Incident-Driven Information Security Analyst

Retail Services & Systems, Inc; North Bethesda (MD); On-site; USD 86,000 - 116,000; Full time

Benefits offered by this job

PTO

Store discounts

Health insurance

401(k)

Tuition assistance

Career development

Commuter benefits

Pet insurance

Disability insurance

Job summary

Total Wine & More in Bethesda, MD is seeking an Information Security Analyst to safeguard our technology environment. You will handle incident response, vulnerability management, insider threat monitoring, and data loss prevention while guiding risk discussions with senior leadership.

The role offers exposure to risk management, third party risk, policy development, identity and access management, and disaster recovery.

Qualifications

• 1–4 years in an IT-related discipline with at least 2 years in information security preferred.
• Experience securing cloud platforms such as Azure, AWS, and GCP.
• Experience with Microsoft Purview or similar compliance tools focused on Insider Threats and DLP.
• Familiarity with NIST, COBIT, ISO 27001, PCI-DSS, GDPR, and CCPA.
• Ability to document incidents and contribute to governance and policy discussions.

Responsibilities

• Respond to security incidents with root-cause analysis and remediation actions.
• Manage vulnerabilities and coordinate remediation with IT and business stakeholders.
• Monitor security events, perform investigations, and support on-call rotations.
• Support identity and access management, endpoint protection, and disaster recovery efforts.
• Maintain security dashboards and metrics for risk visibility.

Skills

Incident response

Vulnerability mgmt

Insider threat

Data loss prevention

Security reporting

Cloud security

IAM

Endpoint protection

Disaster recovery

Security engineering

Education

Bachelor's Degree in Information Security

Equivalent experience acceptable

Job description

Total Wine & More in Bethesda, MD is seeking an Information Security Analyst to safeguard our technology environment. You will handle incident response, vulnerability management, insider threat monitoring, and data loss prevention while guiding risk discussions with senior leadership.

The role offers exposure to risk management, third party risk, policy development, identity and access management, and disaster recovery.