Security Analyst Supervisor

Credit Control LLC•Earth City, MO

2d•$90,000 - $125,000

About The Position

The Security Analyst Supervisor is responsible for leading the day-to-day activities of the information security team while actively participating in cybersecurity operations. This role supervises security analysts, coordinates security monitoring, incident response, vulnerability management, and security operations, and helps protect the organization's systems, data, customers, and employees from evolving security threats. The ideal candidate has strong cybersecurity experience, practical knowledge of regulated environments, and the ability to balance hands-on technical responsibilities with team leadership and cross-functional collaboration.

Requirements

Bachelor's degree in Information Security, Cybersecurity, Information Technology, Computer Science, or related field; equivalent experience may be considered.
5+ years of experience in cybersecurity, information security, IT risk, security operations, or related technology roles.
2+ years of experience supervising, leading technical teams, or coordinating security operations.
Experience with security monitoring, incident response, vulnerability management, access controls, and risk remediation.
Working knowledge of cybersecurity frameworks such as NIST CSF, CIS Controls, ISO 27001, SOC 2, or similar standards.
Experience supporting audits, regulatory compliance, or security assessments.
Strong understanding of network security, endpoint security, cloud security, identity and access management, data protection, and security logging.
Ability to communicate technical security concepts to both technical and non-technical stakeholders.
Strong analytical, organizational, documentation, project management, and problem-solving skills.

Nice To Haves

Experience in financial services, collections, banking, lending, insurance, fintech, healthcare, or another regulated industry.
Knowledge of GLBA, CCPA, TCPA, FDCPA, privacy requirements, and data protection obligations.
Professional certification such as CISSP, CISM, CISA, Security+, CySA+, GSEC, or equivalent.
Experience with SIEM, EDR, vulnerability scanners, GRC platforms, IAM solutions, DLP, MDM, cloud security tools, and ticketing systems.
Experience leading security awareness programs, tabletop exercises, or incident response exercises.
Familiarity with vendor risk management and client security assessments.

Responsibilities

Supervise the daily operations of the information security team, including security monitoring, incident response, vulnerability management, access reviews, and security control enforcement.
Lead, coach, mentor, and develop security analysts by assigning work, establishing priorities, providing technical guidance, and supporting professional development.
Oversee the investigation, triage, escalation, and documentation of security alerts, incidents, and suspicious activity.
Participate in complex security investigations and provide technical leadership during security incidents.
Maintain and improve security policies, standards, procedures, and operational documentation.
Coordinate vulnerability scanning, remediation efforts, patch tracking, and reporting with IT infrastructure, application, and business teams.
Support compliance with applicable laws, regulations, and security frameworks such as GLBA, CCPA, TCPA, FDCPA, SOC 2, ISO 27001, NIST CSF, CIS Controls, or other applicable requirements.
Partner with Legal, Compliance, IT, Operations, and business leaders to identify security risks and implement practical safeguards.
Support third-party risk management by reviewing vendor security controls, questionnaires, contracts, and due diligence documentation.
Coordinate security awareness training, phishing simulations, and employee education initiatives.
Monitor and optimize security technologies including SIEM, endpoint protection, identity and access management, vulnerability management, email security, DLP, and cloud security platforms.
Develop and maintain incident response playbooks, escalation procedures, and post-incident documentation.
Prepare security metrics, dashboards, risk reports, and leadership updates.
Assist with internal and external audits, regulatory examinations, client security reviews, and evidence collection.
Ensure user access controls are properly implemented and periodically reviewed.
Recommend improvements to security controls, operational processes, automation, and security technologies.
Stay current on emerging cyber threats, attack techniques, regulatory changes, and industry best practices.