InfoSec Analyst — Cloud, IAM & Incident Response

Cybersecurity Jobs

Nashville (TN)

On-site

USD 85,000 - 125,000

Full time

14 days+

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Thread Bank seeks an Information Security Analyst to operate the information security program onsite in Nashville, focusing on identity and access governance, vulnerability monitoring, incident response support, risk assessment, and audit evidence. The role covers AWS, Entra ID, and Microsoft 365, with a strong emphasis on documenting remediation and closure.

The candidate will support security outcomes across internal systems, cloud, digital banking products, and embedded banking connections,

Qualifications

Bachelor’s degree in information security, IT, computer science, or a related field is required or equivalent practical experience.
Three or more years of experience in information security, IT risk, or security consulting.
Knowledge of NIST CSF and NIST SP 800-53, translating control language into technical checks and evidence.
Hands-on experience with vulnerability scanning, log review, and cloud/infrastructure security.
Experience with Windows, Linux, directory services like Active Directory or Entra ID, and network fundamentals.

Responsibilities

Execute quarterly user access reviews across AWS accounts, Entra ID, SharePoint, and in-scope apps.
Reconcile system access with HR roster, flag exceptions, drive corrections, and obtain owner sign-off.
Perform segregation of duties checks and escalate conflicts to the ISO.
Maintain privileged credential inventory, monitor rotation, and review shared/admin accounts.
Process access requests, transfers, and terminations per Bank approvals.
Run recurring vulnerability scans and cloud configuration assessments across AWS and MS 365.
Triage findings by severity, assign remediation owners, and track against remediation schedule.
Verify remediation closed exposure and retain closure evidence.
Monitor external attack surface (certificates, exposed services, domains, APIs).
Escalate overdue findings to ISO with recommended actions.
Act as first responder for security alerts and mgmt detection providers.
Support incident response activities: triage, containment, evidence preservation, timelines, after-action.
Support incident analysis at providers/partners where Thread data/systems may be affected.
Track regulatory notification timelines during incidents and prepare records for ISO decisions.
Assess controls against NIST CSF and NIST SP 800-53; document gaps and treatment.
Support security review of new products, apps, integrations, infra changes pre-production.
Maintain information asset inventory and data classification records.
Test design and operating effectiveness of controls; document results for auditors/examiners.
Assemble and quality-check evidence for internal/external audits and regulatory exams.
Track audit findings through closure, with supporting docs.
Produce recurring program metrics and Board reporting materials.
Maintain information security policies and annual review cycles.
Run phishing simulations, report trends; deliver security awareness training and track completion.
Provide targeted training to teams handling sensitive customer information.
Perform additional responsibilities as directed by ISO.