Cyber Security Analyst

Open — National Express has a posting for this job. Posted 28 Oct 2026.

This posting

Summit School Services companies share a strong commitment to provide the highest level of transportation safety, quality transportation, outstanding customer service and positive employee relations. Our corporate headquarters, located in Warrenville, Illinois, houses the administrative and corporate support functions for the organization. Our 250+ local customer service centers (CSCs) are supported by regional operations teams located throughout North America.

The Cyber Security Analyst is an individual contributor on the IT Infrastructure & Security team responsible for both active security operations and governance, risk, and compliance (GRC) program activities. The Analyst serves as a subject matter expert supporting internal business units, executive leadership, and external vendors across operational security and program governance.

Responsibilities:

• Monitor and triage alerts across approved security platforms (i.e Crowd Strike Falcon EDR/MDR, ZScaler, Mimecast, and Azure/Entra )
• Respond to IT security incidents, suspicious activity, and alerts to prevent adverse impact to users, processes, systems, or data; lead containment, root cause analysis, documentation, and post‑incident review
• Maintain and update the cybersecurity incident log; ensure all incidents are documented with consistent detail, timelines, and disposition for audit and trend analysis purposes
• Execute monthly vulnerability scans using approved security platform (i.e Crowd Strike Falcon Vulnerability Management); prioritize findings by severity and coordinate remediation of all critical and high findings with appropriate IT infrastructure and application teams within defined SLAs
• Supervise and coordinate penetration testing and vulnerability scanning activities executed by third‑party providers; own pre‑engagement scoping, access coordination, remediation tracking, and finding closure validation
• Evaluate IT security advisories and determine actions to assign to the appropriate team
• Support security operations across approved company platforms (i.e Microsoft Azure, Entra , and M365 environments) ; monitor identity‑based threats, conditional access policies, and privileged access governance
• Provide security advisory support to projects and initiatives in the form of IT security requirements and risk guidance
• Act as point of contact for ad‑hoc security inquiries, troubleshooting, and general IT security support
• Assess and evaluate third‑party suppliers through defined instruments to establish their IT security posture, identify associated risks, and communicate outcomes to relevant stakeholders
• Own and administer the IT Change Advisory Board (CAB) — including scheduling, facilitation, documentation, security review enforcement, change log maintenance, and change management metrics reporting
• Serve as primary coordinator for cyber insurance renewal questionnaires and audits; compile security control documentation, evidence, and metrics to support underwriter requirements; track and close identified control gaps; maintain a standing evidence library for recurring audit and insurance requests
• Own the lifecycle of IT security policies and procedures — drafting, annual review, version control, and stakeholder approval — ensuring alignment with regulatory requirements, insurance mandates, and operational realities
• Conduct security risk assessments for new and renewing technology vendors, including review of SOC 2 reports, security questionnaires, and contractual security requirements; maintain a vendor risk register and elevate material risks to the Director prior to contract execution
• Support activities concerning IT security assessment of…