Security & Compliance Analyst

Silvi Concrete Products, Inc.•Falls Township, PA

6d•Onsite

About The Position

We are seeking a Security & Compliance Analyst to support and strengthen our organization’s cybersecurity posture across a hybrid environment of on-premise systems and cloud platforms (including Microsoft Dynamics 365, SaaS applications, and operational technologies). This role is fully on-site and will be responsible for monitoring security controls, ensuring compliance with internal policies and external regulations, supporting audits, and working closely with IT, operations, and vendors to reduce risk across all systems.

Requirements

Bachelor's or Associate’s degree in Information Technology or a related field
2–5+ years of experience in cybersecurity, IT compliance, or risk management
Strong understanding of network security, identity & access management, and endpoint security
Experience with security frameworks (NIST, CIS, ISO, SOC 2)
Familiarity with cloud platforms (Microsoft 365, Azure preferred)
Experience reviewing logs, alerts, and performing incident response
Experience in the concrete/construction industry is also a plus.
Strong communication and interpersonal skills
Excellent organizational skills and attention to detail
Ability to manage multiple priorities in a fast-paced environment

Nice To Haves

Experience in hybrid environments (on-prem + cloud + SaaS)
Exposure to ERP systems (e.g., Microsoft Dynamics 365)
Knowledge of API security and integrations
Familiarity with SIEM, MDM, and EDR tools
Certifications such as Security+, CISSP, CISM, or CISA

Responsibilities

Monitor security alerts, logs, and events across systems (firewalls, endpoints, servers, ERP, and SaaS platforms)
Investigate and respond to potential security incidents and vulnerabilities
Support endpoint protection, network security, and identity/access management initiatives
Assist in vulnerability scanning, patch management, and remediation tracking
Maintain and enforce IT security policies, standards, and procedures
Assist with internal and external audits, including evidence collection and documentation
Track and report on compliance metrics and risk posture
Identify, assess, and document security risks across systems and processes
Work with stakeholders to implement mitigation strategies
Conduct third-party/vendor risk assessments
Ensure secure data flow between systems (ERP, dispatch systems, APIs, middleware, etc.)
Review API integrations and authentication mechanisms
Collaborate on secure architecture for hybrid environments
Manage and audit user access across systems (Active Directory, Azure AD, ERP systems)
Conduct periodic access reviews and enforce least-privilege principles
Support security awareness training programs for employees
Promote best practices around phishing, data handling, and system access