About the Role
The Security Analyst Supervisor is responsible for leading the day-to-day activities of the information security team while actively participating in cybersecurity operations. This role supervises security analysts, coordinates security monitoring, incident response, vulnerability management, and security operations, and helps protect the organization's systems, data, customers, and employees from evolving security threats.
The ideal candidate has strong cybersecurity experience, practical knowledge of regulated environments, and the ability to balance hands-on technical responsibilities with team leadership and cross-functional collaboration.
Key Responsibilities
- Supervise the daily operations of the information security team, including security monitoring, incident response, vulnerability management, access reviews, and security control enforcement.
- Lead, coach, mentor, and develop security analysts by assigning work, establishing priorities, providing technical guidance, and supporting professional development.
- Oversee the investigation, triage, escalation, and documentation of security alerts, incidents, and suspicious activity.
- Participate in complex security investigations and provide technical leadership during security incidents.
- Maintain and improve security policies, standards, procedures, and operational documentation.
- Coordinate vulnerability scanning, remediation efforts, patch tracking, and reporting with IT infrastructure, application, and business teams.
- Support compliance with applicable laws, regulations, and security frameworks such as GLBA, CCPA, TCPA, FDCPA, SOC 2, ISO 27001, NIST CSF, CIS Controls, or other applicable requirements.
- Partner with Legal, Compliance, IT, Operations, and business leaders to identify security risks and implement practical safeguards.
- Support third-party risk management by reviewing vendor security controls, questionnaires, contracts, and due diligence documentation.
- Coordinate security awareness training, phishing simulations, and employee education initiatives.
- Monitor and optimize security technologies including SIEM, endpoint protection, identity and access management, vulnerability management, email security, DLP, and cloud security platforms.
- Develop and maintain incident response playbooks, escalation procedures, and post-incident documentation.
- Prepare security metrics, dashboards, risk reports, and leadership updates.
- Assist with internal and external audits, regulatory examinations, client security reviews, and evidence collection.
- Ensure user access controls are properly implemented and periodically reviewed.
- Recommend improvements to security controls, operational processes, automation, and security technologies.
- Stay current on emerging cyber threats, attack techniques, regulatory changes, and industry best practices.
Required Qualifications
- Bachelor's degree in Information Security, Cybersecurity, Information Technology, Computer Science, or related field; equivalent experience may be considered.
- 5+ years of experience in cybersecurity, information security, IT risk, security operations, or related technology roles.
- 2+ years of experience supervising, leading technical teams, or coordinating security operations.
- Experience with security monitoring, incident response, vulnerability management, access controls, and risk remediation.
- Working knowledge of cybersecurity frameworks such as NIST CSF, CIS Controls, ISO 27001, SOC 2, or similar standards.
- Experience supporting audits, regulatory compliance, or security assessments.
- Strong understanding of network security, endpoint security, cloud security, identity and access management, data protection, and security logging.
- Ability to communicate technical security concepts to both technical and non-technical stakeholders.
- Strong analytical, organizational, documentation, project management, and problem-solving skills.
Preferred Qualifications
- Experience in financial services, collections, banking, lending, insurance, fintech, healthcare, or another regulated industry.
- Knowledge of GLBA, CCPA, TCPA, FDCPA, privacy requirements, and data protection obligations.
- Professional certification such as CISSP, CISM, CISA, Security+, CySA+, GSEC, or equivalent.
- Experience with SIEM, EDR, vulnerability scanners, GRC platforms, IAM solutions, DLP, MDM, cloud security tools, and ticketing systems.
- Experience leading security awareness programs, tabletop exercises, or incident response exercises.
- Familiarity with vendor risk management and client security assessments.
Core Competencies
- Team leadership and employee development
- Security operations and incident management
- Risk-based decision making
- Incident response coordination
- Regulatory compliance and audit readiness
- Strong written and verbal communication
- Cross-functional collaboration
- Technical problem solving
- Attention to detail
- Sound judgment and integrity
- Continuous improvement mindset
Performance Expectations
- Maintain effective security monitoring, escalation, and incident response processes.
- Ensure vulnerabilities, risks, and audit findings are tracked, prioritized, and remediated in a timely manner.
- Provide clear, accurate, and actionable security reporting to leadership.
- Foster a culture of accountability, collaboration, and continuous learning within the security team.
- Support a strong culture of security awareness across the organization.
- Maintain current and well-documented security policies, procedures, evidence, and controls.
- Continuously improve the maturity of the organization's security operations through practical, risk-based enhancements.
Benefits
- Medical, Dental, and Vision coverage
- Life insurance
- Short Term & Long-Term Disability
- Generous Paid Time Off, Vacation, and Holidays
- Paid Bereavement Leave
- 401(k) with Company Match
- Professional Development Grant Program
- Employee Assistance Program
- Fun contests, prizes, and company events
- Referral bonus program
- ADP Lifemart employee discounts
