Information Security and Compliance Analyst - Entry Level

Position Overview

This role is designed for an entry-level professional seeking training and mentorship in information security governance, compliance, and IT operations. The Information Security and Compliance Analyst will coordinate and continuously enhance the organization's Information Security Management System (ISMS). The role supports technology operations, vendor management, project coordination, and software delivery efforts.

Core Responsibilities

• Maintain and improve ISMS policies, procedures, standards, and documentation ensuring adherence to ISO/IEC 27001 controls
• Coordinate information security risk assessments and manage the organization’s Risk Register and risk treatment plans
• Oversee vendor relationships including onboarding, offboarding, security reviews, contract tracking, and compliance
• Manage project schedules, risks, and communications to ensure timely delivery of software and infrastructure initiatives
• Work with software developers and external vendors supporting secure software development practices and technology upgrades
• Monitor ISMS objectives and KPIs, provide management reporting, and maintain audit-ready documentation
• Support audit coordination, including internal and external assessments, tracking findings, and facilitating management reviews
• Promote security awareness and training throughout the organization to foster a culture of information security

Required Qualifications

• Bachelor’s degree in IT, Cybersecurity, Information Systems, Business, Project Management, or equivalent experience
• Experience coordinating information security or compliance programs
• Familiarity with ISO/IEC 27001 standards and controls
• Experience managing technology vendors and third-party relationships
• Project coordination experience in business or technology environments
• Knowledge of cloud platforms such as Microsoft 365 and Azure
• Understanding of Angular frameworks and modern web application technologies
• Strong communication, organizational, and analytical abilities

Preferred Qualifications

• Certification as ISO/IEC 27001 Lead Implementer or Lead Auditor
• Background supporting HIPAA and/or SOC 2 compliance efforts
• Experience with SharePoint, Microsoft Teams, Planner, Azure DevOps, or Jira
• Work experience in SaaS or software development environments