Security Analyst

WINDSOR FASHIONS LLC • Santa Fe Springs, CA

3d • $100,000 - $125,000 • Onsite

About The Position

The Security Analyst safeguards Windsor Fashions’ IT infrastructure and data by owning daily operational security, privacy, and compliance workflows. The role focuses on first-line security-event triage, coordinating evidence collection for concurrent audits, and administering security-awareness and privacy activities to support the organization’s security posture.

The analyst performs initial investigations of Rapid7 and CrowdStrike alerts; prepares vulnerability reporting, validates patches and updates, and monitors threat intelligence. The role coordinates evidence and remediation tracking for financial, cybersecurity, PCI-DSS Level 1, and CCPA cybersecurity assessments, and supports the Manager with external assessor engagements. It also administers OneTrust and DSAR workflows, conducts initial vendor security reviews, manages security-awareness training and phishing simulations, maintains policy-exception and risk-acceptance workflows, and provides logistical and administrative support for incident-response readiness.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 3–5 years of experience in a security analyst or security operations role.
• Strong understanding of core security principles and operational best practices.
• Hands-on experience with vulnerability management platforms and endpoint detection and response (EDR) tools.
• Knowledge of network and system administration in cloud and retail environments.
• Excellent problem-solving, project coordination, and analytical skills.
• Strong communication and interpersonal skills for collaboration with stakeholders across departments.
• Ability to work overtime during peak seasons and as business needs require.

Nice To Haves

• Certifications such as CompTIA Security+, CompTIA CySA+, Certified Ethical Hacker (CEH), or AWS Certified Security – Specialty.

Responsibilities

• Perform first-line triage and investigation of Rapid7 and CrowdStrike alerts.
• Generate weekly vulnerability reports, validate patches and updates, and monitor threat intelligence against the organization’s environment.
• Coordinate internal evidence collection, manage compliance artifacts, and track remediation tasks across concurrent assessments, including Grant Thornton financial, AON cybersecurity, Tevora PCI-DSS Level 1, and the annual CCPA Cybersecurity Audit.
• Support the Manager by driving workflows for external assessor engagements.
• Administer the OneTrust platform, manage Data Subject Access Request (DSAR) workflows, and coordinate cross-department follow-ups to meet statutory privacy timelines.
• Conduct first-pass vendor security reviews; evaluate SIG and CAIQ questionnaires; and track Data Processing Agreements (DPAs).
• Administer the security-awareness training platform, track assignments for corporate and store employees, run phishing simulations, and generate compliance reports.
• Manage policy-exception intake and risk-acceptance workflows, schedule policy review cycles, and keep control-evidence documentation current.
• Provide logistical and administrative support for incident-response readiness, including scenario preparation, scheduling, and tracking after-action items through closure.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level