Cyber Security Analyst

Club Location:

Arcis Golf team members thrive on anticipating needs, forging connections, and elevating experiences for our team, members, and guests. We are an inclusive team of unique individuals who show up each day with a grateful spirit, humble heart, and a genuine respect for one another.

Cyber Security Analyst

Position Summary

The Senior Cyber Security Analyst is a key member of the Arcis Golf IT organization, providing security leadership and practical guidance across governance, risk, compliance, training, policy development, and vendor management. This role partners closely with IT and business teams to strengthen the company’s security posture, evaluate risk, and ensure security requirements are incorporated into projects and day-to-day operations. The position also supports team development through mentoring and knowledge sharing and plays a leading role in risk assessments, security impact reviews, control assessments, and third-party security oversight.

Essential Responsibilities

• Lead and support security assessments, audits, risk reviews, and policy development initiatives.
• Work with Managed Security Service Providers (MSSPs) and internal teams to support SOC operations, incident visibility, and security program execution.
• Perform risk analyses, develop remediation plans, identify compensating controls, and communicate findings through clear reporting and dashboards.
• Maintain and improve security policies, standards, procedures, and supporting documentation across both new and legacy environments.
• Provide security guidance for the design or modification of software, networks, infrastructure, hardware, and operational processes.
• Assess compliance requirements and recommend projects or control improvements aligned with applicable security frameworks and standards.
• Coordinate corporate Quarterly Access Reviews and other identity and access validation activities using Identity and Access Management (IAM) tools.
• Develop and maintain SIEM reporting, security dashboards, control monitoring, and automated validation processes.
• Evaluate system enhancements and emerging security solutions that can improve security, compliance, or operational efficiency.
• Serve as a security and risk advisor across the organization and with third-party vendors.

Qualifications

Experience

• 5+ years of progressive Information Technology experience, including Governance, Risk, and Compliance (GRC), IT compliance, risk management, or audit responsibilities.
• 2+ years of experience facilitating audit engagements and supporting compliance or operational improvement initiatives.
• 3+ years of experience identifying, assessing, and mitigating IT risk through assessments, control reviews, and remediation planning.
• Hands-on experience with IT infrastructure, including network topology, Microsoft operating systems, patching, change management, and Active Directory.
• 3+ years of experience with control monitoring, reporting, and automation of validation or compliance processes.
• Experience managing and evidencing controls across hybrid environments, including SaaS, PaaS, IaaS, and traditional data centers.

Frameworks and Standards

• Strong working knowledge of NIST, ISO, and other recognized security, risk, and control frameworks, with the ability to apply them to cybersecurity strategy and operations.

Tools and Technologies

• Working experience with Microsoft Defender, Intune, Active Directory, SentinelOne, DarkTrace, Rapid7, Program Maturity, Qualys, Nessus, and Microsoft Azure environments.

Key Attributes

• Strong understanding of IT governance, cybersecurity risk, compliance, and control management.
• Ability to execute and improve access validation and control-assurance processes.
• Effective leadership and mentoring skills with the ability to guide team members and collaborate across departments.
• Strong analytical and problem-solving skills with the ability to translate risk into clear, practical actions.
• Collaborative, proactive, and focused on continuous improvement.

Arcis Golf provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Arcis participates in E-Verify, the government program that certifies an employee's right to work for us in the U.S.