Ecommerce Security & Compliance Analyst (Hybrid)

Corporate Imaging Concepts (CIC); Northbrook (IL); Hybrid; USD 95,000 - 110,000; Full time

Benefits offered by this job

Medical, Dental, and Vision insurance

Life Insurance

Paid Time Off

401K Plan and Employer Discretionary M

Job summary

Corporate Imaging Concepts (CIC) is seeking an IT Security Analyst to own CIC's security posture, controls, and compliance. You will partner with the Infrastructure Manager and lead incident response, vendor risk assessments, and security tooling decisions in a hands-on role within a small IT team.

Responsibilities include managing MFA, endpoint and email security, and PCI-related obligations, while supporting day-to-day IT tasks.

Qualifications

• 3-6 years of hands-on security experience in an analyst or engineer role.
• Practical depth in Microsoft 365 / Entra ID security, endpoint protection, and email security.
• Experience answering client security questionnaires or completing vendor risk assessments.
• Working familiarity with PCI-DSS concepts; ecommerce/retail/SaaS environment a strong plus.
• Strong judgment to operate as a one-person security function.
• Generalist IT work experience including tickets and infrastructure tasks.
• Certifications such as Security+, CySA+, SSCP are welcome; senior certs not required.

Responsibilities

• Own day-to-day security posture, including identity and access controls (MFA, conditional access, privileged accounts).
• Support endpoint protection, email security, and patching priorities with Infrastructure.
• Monitor and triage alerts and advise on tooling growth.
• Advise leadership on security risk in clear, prioritized terms and costs.
• Own client-facing security compliance, including security questionnaires and vendor risk assessments.
• Maintain practical security documentation and policies for CIC’s size.
• Support PCI-related obligations with processing partners.
• Run vendor security reviews for platforms and integrations.
• Own incident response process including triage and post-incident follow-up.
• Run security awareness activities and phishing simulations.

Skills

Microsoft 365 security

Entra ID security

Endpoint protection

Email security

PCI-DSS concepts

Vendor risk assessments

Security questionnaires

PowerShell

Python

Tools

PowerShell

Python

Azure security tooling

Microsoft 365 administration

Job description

Corporate Imaging Concepts (CIC) is seeking an IT Security Analyst to own CIC's security posture, controls, and compliance. You will partner with the Infrastructure Manager and lead incident response, vendor risk assessments, and security tooling decisions in a hands-on role within a small IT team.

Responsibilities include managing MFA, endpoint and email security, and PCI-related obligations, while supporting day-to-day IT tasks.