IT Security Analyst

IT Security Analyst

Carlsbad, CA

Hybrid model

Position Summary

The IT Security Analyst, reporting to the Director, IT, plays a key role in ensuring that the organization’s IT environment operates in alignment with internal security policies, regulatory requirements, and industry best practices. This position provides oversight of IT administrative activities, monitors compliance with established controls, and collaborates closely with IT management and auditors to maintain a strong security and compliance posture.

The primary goal of this position is to evaluate, define, implement, monitor, and maintain audit processes and documentation; ensure compliance with regulations; maintain supporting evidence; and facilitate communication and coordination between the IT Department and internal/external auditors.

Key Responsibilities

• Prepare NIST/CIS evaluations in coordination with IT Security and/or IT Management personnel.
• Monitor compliance with internal controls, security standards, and frameworks such as SOX, PCI, NIST/CIS, ISO, and/or C-TPAT.
• Act as a liaison between Audit functions and the IT department to clarify processes, findings, and ensure effective communication throughout audit processes.
• Coordinate cybersecurity tests, including penetration tests and related evaluations, with external organizations to ensure IT practices and standards remain secure and current.
• Review IT administrative activities, including account creation, access modifications, privileged access assignments, and deprovisioning, to ensure adherence to security policies and regulatory requirements.
• Conduct and administer formal audits and reviews of IT systems and processes in accordance with IT policies and procedures, including monthly, quarterly, and semi-annual reviews.
• Maintain audit evidence, compliance documentation, control records, and related reporting materials to support internal, external, and regulatory audit requirements.
• Partner with IT management to identify compliance gaps, document findings, and support remediation planning and follow-through.

Required Qualifications

• 4+ years of experience in IT security, compliance, and audit.
• Experience with regulatory frameworks such as SOX, PCI, and NIST regulations.
• Understanding of IT General Controls (ITGCs), access management, and security best practices.
• Experience supporting audits, including internal, external, or regulatory audits.
• Ability to interpret and apply regulatory requirements and internal policies.
• Meticulous approach to data analysis and the presentation of findings in a clear and actionable manner.

Preferred Qualifications

• CISA and/or CISSP certifications are desirable.
• Experience working with control frameworks such as NIST/CIS, ISO, SOX, PCI, and/or C-TPAT.
• Prior experience coordinating cybersecurity assessments, penetration tests, or third-party security evaluations.