Cybersecurity Analyst – Remote (Full‑Time Contractor)

About the role

World Business Lenders is seeking a seasoned Cybersecurity Analyst to own and evolve its security program. This full‑time independent contractor position works remotely, supporting a fast‑growing lender that serves small and medium‑sized businesses across the United States.

Key responsibilities

• Conduct a comprehensive cybersecurity risk assessment and produce a prioritized remediation plan.
• Design and implement the organization’s security strategy, roadmap, and governance.
• Establish security monitoring, incident‑response, and threat‑detection processes.
• Lead and mature Microsoft 365 and Azure security posture (Defender, Entra ID, Sentinel, Purview).
• Own SOC 1 and SOC 2 compliance readiness and audit preparation.
• Define and enforce IAM policies, MFA standards, and Zero Trust principles.
• Develop and maintain security policies, standards, and documentation.
• Evaluate and manage third‑party vendor and SaaS platform security risks.
• Oversee vulnerability management, including assessments, tracking, prioritization, and remediation coordination.
• Lead incident response and coordinate with MSPs, infrastructure teams, and leadership.
• Establish security awareness programs and foster a security‑conscious culture.
• Mentor junior cybersecurity staff and report risks and program status to senior leadership.

Required profile

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• 4–5 years of hands‑on IT experience with a proven track record in technical or infrastructure projects.
• 2–3 years in a dedicated security role or leading security initiatives.
• Experience with disaster recovery planning (DRP) and business continuity planning (BCP).
• Ability to work on a Windows device with a stable, reliable internet connection.

Required skills

• Microsoft 365 security
• Azure Defender, Entra ID, Sentinel, Purview
• SOC 1 and SOC 2 compliance
• Identity and Access Management (IAM), MFA, Zero Trust
• Vulnerability management
• Incident response
• Disaster Recovery Planning (DRP)
• Business Continuity Planning (BCP)
• Third‑party vendor risk assessment
• Security monitoring and threat detection