Cybersecurity Analyst

World Business Lenders

14h•Remote

About The Position

Cybersecurity Analyst - Remote About World Business Lenders At World Business Lenders (WBL), we provide flexible, short-term commercial loans backed by real estate to help small and medium-sized businesses across the United States — particularly those facing difficulties with traditional financing. We're a fast-moving, results-driven organization that takes security seriously as we continue to grow. This is a Full-Time Independent Contractor role with working hours from 9:00 AM – 6:00 PM Eastern Standard Time, Monday through Friday. We request that all CVs be submitted in English. About the Role We're looking for a seasoned cybersecurity professional who can take ownership of our security program, from strategy to execution. You'll work closely with the Cyber Lead to strengthen our security posture, drive compliance, and protect the business as we scale.

Requirements

A Bachelor's degree in Information Technology, Computer Science, or a closely related field is required.
At least 4–5 years of hands-on experience in IT-related projects: with a track record of delivering results in technical or infrastructure-focused environments.
A minimum of 2–3 years in a dedicated security-focused role or actively leading security initiatives.
Must be using a Windows device.
Proven hands-on experience in Disaster Recovery Planning (DRP) and/or Business Continuity Planning (BCP).
Genuinely flexible and adaptable to possible shift changes as business needs evolve.
Stable, reliable internet connection
Professional and dedicated remote working setup
Strong English communication skills, both written and verbal, with the ability to connect well with different teams and stakeholders.
Comfortable explaining security risks and recommendations in a simple, clear way for non-technical audiences and executives.
Strategic thinker with a practical and solution-oriented approach.
Supportive leader with a collaborative approach to mentoring and team development.
Able to work independently, take initiative, and manage priorities confidently.
Well-organized with strong project management and coordination skills.
Adaptable and calm under pressure, especially in fast-paced or evolving environments.
Advanced Microsoft 365 security (Defender for Office 365, Microsoft Purview Exchange Online Protection).
Azure security architecture (Microsoft Entra ID, Microsoft Defender for Cloud, Microsoft Sentinel).
Strong understanding of Conditional Access, MFA, and Zero Trust principles, with experience in SIEM implementation and management (Microsoft Sentinel preferred).
Incident response leadership and foundational digital forensics knowledge.
Vulnerability management and risk prioritization using frameworks such as NIST and CVSS.
Identity and Access Management (IAM) design, governance, and privileged access management (PAM).
SOC 1 / SOC 2 compliance, including gap assessments, control mapping, and audit preparation.
SaaS security management and third-party risk assessments.
Familiarity with security frameworks such as NIST CSF, ISO 27001, or CIS Controls.
Strong understanding of networking, endpoint security, and cloud security fundamentals.

Nice To Haves

BPO – Experience in fast-paced service environments, operations, SLA management, and client coordination.
IT – Background in software, systems, technical support, or project delivery.
Telecom – Familiarity with network operations, service provisioning, or customer lifecycle management.
Fintech – Exposure to digital payments, e-wallets, lending platforms, or financial compliance (KYC/AML).

Responsibilities

Perform a comprehensive cybersecurity risk assessment and deliver a prioritized remediation plan.
Design and implement the organization's overall security strategy and roadmap.
Establish security monitoring, incident response, and threat detection processes.
Lead and mature Microsoft 365 and Azure security posture (Defender, Entra ID, Sentinel, Purview).
Own SOC 1 and SOC 2 compliance readiness and audit preparation.
Define and enforce IAM policies, MFA standards, and Zero Trust principles.
Develop and maintain security policies, standards, and documentation.
Evaluate and manage third-party vendors and SaaS platform security risks.
Oversee vulnerability management: assessments, tracking, prioritization, and remediation coordination.
Lead incident response, including coordination with MSPs, infrastructure teams, and leadership.
Establish security awareness programs and build a security-conscious culture.
Manage and mentor the Cybersecurity Analyst, providing technical direction and growth opportunities.
Report cybersecurity risks and program status to senior leadership.
Evaluate and recommend security tools and technologies.