Senior Cybersecurity Analyst

As a Senior Cybersecurity Analyst, you will own ISO 27001 certification efforts, including risk registers, nonconformities, and corrective actions; support SOC 1 Type 2 audit readiness and remediation; lead Quality Management System (QMS) audits; assist with Data Loss Prevention (DLP) initiatives and assessments; support the Vendor Security Management Program; evaluate and monitor security systems (firewalls, endpoint protection, intrusion detection, VPNs, MFA); validate configurations for compliance with security standards; monitor server logs and network traffic, interpret findings, and recommend resolutions; assess and implement security reconfigurations, patches, or upgrades; utilize Windows infrastructure knowledge (Active Directory, GPO); apply cloud security fundamentals; understand IT systems, networking, backups, cloud services, and general IT operations; maintain awareness of privacy standards (ISO 27701); mentor other cybersecurity staff informally and collaborate with senior team members; independently manage projects and compliance initiatives with minimal oversight; report progress weekly to senior management and ensure timelines and KPIs are met.