Information Security AnalystReports To: Manager of Technology Operations & Security
Employment Type: Full Time,
FLSA Status: Exempt,
EEO Category: Professionals
The Impact you Will Have: The Information Security Analyst supports the company's day-to-day information security, compliance, trust, and technology operations activities. This role helps maintain the security and reliability of the company's internal technology environment while supporting customer trust, vendor security review, compliance readiness, and information security questionnaire automation.
The primary focus of this role is information security and compliance operations, including support for information security questionnaires, Vanta workflows, evidence collection, control documentation, security response preparation, and operational security follow-up. The role also provides escalated IT service desk support for issues that require additional technical investigation, security awareness, identity/access review, endpoint troubleshooting, or as-needed operational response.
This is a mid-level individual contributor role. The role is not expected to fully own all security questionnaire responses or compliance workflows at the start, but will prepare, triage, coordinate, draft, validate, and maintain materials for review by the Manager of Technology Operations & Security, Information Security Architect, or other appropriate technical owner. As the role matures and automation improves, the position may grow into greater ownership of security questionnaire operations, trust content management, and recurring compliance support processes.
What You'll Do: - Support information security questionnaire workflows, including intake, tracking, draft responses, evidence gathering, internal follow-up, and preparation of materials for technical or leadership review.
- Assist with information security questionnaire automation efforts, including maintaining approved response libraries, mapping recurring questions to standard answers, identifying gaps, and improving repeatability.
- Support Vanta platform operations across compliance monitoring, evidence collection, customer trust workflows, vendor security review, control documentation, and audit readiness.
- Maintain accurate security and compliance documentation, including SOPs, runbooks, control notes, questionnaire content, evidence records, access review documentation, and knowledge base articles.
- Prepare and triage security-related requests, escalating items requiring approval, ownership, or deeper technical review.
- Perform security reviews of AI tools, agents, and connectors (including MCP integrations) against Crucial Learning's approved-integration standards.
- Assist with customer and vendor trust activities by coordinating responses, collecting relevant artifacts, and validating information with internal subject matter experts.
- Support operational security activities, including access review follow-up, MFA hygiene, endpoint security checks, vulnerability remediation tracking, patch compliance follow-up, phishing report triage, and security incident escalation.
- Provide escalated IT service desk support for tickets involving identity/access issues, endpoint concerns, suspicious activity, business system access, device posture, or other issues requiring stronger technical or security awareness.
- Assist with onboarding and offboarding workflows related to account access, device readiness, application permissions, and documentation.
- Help maintain asset, access, endpoint, and system records to support reliable IT operations and security control requirements.
- Participate in as-needed on-call support for urgent IT or security-related issues, escalating appropriately.
- Partner with IT, security, legal, sales, customer success, and business stakeholders to collect accurate information for security questionnaires and trust-related requests.
- Identify opportunities to improve questionnaire turnaround time, documentation quality, service desk handoffs, security hygiene, and repeatable operating processes.
- Stay current on relevant security, compliance, IT support, SaaS administration, and service management practices.
- Perform other duties as assigned.
What You'll Need: - 2-3+ years of experience in information security, IT operations, service desk escalation, systems administration, compliance operations, technical support, or a related technology role.
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Information Technology, Management Information Systems, or a related technical field is highly beneficial; equivalent practical experience, military technical training, or applicable certifications such as CompTIA A+, Network+, Security+, Microsoft, Azure, Okta, ITIL, ISC2 Certified in Cybersecurity, SSCP, or similar may also be considered.
- Foundational-to-working knowledge of information security concepts such as access control, MFA, phishing, endpoint protection, patching, vulnerability management, incident escalation, data protection, and secure system administration.
- Experience or exposure to Microsoft 365, Entra ID/Azure Active Directory, Okta or similar identity platforms, endpoint management tools, ticketing systems, and common SaaS business applications.
- Demonstrated, hands-on use of generative AI tools in technical or operational work, with examples of where you checked, corrected, or declined to use AI output.
- A track record of teaching yourself new tools quickly, and comfort with workflows that change as automation mature
- Ability to support security questionnaire, Vanta, and compliance operations through accurate documentation, evidence gathering, draft response preparation, issue tracking, internal follow-up, and escalation to appropriate technical or leadership reviewers.
- Strong written communication skills with the ability to prepare clear, accurate, and well-organized questionnaire responses, documentation, tickets, knowledge base articles, and internal stakeholder updates.
- Strong attention to detail and ability to validate information before documenting it, relying on it for compliance purposes, or preparing it for external customer, vendor, or auditor review.
- Sound judgment to determine when information can be prepared independently and when it requires review, approval, or escalation.
- Strong customer service orientation with the ability to support employees, technical teams, business partners, and external trust/compliance stakeholders professionally.
- Ability to manage multiple requests, track follow-ups, document decisions, and work effectively in a lean technology team environment.
- Familiarity with security, compliance, or control frameworks such as SOC 2 Type 2, CMMC Level 2, NIST Cybersecurity Framework 2.0, NIST 800-171, CIS Controls, ISO 27001, or FedRAMP-related environments is beneficial but not required.
- Ability to participate in as-needed on-call support for urgent IT or security matters.
- Ability to travel to in-person events at least once a year.
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
What You'll Get:- Access to some of the richest professional development programs.
- A variety of benefits. Programs include health benefits, life insurance, income protection and retirement savings plan with employer contributions to assist with your health & financial security today and in the years ahead.
- Access to health benefits and wellness programs for employees and families.
- The ability to work in a flexible work environment.
- Professional development support as we want YOU to be successful in your career. Our team will work with you to establish the goals you are trying to achieve in your profession.
The Process: The first step is to apply to the role. If your experience matches our needs, you will be reached out to by a member of the HR team to set up a call to learn more about you. From there, you can expect to meet with the hiring manager and some other members of the team. We like to connect over the phone, via Zoom and sometimes, in person (when applicable)!
ADA (American with Disabilities Act) Information- Work is performed primarily in an office setting
- Operates standard office equipment to include a computer, calculator, copier, fax, telephone
The anticipated base salary range for this position is $75,000-100,000 annually with the opportunity to participate in a variable incentive plan. The actual base salary offered will depend on factors such as experience, skills, qualifications, and location.
