Security Analyst – SOC & GRC

About the role

Verst Logistics is seeking a Security Analyst to join its IT team. Reporting to the SVP, IT, the analyst will work across the Security Operations Center and Governance, Risk & Compliance functions, combining hands‑on threat detection with strategic risk management.

Key responsibilities

• Monitor SIEM and other security tools to detect threats and vulnerabilities.
• Investigate and respond to security incidents, documenting analysis and remediation.
• Perform vulnerability scanning, penetration testing and security assessments.
• Develop, implement and maintain security policies, standards and procedures aligned with NIST, ISO 27001, SOC 2, HIPAA, PCI DSS and GDPR.
• Conduct risk assessments and support compliance reporting.
• Coordinate security audits, work with external auditors and address findings.
• Provide security awareness training and contribute to incident‑response planning.
• Collaborate with IT teams to apply security controls and remediate identified risks.

Required profile

• Minimum 3 years of experience in information security within a fast‑growing environment.
• Strong knowledge of security frameworks (NIST, ISO 27001, SOC 2) and regulatory requirements (HIPAA, PCI DSS, GDPR).
• Hands‑on experience with Windows, Linux and macOS operating systems.
• Proven ability to conduct risk assessments and develop security policies.
• Excellent analytical, problem‑solving and communication skills.

Required skills

• SIEM monitoring
• Vulnerability scanning
• Penetration testing
• Security assessments
• Risk assessment methodologies
• Windows, Linux, macOS
• NIST, ISO 27001, SOC 2
• HIPAA, PCI DSS, GDPR