IT Security Analyst

The ProSource Group, Inc.; Carlsbad (CA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

The ProSource Group, Inc. is seeking an IT Security Analyst in Carlsbad, CA for a hybrid role that supports the IT department to ensure compliance with internal security policies, regulations, and industry best practices.

The role focuses on evaluating, implementing, monitoring, and maintaining audit processes and documentation to comply with regulatory requirements. Responsibilities include coordinating cybersecurity tests with external bodies, reviewing IT administrative activities, and

Qualifications

• 4+ years of experience in IT security, compliance, and audit.
• Experience with SOX, PCI, and regulatory frameworks.
• Understanding of IT General Controls (ITGCs) and access management.
• Experience supporting internal, external, or regulatory audits.
• Ability to interpret regulatory requirements and policies.
• Meticulous data analysis and clear findings presentation.

Responsibilities

• Prepare NIST/CIS evaluations in coordination with IT Security and/or IT Management personnel.
• Monitor compliance with internal controls, security standards, and frameworks such as SOX, PCI, NIST/CIS, ISO, and/or C-TPAT.
• Act as a liaison between Audit functions and the IT department to clarify processes, findings, and ensure effective communication throughout audit processes.
• Coordinate cybersecurity tests, including penetration tests, with external organizations to ensure IT practices remain secure.
• Review IT administrative activities including account creation, access modifications, privileged access assignments, and deprovisioning for policy adherence.
• Conduct and administer formal audits and reviews of IT systems and processes in accordance with IT policies (monthly/quarterly/semi-annual).
• Maintain audit evidence, compliance documentation, control records, and reporting materials for audits.
• Partner with IT management to identify compliance gaps and support remediation planning.

Skills

IT Security

Regulatory frameworks

ITGCs & access

Audits & compliance

Job description

IT Security Analyst

Carlsbad, CA

Hybrid model

Position Summary

The IT Security Analyst, reporting to the Director, IT, plays a key role in ensuring that the organization's IT environment operates in alignment with internal security policies, regulatory requirements, and industry best practices. This position provides oversight of IT administrative activities, monitors compliance with established controls, and collaborates closely with IT management and auditors to maintain a strong security and compliance posture. The primary goal of this position is to evaluate, define, implement, monitor, and maintain audit processes and documentation; ensure compliance with regulations; maintain supporting evidence; and facilitate communication and coordination between the IT Department and internal/external auditors.

Key Responsibilities

• Prepare NIST/CIS evaluations in coordination with IT Security and/or IT Management personnel.


• Monitor compliance with internal controls, security standards, and frameworks such as SOX, PCI, NIST/CIS, ISO, and/or C-TPAT.


• Act as a liaison between Audit functions and the IT department to clarify processes, findings, and ensure effective communication throughout audit processes.


• Coordinate cybersecurity tests, including penetration tests and related evaluations, with external organizations to ensure IT practices and standards remain secure and current.


• Review IT administrative activities, including account creation, access modifications, privileged access assignments, and deprovisioning, to ensure adherence to security policies and regulatory requirements.


• Conduct and administer formal audits and reviews of IT systems and processes in accordance with IT policies and procedures, including monthly, quarterly, and semi-annual reviews.


• Maintain audit evidence, compliance documentation, control records, and related reporting materials to support internal, external, and regulatory audit requirements.


• Partner with IT management to identify compliance gaps, document findings, and support remediation planning and follow-through.

Required Qualifications

• 4+ years of experience in IT security, compliance, and audit.


• Experience with regulatory frameworks such as SOX, PCI, and NIST regulations.


• Understanding of IT General Controls (ITGCs), access management, and security best practices.


• Experience supporting audits, including internal, external, or regulatory audits.


• Ability to interpret and apply regulatory requirements and internal policies.


• Meticulous approach to data analysis and the presentation of findings in a clear and actionable manner.

Preferred Qualifications

• CISA and/or CISSP certifications are desirable.


• Experience working with control frameworks such as NIST/CIS, ISO, SOX, PCI, and/or C-TPAT.


• Prior experience coordinating cybersecurity assessments, penetration tests, or third‑party security evaluations.