IT Security and Compliance Analyst

The IT Security & Compliance Analyst is a technically skilled member of Lima One Capital's Information Security & Compliance team. This role combines day-to-day security operations with SOX IT General Controls (ITGC) execution, audit support, and access governance. You will help keep Lima One's environment secure, its controls operating effectively, and its evidence audit-ready.

You will work alongside the existing security team and report directly to the Vice President of Information Security & Compliance. The ideal candidate is equally comfortable triaging a security alert in the morning and walking an auditor through control evidence in the afternoon.

Responsibilities:Security Operations & Incident Response

• Monitor, triage, and investigate alerts and incidents across the Microsoft Defender suite (Endpoint, Office 365, Identity, and Cloud Apps) and related security platforms.
• Perform threat hunting and incident analysis using advanced hunting queries (KQL) and log correlation; determine scope, root cause, and impact.
• Escalate critical incidents to the VP of Information Security & Compliance and support containment and remediation with IT teams.
• Tune detection rules, alert policies, and automated responses to reduce noise and improve signal quality.
• Maintain incident documentation and case tracking; contribute to incident response playbooks, runbooks, and tabletop exercises.

Microsoft Security & Compliance Platform Operations

• Review and tune Microsoft Purview controls, including data loss prevention (DLP) policies and alerts, sensitivity labels, retention, audit logging, and eDiscovery support.
• Review Microsoft Entra ID security posture, including Conditional Access, Identity Protection risk signals, and privileged access configuration.
• Assess security configuration and compliance posture across Microsoft 365, Intune-managed endpoints, and Azure; document gaps and track them to closure.

Vulnerability & Threat Management

• Review vulnerability scan and penetration test results; track remediation to closure.
• Perform risk-based prioritization of findings using threat intelligence and asset criticality; coordinate resolution with system owners and IT teams.
• Report on vulnerability trends, aging items, and SLA adherence.

SOX ITGC & Audit Support

• Execute assigned ITGCs and maintain evidence supporting control operation.
• Assist with quarterly and annual control testing and audit readiness activities.
• Gather audit artifacts, coordinate requests across IT teams, and support internal and external auditors.
• Track control exceptions and audit findings through remediation.
• Maintain a well-organized, audit-ready evidence repository.

Change Management & Internal Control Reviews

• Review change management records and logs; validate approvals and supporting documentation.
• Perform IT ticket quality and compliance reviews; identify process exceptions, control gaps, and recurring trends.
• Document findings and recommend practical corrective actions.

Continuous Improvement

• Identify opportunities to make control execution and evidence collection simpler, more consistent, and more repeatable.
• Recommend process and configuration improvements to the VP of Information Security & Compliance and system owners.

Metrics & Reporting

• Produce monthly operational reports and track cybersecurity and compliance KPIs.
• Support executive reporting and maintain compliance and audit-readiness dashboards.