IT Security Analyst

Apptium is seeking an IT Security Analyst to support its IT and Security team. The role helps maintain the organization’s security posture, support compliance initiatives, and contribute to secure IT operations.

What you'll do:

• Security Monitoring Incident Response: Monitor security alerts, investigate suspicious activity, support incident response efforts, and document findings. Escalate security incidents and coordinate remediation activities as needed
• Vulnerability Management: Coordinate vulnerability scanning activities, review findings, prioritize remediation efforts based on risk, and work with infrastructure and development teams to track vulnerabilities through resolution. Validate remediation efforts and support ongoing vulnerability discovery initiatives
• Security Awareness Organizational Readiness: Plan, execute, and track security awareness initiatives, including phishing simulations, mandatory security training, and awareness campaigns. Monitor participation and help improve the organizations overall security posture and readiness
• Compliance Audit Support: Support internal and external audits and help maintain compliance with applicable security frameworks and standards, including SOC 2, ISO 27001, customer security requirements, and internal policies. Assist with evidence collection, remediation tracking, and control validation
• Endpoint Security: Deploy, administer, and maintain endpoint security solutions, including antivirus, endpoint detection and response (EDR), encryption, device management, and firewall technologies
• Identity Access Management: Manage user access controls, including account provisioning and deprovisioning, access reviews, privileged access management activities, and monitoring for unauthorized access attempts or anomalous activity
• Software, Patch Security Configuration Management: Ensure operating systems, applications, and security tools are appropriately configured, updated, and patched in accordance with organizational security standards and industry best practices
• Security Tooling Automation: Design, develop, implement, and maintain security tools, automations, and integrations that improve visibility, monitoring, compliance, vulnerability management, and operational efficiency across the organization
• Asset Inventory Tracking: Maintain accurate inventories of IT assets, software, and security technologies. Ensure assets comply with organizational security requirements and lifecycle management processes
• Documentation Reporting: Maintain security policies, procedures, standards, system documentation, compliance records, vulnerability reports, and security metrics. Provide regular reporting on security posture, remediation progress, and operational activities
• Collaboration Consultation: Partner with IT, Infra, Engineering, HR, Compliance, and business stakeholders to support secure and compliant operations. Provide guidance on security best practices and participate in security reviews for new technologies and business initiatives

What they're looking for:

• Bachelor's degree in Cybersecurity, Information Technology, or a related field, or equivalent experience
• 1 years of experience in IT, cybersecurity, or compliance-related roles
• Basic understanding of security principles, including endpoint protection, access control, and data privacy
• Familiarity with operating systems (Windows, macOS, Linux) and basic networking concepts
• Strong organizational and documentation skills
• Excellent problem-solving and communication abilities
• Eagerness to learn and grow in the cybersecurity and compliance field

Benefits:

• Elective benefits tailored to your country and lifestyle.
• Formal leadership and professional development programs, plus on-demand courses.
• Seminars and events supporting financial, physical, and mental well-being through the global Life Empowerment Assistance Program.
• Inclusive education and peer-to-peer conversations, with equitable growth and development opportunities.
• Onboarding program to network with new co-workers within your first 30 days.
• Internal, peer-led inclusive communities and activities, including business resource groups, local volunteering events, and environmental and social initiatives.