continuous monitoring, and incident response activities
• Assist with identity and access management, endpoint security, security monitoring, Microsoft security technologies, and other security tools
• Research emerging threats, security practices, and compliance requirements

Preferred Qualifications

• Familiarity with GovRAMP, FedRAMP, National Institute of Standards and Technology Special Publication 800-53, the NIST Cybersecurity Framework, or similar frameworks
• Exposure to evidence collection, control testing, audit support, vulnerability management, or risk management.
• Experience with Microsoft Azure, Microsoft Entra ID, Microsoft Defender, Intune, security information and event management platforms, vulnerability management tools, or ticketing systems
• Security+, Systems Security Certified Practitioner, or a comparable certification, or progress toward certification
• Foundational knowledge of information security, risk management, security controls, and compliance practices
• Strong analytical, organizational, communication, and documentation skills
• Ability to manage priorities, work independently with guidance, and collaborate across teams
• Ability to travel as required by the business
• Availability to participate in on-call support when assigned

Minimum Qualifications

• Bachelor’s degree or equivalent work experience