Information Security & Compliance Analyst

What You'll Do: Help develop and maintain security policies, standards, and procedures. Conduct risk assessments and follow remediation items through to resolution. Support internal and external audits, including preparing documentation and evidence. Assist with security investigations and help document lessons learned. Handle data privacy inquiries and support the company's broader privacy practices. Evaluate and monitor third-party vendors from a security and risk perspective. Lead security and compliance initiatives, keeping stakeholders informed along the way. Create and deliver security awareness content for employees. Report on compliance status and risk trends to leadership. Stay current on evolving regulations, threats, and industry best practices. What You Bring 3+ years of IT experience, including meaningful time in information security, GRC, or risk and compliance. Working knowledge of common security and privacy frameworks and regulations (e.g., PCI DSS, SOC 2, NIST, CIS, GDPR, CCPA).Experience supporting audits and working with compliance or GRC tools. A solid understanding of core security concepts and tools. Strong attention to detail and the ability to manage multiple priorities independently. Clear communication skills with both technical teams and business leaders. A bachelor's degree in a technology-related field, or equivalent experience. Security certifications are a plus.