Cyber Defense & Risk Analyst

Veritiv Operating Company; Sandy Springs (GA); On-site; USD 80,000 - 100,000; Full time

Benefits offered by this job

Healthcare benefits

401k with match

Paid time off

Job summary

Veritiv Operating Company is looking for a Cyber Defense & Risk Analyst to strengthen their security posture. This hybrid role based out of Atlanta involves monitoring security alerts, investigating incidents, and supporting audits. Candidates should have 3-5 years of experience, proficiency in security tools, and a Bachelor's degree is preferred. The company promotes an inclusive culture and offers extensive training, healthcare benefits, and 401k options.

Qualifications

• 3-5 years of related job experience.
• Ability to manage multiple projects and work under pressure.
• Strong customer service skills.

Responsibilities

• Monitor and analyze security alerts to validate incidents.
• Perform root cause analysis and support recovery activities.
• Assist with IT audit activities and third-party risk assessments.

Skills

Incident response

Security monitoring

Root cause analysis

Communication skills

Education

Bachelor's Degree

Tools

Microsoft Office Suite

SIEM/MDR

Email security tools

Job description

Cyber Defense & Risk Analyst page is loaded## Cyber Defense & Risk Analystlocations: USA - GA - Sandy Springstime type: Full timeposted on: Posted Todayjob requisition id: R31141HYBRID ROLE BASED OUT OF OUR ATLANTA OFFICE**Job Purpose:**Our Cyber Defense & Risk Analyst is responsible for strengthening Veritiv’s security posture through both cybersecurity operations and governance, risk, and compliance. This position partners closely with IT teams, Legal, Internal Audit, and third-party security providers to ensure risks are understood, prioritized, and reduced through practical and measurable actions.**Job Responsibilities:**Monitor, analyze, and validate security alerts using Veritiv’s security monitoring ecosystem (e.g., SIEM/MDR, endpoint security, identity protection, and email security tools). Investigate, triage, and respond to incidents (e.g., phishing, identity compromise, malware, suspicious network activity), coordinating with internal stakeholders and third-party providers as needed. Perform root cause analysis and support containment, eradication, and recovery activities; document incident details, actions taken, and lessons learned. Assist with technical security reviews of new or changing technologies (SaaS, cloud services, integrations, and vendors), identifying misconfigurations and recommending compensating controls. Partner with Internal Audit and control owners to support IT audit activities (e.g., evidence collection, walkthroughs, remediation validation, and closure of findings). Participate in third-party / vendor risk activities, including review of security documentation, questionnaires, and assessment results; help translate vendor technical risks into business impact and mitigation steps. Communicate complex technical topics clearly to non-technical stakeholders; produce concise written deliverables (incident summaries, risk write-ups, audit evidence narratives). Identify opportunities to automate and streamline GRC and security operations processes (e.g., alert triage, evidence collection, control testing support, reporting), including the responsible use of approved AI-enabled security capabilities to improve speed, consistency, and quality.**Additional Responsibilities & Qualifications:*** Working knowledge of common security controls and frameworks (e.g., NIST CSF, ISO 27001/27002, CIS Controls) and the ability to map technical issues to control requirements.* Hands-on experience with at least two of the following areas: security monitoring (SIEM/MDR), incident response, vulnerability management, endpoint security (EDR), identity and access management, email security.* Experience supporting audits and control testing (e.g., ITGC, internal audit, SOC report reviews), including evidence collection and remediation tracking.* Ability to write clearly and maintain thorough documentation (risk statements, procedures, incident notes, and audit evidence narratives).* Strong interpersonal and communication skills, including the ability to work effectively with both technical teams and business stakeholders.* Aptitude and desire to leverage AI-enabled capabilities and automation to improve security outcomes (e.g., workflow automation, scripting, playbooks, and repeatable process improvement) while maintaining appropriate governance and data handling practices.* IT, Risk Management, Computer Science and Business Administration majors preferred.**Work Experience:**● 3-5 years of related job experience.### ### ● Ability to manage multiple projects, work under pressure, and adapt to sudden changes in the work environment.### ### ● Ability to work quickly and efficiently.### ### ● Excellent verbal, written, people, and diplomacy skills are required.### ### ● Experience of interpreting strategy and policy in order to set and deliver objectives.### ### ● Proficient with Microsoft Office Suite.### ### ● Strong customer service skills (friendly, courteous and helpful).### ### ● Strong planning and organization skills are required.### ### ### ### ### ### ### ### ### ### ### ### ### ### ### ### **Education:**● Bachelor's Degree Preferred### ### ### ### ### ### ● Certified Information Systems Auditor (CISA) - Information Systems Audit and Control Association (ISSACA)### ### ### ### ● Certified Information Security manager (CISM) - International Information System Security Certification Consortium**What We Offer*** Engaging and inclusive culture with employee-led Employee Resource Groups, Veritiv Cultural Alliance, recognition platform, etc.* Extensive training opportunities, professional development programs, career pathing, and mentorship opportunities.* Collaborative atmosphere with our customers and suppliers to create healthier, safer and more sustainable communities through our responsible operations and innovative solutions.* Healthcare benefits, 401k, paid time off and tuition reimbursement.**About Veritiv**Together with its subsidiaries, Veritiv is the leading full-service provider of packaging solutions. Veritiv also provides JanSan, hygiene, print and publishing products and services. Veritiv serves customers in a wide range of industries, through team members around the world helping shape the success of its customers. For more information, visit and connect with the Company on .**What We Offer**● Engaging and inclusive culture with employee lead Employee Resource Groups, Veritiv Cultural Alliance, recognition platform, etc.● Extensive training opportunities, professional development programs, career pathing, and mentorship opportunities.● Collaborative atmosphere with our customers and suppliers to create healthier, safer and more sustainable communities through our responsible operations and innovative solutions.● Healthcare benefits and 401k with match start date of hire, paid time off and parental bonding time, tuition reimbursement, annual Profit-Sharing Program and much more! Learn more .