Club Location:

Arcis Golf - Corporate Office - Dallas, TX

Cyber Security Analyst

Position Summary

The Senior Cyber Security Analyst is a key member of the Arcis Golf IT organization, providing security leadership and practical guidance across governance, risk, compliance, training, policy development, and vendor management. This role partners closely with IT and business teams to strengthen the company's security posture, evaluate risk, and ensure security requirements are incorporated into projects and day-to-day operations. The position also supports team development through mentoring and knowledge sharing and plays a leading role in risk assessments, security impact reviews, control assessments, and third-party security oversight.

Essential Responsibilities
• Lead and support security assessments, audits, risk reviews, and policy development initiatives.
• Work with Managed Security Service Providers (MSSPs) and internal teams to support SOC operations, incident visibility, and security program execution.
• Perform risk analyses, develop remediation plans, identify compensating controls, and communicate findings through clear reporting and dashboards.
• Maintain and improve security policies, standards, procedures, and supporting documentation across both new and legacy environments.
• Provide security guidance for the design or modification of software, networks, infrastructure, hardware, and operational processes.
• Assess compliance requirements and recommend projects or control improvements aligned with applicable security frameworks and standards.
• Coordinate corporate Quarterly Access Reviews and other identity and access validation activities using Identity and Access Management (IAM) tools.
• Develop and maintain SIEM reporting, security dashboards, control monitoring, and automated validation processes.
• Evaluate system enhancements and emerging security solutions that can improve security, compliance, or operational efficiency.
• Serve as a security and risk advisor across the organization and with third-party vendors.

Qualifications

Experience
• 5+ years of progressive Information Technology experience, including Governance, Risk, and Compliance (GRC), IT compliance, risk management, or audit responsibilities.
• 2+ years of experience facilitating audit engagements and supporting compliance or operational improvement initiatives.
• 3+ years of experience identifying, assessing, and mitigating IT risk through assessments, control reviews, and remediation planning.
• Hands-on experience with IT infrastructure, including network topology, Microsoft operating systems, patching, change management, and Active Directory.
• 3+ years of experience with control monitoring, reporting, and automation of validation or compliance processes.
• Experience managing and evidencing controls across hybrid environments, including SaaS, PaaS, IaaS, and traditional data centers.

Frameworks and Standards
• Strong working knowledge of NIST, ISO, and other recognized security, risk, and control frameworks, with the ability to apply them to cybersecurity strategy and operations.

Tools and Technologies
• Working experience with Microsoft Defender, Intune, Active Directory, SentinelOne, DarkTrace, Rapid7, Program Maturity, Qualys, Nessus, and Microsoft Azure environments.

Key Attributes
• Strong understanding of IT governance, cybersecurity risk, compliance, and control management.
• Ability to execute and improve access validation and control-assurance processes.
• Effective leadership and mentoring skills with the ability to guide team members and collaborate across departments.
• Strong analytical and problem-solving skills with the ability to translate risk into clear, practical actions.
• Collaborative, proactive, and focused on continuous improvement.