Position Details

Type Full-Time

Experience mid

Exp. Years 2 years

Education Bachelor's degree in computer science, Information Technology, or related field.

Category Cybersecurity

About this role

IT Security Analyst responsible for IT security governance, risk management, and audits to ensure regulatory and internal controls compliance across the organization.

Key Responsibilities

Conduct IT security audits and assessments to ensure compliance
Coordinate SOX compliance activities and evidence provisioning
Review SOC 1 and SOC 2 reports for service providers
Perform third-party vendor security assessments
Develop and maintain IT security policies and metrics

Technical Overview

IT security programs focusing on SOX compliance, SOC reports, and vendor risk management within a manufacturing environment

Ideal Candidate

The ideal candidate is a mid-level IT security professional with 2+ years in governance, risk management, and audits, familiar with SOX and ISO 27001/NIST frameworks, and able to collaborate across IT and business units in a manufacturing environment.

Must-Have Skills

Proven experience (2 years) in IT security governancerisk managementor related fields

Nice-to-Have Skills

Experience with IT Security/GRC tools and automation technologiesExperience with conducting IT security assessmentsauditsand risk assessmentsFamiliarity with ISO 27001/NIST frameworksCISSP or CISM or CRISC preferred

Required Skills

IT security governancerisk managementIT security assessmentsauditsSOX complianceSOC 1SOC 2GRC toolspolicy developmentincident responsevendor risk managementISO 27001NIST Cybersecurity FrameworkGDPR

Hard Skills

IT security governancerisk managementIT security assessmentsauditsSOX complianceSOC 1SOC 2GRC toolsPolicy developmentincident responsevendor risk managementauditingsecurity controlsISO 27001NIST Cybersecurity FrameworkGDPRcross-functional collaborationdata protection

Soft Skills

analyticalcritical thinkingcommunicationteam collaborationprioritization

Certifications

Preferred

CISSPCISMCRISC

Industry & Role

Industry Manufacturing

Job Function Ensure IT security governance and risk management across the organization

Role Subtype Security Analyst

Tech Domains Active Directory, Microsoft 365, Azure, Windows Server, ITSM / ServiceNow, SQL / PostgreSQL, Cybersecurity

Keywords for Your Resume

it security analystsecurity governancerisk managementsoxsarbanes-oxleysecurity auditsinternal auditssoc 1soc 2grcpolicy developmentincident responsevendor risk managementiso 27001nist cyber security frameworkgdprcisspcismcriscbachelor's degreesecurity controlscomplianceit securitysecurity assessmentsit security governanceSOXSOC 1SOC 2GRCISO 27001

Apply for this Position →

Get matched to jobs like this

Luna finds roles that fit your skills and career goals — no endless scrolling required.

Create a Free Profile

Untitled Position

Get matched to jobs like this