IT Security Analyst

The ProSource Group, Inc.; Carlsbad (CA); Hybrid; USD 90,000 - 125,000; Full time

Job summary

The ProSource Group, Inc. in Carlsbad, CA is recruiting an IT Security Analyst for a hybrid role. You will help ensure the organization's IT environment aligns with security policies, regulatory requirements, and industry best practices, coordinating with IT management and auditors.

Your work includes monitoring controls, supporting SOX/PCI/NIST/CIS frameworks, conducting audits, maintaining evidence, and facilitating remediation with IT teams to improve the security posture.

Qualifications

• 4+ years of IT security, compliance, and audit experience.
• Understand IT general controls (ITGCs), access management, and security best practices.
• Experience supporting audits (internal, external, or regulatory).
• Ability to interpret regulatory requirements and policy documentation.

Responsibilities

• Prepare NIST/CIS evaluations with IT security and management.
• Monitor compliance with controls and frameworks (SOX, PCI, NIST/CIS, ISO, C-TPAT).
• Act as liaison between Audit and IT departments for clear communication.
• Coordinate cybersecurity tests with external orgs to ensure secure practices.
• Review IT admin activities to ensure policy adherence.
• Conduct formal audits and reviews per IT policies (monthly, quarterly, semi-annual).
• Maintain audit evidence and reporting materials for audits.
• Partner with IT to identify gaps and support remediation.

Skills

IT security

Regulatory compliance

Audit process

Data analysis

Tools

NIST framework

CIS controls

PCI DSS

Job description

IT Security Analyst

Carlsbad, CA

Hybrid model

Position Summary

The IT Security Analyst, reporting to the Director, IT, plays a key role in ensuring that the organization's IT environment operates in alignment with internal security policies, regulatory requirements, and industry best practices. This position provides oversight of IT administrative activities, monitors compliance with established controls, and collaborates closely with IT management and auditors to maintain a strong security and compliance posture.

The primary goal of this position is to evaluate, define, implement, monitor, and maintain audit processes and documentation; ensure compliance with regulations; maintain supporting evidence; and facilitate communication and coordination between the IT Department and internal/external auditors.

Key Responsibilities

• Prepare NIST/CIS evaluations in coordination with IT Security and/or IT Management personnel.
• Monitor compliance with internal controls, security standards, and frameworks such as SOX, PCI, NIST/CIS, ISO, and/or C-TPAT.
• Act as a liaison between Audit functions and the IT department to clarify processes, findings, and ensure effective communication throughout audit processes.
• Coordinate cybersecurity tests, including penetration tests and related evaluations, with external organizations to ensure IT practices and standards remain secure and current.
• Review IT administrative activities, including account creation, access modifications, privileged access assignments, and deprovisioning, to ensure adherence to security policies and regulatory requirements.
• Conduct and administer formal audits and reviews of IT systems and processes in accordance with IT policies and procedures, including monthly, quarterly, and semi-annual reviews.
• Maintain audit evidence, compliance documentation, control records, and related reporting materials to support internal, external, and regulatory audit requirements.
• Partner with IT management to identify compliance gaps, document findings, and support remediation planning and follow-through.

Required Qualifications

• 4+ years of experience in IT security, compliance, and audit.
• Experience with regulatory frameworks such as SOX, PCI, and NIST regulations.
• Understanding of IT General Controls (ITGCs), access management, and security best practices.
• Experience supporting audits, including internal, external, or regulatory audits.
• Ability to interpret and apply regulatory requirements and internal policies.
• Meticulous approach to data analysis and the presentation of findings in a clear and actionable manner.

Preferred Qualifications

• CISA and/or CISSP certifications are desirable.
• Experience working with control frameworks such as NIST/CIS, ISO, SOX, PCI, and/or C-TPAT.
• Prior experience coordinating cybersecurity assessments, penetration tests, or third-party security evaluations.