Security Posture Analyst ; Remote

The South State story is one of steady growth, deep community roots, and an unwavering commitment to helping our customers move forward. Since our beginnings in the 1930s to becoming a trusted financial partner across the South and beyond - we are known for combining personal relationships with forward-thinking solutions.

We are committed to helping our team members find their success while maintaining the integrity of our values: building trust, fostering lasting relationships and pursuing excellence. At South State, individual contributions are recognized, potential is cultivated and team members are inspired to achieve their greater purpose. Your future begins here!

The Security Posture Analyst I supports the Cyber Threat Exposure Management program by monitoring, analyzing, and reporting on the security posture of the Company's on-premises, cloud, SaaS, and security technology environments. This role helps provide visibility into control effectiveness, exposure trends, configuration drift, and emerging risks through actionable metrics, dashboards, and reporting. The position enables informed risk-based decision making by ensuring security posture data is accurate, measurable, and effectively communicated to stakeholders.

• Enterprise Security Posture Monitoring
  - Monitor and assess the security posture of on-premises, cloud, SaaS, identity, endpoint, network, application, and security technology environments to identify exposure, control weaknesses, configuration drift, and emerging security risks.
• Security Metrics, KRIs & Executive Reporting
  - Develop, maintain, and publish security posture scorecards, dashboards, KPIs, KRIs, trend analysis, and management reporting that measure exposure, control effectiveness, remediation performance, asset coverage, and alignment to established risk tolerances.
• Exposure Analysis & Risk Prioritization
  - Analyze vulnerabilities, misconfigurations, exposed assets, and control deficiencies to identify material exposures and support risk-based remediation prioritization using threat intelligence, exploitability, business criticality, and potential business impact.
• Posture Data Management & Analytics
  - Correlate, validate, normalize, and analyze information across security, cloud, SaaS, vulnerability management, asset management, and threat intelligence platforms to ensure accurate risk representation and identify systemic weaknesses, coverage gaps, and emerging trends.
• Remediation Oversight & Risk Governance Support
  - Monitor remediation activities, validate corrective actions, track exposure reduction efforts, support escalation processes, and provide posture visibility that promotes accountability for risk reduction and compliance with security standards and service level objectives
• Compliance, Assessments & Program Maturity
  - Support regulatory, audit, risk management, and internal assessment activities through posture reporting and evidence collection while identifying opportunities to improve visibility, automation, measurement capabilities, and overall Threat Exposure Management program effectiveness.
• It is the responsibility of this role to take ownership of all tasks and challenges that they encounter in the operation of their assigned position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Data Analytics, or a related field preferred.
• Equivalent education, military experience, certifications, or relevant work experience may be considered.

• 2-4 years of experience in cybersecurity, information technology, risk management, technical analysis, security operations, or a related field.
• Experience gained through internships, co-op programs, military service, help desk support, systems administration, security operations, or similar technical roles is preferred.
• Exposure to vulnerability management, cloud security, security monitoring, identity security, endpoint security, attack surface management, or security reporting platforms is beneficial.

• No certification required.
• Preferred certifications include CompTIA Security+, ISC2 Certified in Cybersecurity (CC), Microsoft SC-900, Microsoft AZ-900, or equivalent entry-level cybersecurity or cloud certifications.

• Working knowledge of cybersecurity…