Entry-Level Information Security & Compliance Analyst

Veracity Insurance Solutions

Pleasant Grove (UT)

On-site

USD 55,000 - 70,000

Full time

3 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Health, dental, and vision plans

4 weeks Paid Time Off

10 company holidays with 2 floating

401K with employer match

Personal assistance programs

Job summary

Veracity Insurance Solutions in Pleasant Grove, Utah is seeking a Junior Information Security & Compliance Analyst. The role supports the security and compliance program, automating recurring tasks and maintaining audit-ready records across SOC 2 and PCI DSS.

You'll gain hands-on experience with cloud platforms, security tooling, and audits, while partnering with IT, Legal, and Compliance teams. Ideal for an early-career professional with 0–2 years in security, a relevant degree, and the desire

Qualifications

0–2 years of professional experience in security, internships or support count.
Bachelor's degree in Information Systems, IT, Cybersecurity, or related field, or equivalent experience.
Familiarity with at least one major cloud or productivity platform (AWS, M365/Azure, or Google Workspace).
Ability to own recurring, detail-heavy work to completion without reminders.
Comfort with spreadsheets, Jira, and documentation tools.
Excellent verbal and written communication for audits and records.
Discretion handling sensitive information including customer PII/NPI.
Coachability and curiosity about security, open to learning.
Composure under pressure during audits, incidents, and deadlines.
Health, dental, and vision plans; competitive time off; and 401K.
Paid time off and holidays support work-life balance.
Employer matching 401K and personal assistance programs.

Responsibilities

Monitor security dashboards, alerts, and logs across AWS, M365, Google Workspace, Grafana.
Run recurring vulnerability scans across cloud, endpoint, and apps; manage remediation tracker.
Serve as first-line triage for phishing and security questions; escalate with context.
Support incident response as first responder and scribe; draft post-incident notes.
Maintain security tooling health: MFA, agents, logging, and email security; report gaps.
Execute user access provisioning, role changes, and deprovisioning; ensure same-day removal.
Run quarterly access reviews; pull reports, chase responses, document evidence.
Enforce least-privilege and RBAC; flag orphaned accounts for remediation.
Maintain records of privileged/service/third-party accounts across units.
Collect and refresh audit evidence for SOC 2 and PCI DSS; support auditor requests.
Support SOC 2 and PCI DSS audits—track requests and prepare materials.
Maintain policy library, annual review calendar, approvals, and attestation tracking.
Support vendor risk assessments; collect SOC 2 reports and DPAs; flag gaps.
Perform internal control testing with evidence under senior guidance.
Draft responses to security questionnaires for review by the analyst.
Maintain asset inventory and security awareness training with completion tracking.
Build and maintain security metrics: vulnerabilities, SLA, access reviews, training.
Write runbooks, SOPs, and checklists for repeatable work.
Partner with IT, Engineering, Compliance, Legal, and Service teams for consistency.
Identify tasks to automate or streamline and propose improvements.
Other duties as assigned.