IT Security, Risk & Compliance Analyst

About the role

Plan A Technologies is looking for a proactive, organized, and detail‑oriented IT Security, Risk & Compliance Analyst. You will support the day‑to‑day operation and continuous improvement of the internal enterprise security program while working closely with senior leadership, engineering, HR, and project management teams.

Key responsibilities

• Maintain and execute the periodic InfoSec controls calendar, including OS/app patching, EDR status, vulnerability scans, and infrastructure maintenance.
• Coordinate with HR, IT, software engineering, and project management to enforce security requirements and drive remediation items to completion.
• Write, update, and maintain IT security policies, SOPs, and user guidelines.
• Assist senior engineers in monitoring, investigating, and triaging endpoint and application security events.
• Perform baseline security evaluations and risk questionnaires for third‑party vendors and software tools.
• Support client due‑diligence questionnaires and review security clauses in contracts.
• Provide security best‑practice guidance, organize awareness training, and run security campaigns.
• Track security metrics, logs, and remediation efforts to continuously strengthen the organization’s posture.

Required profile

• 3+ years of hands‑on experience in Information Security, IT Audit, Technical Support, or GRC roles.
• Strong collaboration skills with cross‑functional teams.
• Ability to write clear security policies and documentation.
• Experience supporting incident response and security event triage.

Required skills

• Endpoint Detection & Response (EDR) platforms
• Mobile Device Management (MDM) – e.g., Microsoft Intune
• Patch management processes
• Vulnerability scanning tools
• Security awareness training design and delivery
• Fundamental understanding of cloud ecosystems and SaaS tools
• Source control basics (e.g., Git)