Bachelor's degree in IT, Cybersecurity, Computer Science, or related field; or 3-5 years of equivalent experience
CISM certification required (or to be obtained within 12 months); CISSP preferred
Hands-on experience with CrowdStrike Falcon EDR, MDR, and Vulnerability Management
Experience with Microsoft Azure and Entra ID for identity and cloud security
Familiarity with Microsoft 365 Security tools
Knowledge of NIST CSF, CIS Controls, and SOC 2 frameworks
Strong communication skills to convey technical risks to non-technical audiences
Responsibilities
Monitor and triage alerts across security platforms
Respond to IT security incidents and lead post-incident reviews
Maintain and update the cybersecurity incident log for audits
Execute monthly vulnerability scans and coordinate remediation
Supervise penetration testing and vulnerability scanning by third parties
Evaluate IT security advisories and assign actions
Support security operations across company platforms
Benefits
Medical, dental, and vision insurance
Basic life insurance coverage
Holiday pay and PTO accrual
Retirement savings plan enrollment options
Full Job Description
The Cyber Security Analyst is an individual contributor on the IT Infrastructure & Security team responsible for both active security operations and governance, risk, and compliance (GRC) program activities. The Analyst serves as a subject matter expert supporting internal business units, executive leadership, and external vendors across operational security and program governance.
Responsibilities:
Monitor and triage alerts across approved security platforms (i.e CrowdStrike Falcon EDR/MDR, ZScaler, Mimecast, and Azure/Entra ID environments)
Respond to IT security incidents, suspicious activity, and alerts to prevent adverse impact to users, processes, systems, or data; lead containment, root cause analysis, documentation, and post-incident review
Maintain and update the cybersecurity incident log; ensure all incidents are documented with consistent detail, timelines, and disposition for audit and trend analysis purposes
Execute monthly vulnerability scans using approved security platform (i.e. CrowdStrike Falcon Vulnerability Management); prioritize findings by severity and coordinate remediation of all critical and high findings with appropriate IT infrastructure and application teams within defined SLAs
Supervise and coordinate penetration testing and vulnerability scanning activities executed by third-party providers; own pre-engagement scoping, access coordination, remediation tracking, and finding closure validation
Evaluate IT security advisories and determine actions to assign to the appropriate team
Support security operations across approved company platforms (i.e. Microsoft Azure, Entra ID, and M365 environments) ; monitor identity-based threats, conditional access policies, and privileged access governance
Provide security advisory support to projects and initiatives in the form of IT security requirements and risk guidance
Act as point of contact for ad-hoc security inquiries, troubleshooting, and general IT security support
Assess and evaluate third-party suppliers through defined instruments to establish their IT security posture, identify associated risks, and communicate outcomes to relevant stakeholders
Own and administer the IT Change Advisory Board (CAB) - including scheduling, facilitation, documentation, security review enforcement, change log maintenance, and change management metrics reporting
Serve as primary coordinator for cyber insurance renewal questionnaires and audits; compile security control documentation, evidence, and metrics to support underwriter requirements; track and close identified control gaps; maintain a standing evidence library for recurring audit and insurance requests
Own the lifecycle of IT security policies and procedures - drafting, annual review, version control, and stakeholder approval - ensuring alignment with regulatory requirements, insurance mandates, and operational realities
Conduct security risk assessments for new and renewing technology vendors, including review of SOC 2 reports, security questionnaires, and contractual security requirements; maintain a vendor risk register and escalate material risks to the Director prior to contract execution
Support activities concerning IT security assessment of prospective company acquisitions; identify control gaps and communicate risks to appropriate stakeholders
Manage and administer the organization-wide security awareness training program, including phishing simulation campaigns; track completion rates, identify at-risk user populations, and report outcomes to leadership
Organize and lead the annual tabletop exercise program - including vendor interview and selection, scenario development, exercise facilitation, and post-exercise remediation tracking
Develop the bi-annual Cybersecurity Executive Meeting agenda in coordination with the Director; lead or co-present the meeting to senior leadership, covering security posture updates, risk trends, program metrics, and strategic initiatives
Appraise IT security risks and maintain the IT security risk register
Advise business functions on compliance requirements for applicable frameworks including NIST CSF, CIS Controls, and SOC 2
Review and provide input on corporate documents concerning IT security, including policies, supplier contracts, service contracts, and data processing agreements
Communicate proactively and effectively with all stakeholders, internal teams, and vendors involved in IT security processes
Prepare required summaries, updates, and reports on the schedule defined by the IT security program
Requirements:
Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field; or 3-5 years of equivalent professional experience
CISM certification or equivalent required (or attainment within 12 months of hire); CISSP preferred
Hands-on experience with CrowdStrike Falcon EDR, MDR, and Vulnerability Management, or similar platform (required)
Hands-on experience with Microsoft Azure and Entra ID - identity, conditional access, and cloud security, or similar platform (required)
Hands-on experience with Microsoft 365 Security - Defender, Compliance Center, Purview, or similar platform (required)
Hands-on experience with Mimecast and Cybergraph - email security and DLP, or similar platform (preferred)
Hands-on experience with ZScaler ZPA - zero-trust network access, or similar platform (required)
Working knowledge of NIST CSF, CIS Controls, and/or SOC 2 frameworks
General technical knowledge including networks, operating systems, cloud security (Azure, SaaS/PaaS/IaaS), endpoint security, web application security (OWASP), network security (IDS/IPS, SIEM, DDoS mitigation, WAF), and penetration testing methodologies
Demonstrated experience managing GRC activities including policy governance, vendor risk assessments, audit support, and compliance program coordination
Experience facilitating executive-level meetings, tabletop exercises, or security governance forums
Ability to identify potential weaknesses through threat modeling and/or risk assessment
Ability to create, review, and maintain corporate security documents including policies, procedures, vendor contracts, and data processing agreements
Familiarity with cyber insurance control frameworks and audit documentation practices
Strong written and verbal communication skills; able to translate technical risk into business-level impact for executive and non-technical audiences
CompTIA Security+, CySA+, Microsoft SC-200/AZ-500, or CrowdStrike CCFA/CCFR certifications preferred
We offer medical, dental, vision, basic life insurance coverage, holiday pay, and PTO accrual. Additionally, employees are able to enroll in a retirement savings plan.
The pay rate range, along with most all of the other terms and conditions of employment, vary between different sites, geographical markets, customer/ contractual terms and positions.
About National Express LLC
National Express LLC is a transportation company that provides student transportation, transit, and shuttle services. The company operates in the United States, Canada, and the United Kingdom. National Express LLC is a subsidiary of National Express Group, a global transportation company headquartered in Birmingham, England. National Express LLC was founded in 1972 as Durham Transportation and was acquired by National Express Group in 1999. The company has a strong commitment to safety and customer service, and has won numerous awards for its performance in these areas.
