Information Security Analyst

Information Security Analyst

Reports To: Manager of Technology Operations & Security

Employment Type: Full Time, FLSA Status: Exempt, EEO Category: Professionals

The Impact you Will Have:

The Information Security Analyst supports the company’s day-to-day information security, compliance, trust, and technology operations activities. This role helps maintain the security and reliability of the company’s internal technology environment while supporting customer trust, vendor security review, compliance readiness, and information security questionnaire automation.

The primary focus of this role is information security and compliance operations, including support for information security questionnaires, Vanta workflows, evidence collection, control documentation, security response preparation, and operational security follow-up. The role also provides escalated IT service desk support for issues that require additional technical investigation, security awareness, identity/access review, endpoint troubleshooting, or as-needed operational response.

This is a mid-level individual contributor role. The role is not expected to fully own all security questionnaire responses or compliance workflows at the start, but will prepare, triage, coordinate, draft, validate, and maintain materials for review by the Manager of Technology Operations & Security, Information Security Architect, or other appropriate technical owner. As the role matures and automation improves, the position may grow into greater ownership of security questionnaire operations, trust content management, and recurring compliance support processes.

What You’ll Do:

• Support information security questionnaire workflows, including intake, tracking, draft responses, evidence gathering, internal follow-up, and preparation of materials for technical or leadership review.
• Assist with information security questionnaire automation efforts, including maintaining approved response libraries, mapping recurring questions to standard answers, identifying gaps, and improving repeatability.
• Support Vanta platform operations across compliance monitoring, evidence collection, customer trust workflows, vendor security review, control documentation, and audit readiness.
• Maintain accurate security and compliance documentation, including SOPs, runbooks, control notes, questionnaire content, evidence records, access review documentation, and knowledge base articles.
• Prepare and triage security-related requests, escalating items requiring approval, ownership, or deeper technical review.
• Perform security reviews of AI tools, agents, and connectors (including MCP integrations) against Crucial Learning’s approved-integration standards.
• Assist with customer and vendor trust activities by coordinating responses, collecting relevant artifacts, and validating information with internal subject matter experts.
• Support operational security activities, including access review follow-up, MFA hygiene, endpoint security checks, vulnerability remediation tracking, patch compliance follow-up, phishing report triage, and security incident escalation.
• Provide escalated IT service desk support for tickets involving identity/access issues, endpoint concerns, suspicious activity, business system access, device posture, or other issues requiring stronger technical or security awareness.
• Assist with onboarding and offboarding workflows related to account access, device readiness, application permissions, and documentation.
• Help maintain asset, access, endpoint, and system records to support reliable IT operations and security control requirements.
• Participate in as-needed on-call support for urgent IT or security-related issues, escalating appropriately.
• Partner with IT, security, legal, sales, customer success, and business stakeholders to collect accurate information for security questionnaires and trust-related requests.
• Identify opportunities to improve questionnaire turnaround time, documentation quality, service desk handoffs, security hygiene, and repeatable operating processes.
• Stay current on relevant security, compliance, IT support, SaaS administration, and service management practices.
• Perform other duties as assigned.

What You’ll Need:

• 2–3+ years of experience in information security, IT operations, service desk escalation, systems administration, compliance operations, technical support, or a related technology role.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Information Technology, Management Information Systems, or a related technical field is highly beneficial; equivalent practical experience, military technical training, or applicable certifications such as CompTIA A+, Network+, Security+, Microsoft, Azure, Okta, ITIL, ISC2 Certified in Cybersecurity, SSCP, or similar may also be considered.
• Foundational-to-working knowledge of information security concepts such as access control, MFA, phishing, endpoint protection, patching, vulnerability management, incident escalation, data protection, and secure system administration.
• Experience or exposure to Microsoft 365, Entra ID/Azure Active Directory, Okta or similar identity platforms, endpoint management tools, ticketing systems, and common SaaS business applications.
• Demonstrated, hands-on use of generative AI tools in technical or operational work, with examples of where you checked, corrected, or declined to use AI output.
• A track record of teaching yourself new tools quickly, and comfort with workflows that change as automation mature
• Ability to support security questionnaire, Vanta, and compliance operations through accurate documentation, evidence gathering, draft response preparation, issue tracking, internal follow-up, and escalation to appropriate technical or leadership reviewers.
• Strong written communication skills with the ability to prepare clear, accurate, and well-organized questionnaire responses, documentation, tickets, knowledge base articles, and internal stakeholder updates.
• Strong attention to detail and ability to validate information before documenting it, relying on it for compliance purposes, or preparing it for external customer, vendor, or auditor review.
• Sound judgment to determine when information can be prepared independently and when it requires review, approval, or escalation.
• Strong customer service orientation with the ability to support employees, technical teams, business partners, and external trust/compliance stakeholders professionally.
• Ability to manage multiple requests, track follow-ups, document decisions, and work effectively in a lean technology team environment.
• Familiarity with security, compliance, or control frameworks such as SOC 2 Type 2, CMMC Level 2, NIST Cybersecurity Framework 2.0, NIST 800-171, CIS Controls, ISO 27001, or FedRAMP-related environments is beneficial but not required.
• Ability to participate in as-needed on-call support for urgent IT or security matters.
• Ability to travel to in-person events at least once a year.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future

What You’ll Get:

• Access to some of the richest professional development programs.
• A variety of benefits. Programs include health benefits, life insurance, income protection and retirement savings plan with employer contributions to assist with your health & financial security today and in the years ahead.
• Access to health benefits and wellness programs for employees and families.
• The ability to work in a flexible work environment.
• Professional development support as we want YOU to be successful in your career. Our team will work with you to establish the goals you are trying to achieve in your profession.

The Process:

The first step is to apply to the role. If your experience matches our needs, you will be reached out to by a member of the HR team to set up a call to learn more about you. From there, you can expect to meet with the hiring manager and some other members of the team. We like to connect over the phone, via Zoom and sometimes, in person (when applicable)!

AAP:

Crucial Learning provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, Crucial Learning complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Crucial Learning expressly prohibits any form of workplace harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of Crucial Learning’s employees to perform their job duties may result in discipline up to and including discharge.

If you are vision-impaired or have some other disability under the Americans with Disabilities Act or a similar law, and you wish to discuss potential accommodations related to applying for employment at Crucial Learning, please contact our Recruitment department at hr@cruciallearning.com.

ADA (American with Disabilities Act) Information

• Work is performed primarily in an office setting
• Operates standard office equipment to include a computer, calculator, copier, fax, telephone

The anticipated base salary range for this position is $75,000-100,000 annually with the opportunity to participate in a variable incentive plan. The actual base salary offered will depend on factors such as experience, skills, qualifications, and location.

Crucial Learning is an Equal Opportunity Employer – minorities, females, veterans, and individuals with disabilities are encouraged to apply.