{"id":1531188,"url":"https://alion.io/job/ovative-group-lead-security-analyst","title":"Lead Security Analyst","company":{"id":1796135,"name":"Ovative Group","domain":"ovative.com","url":"https://alion.io/company/ovative","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Minneapolis, United States","Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":90000,"max":132000,"currency":"USD","period":"year","gross":null,"usd_annual":132000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"EU AI Act","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Google Workspace","optional":true},{"name":"Python","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-09-30T16:22:57Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-01T08:53:09Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Ovative Group:\nOvative Group is an independent, full-funnel media, measurement, and creative firm transforming how brands grow. We partner with leading names like American Eagle, Best Buy, Domino’s, The Home Depot, Polaris, and UnitedHealth Group to build smarter media and measurement programs that drive real, profitable growth.\nWe don’t just track performance-we redefine it. Powered by our proprietary intelligence platform, EMRge, and our holistic metric Enterprise Marketing Return (EMR), we help brands connect revenue, customer, and brand outcomes into one clear picture of success. Our approach to full-funnel strategy, buying, and measurement delivers results that matter-and it’s getting noticed. Our work has been recognized by Digiday, Google, USA Today, Inc. 5000, and Search Engine Land.\nAbout the Role\nOvative Group is seeking a Security Analyst to join our growing Information Security team. Reporting to the Head of Information Security and Privacy, this role\nowns the operational core of our governance, risk, and compliance program - client security questionnaires, vendor assessments, and SOC 2 operations - and builds out new capabilities in AI governance and enablement. The ideal candidate is a strong writer, highly organized, comfortable engaging both technical and non-technical stakeholders, and genuinely excited about helping a company adopt AI quickly and safely.\nResponsibilities\nGovernance, Risk, and Compliance\nOwn client security questionnaires end to end; build and maintain a reusable answer library to make each response faster and more consistent\nConduct vendor security assessments for new vendors and renewals; maintain ongoing vendor risk tracking\nRun SOC 2 compliance operations, including evidence collection, control monitoring, and audit support\nMaintain the risk register: track remediation owners and progress, and prepare quarterly risk reviews\nDrive the policy lifecycle: annual reviews, redline recommendations, and exception tracking\nSupport review of client contractual security obligations in partnership with our contracts administration team\nSupport data privacy compliance operations (CCPA, GDPR, etc.), including data inventory and mapping, subprocessor tracking, and data subject request support\nAI Governance and Enablement\nOperate the AI tool and vendor intake process: triage requests, run security and risk reviews, and document decisions\nConduct AI risk assessments using our risk methodology - threat modeling, control analysis, and risk scenarios - and help mature it into a repeatable framework\nBuild and maintain our AI inventory of approved tools, agents, and connectors; monitor for unapproved AI use\nMaintain AI usage policies and standards, and manage the exception process\nSupport access reviews for AI agents and connectors, including what data non-human identities can reach\nDeliver secure-AI enablement: training, office hours, and onboarding users to approved tools\nTrack the evolving AI regulatory and framework landscape (EU AI Act, NIST AI RMF, OWASP GenAI Security) and the AI governance sections appearing in client questionnaires\nSecurity Awareness and Training\nManage the security awareness training program, including content updates, completion tracking, and new-hire onboarding\nRun phishing simulation campaigns, reporting, and follow-up coaching\nOwn security communications and the intake channel for employee security questions\nIdentity and Access Governance\nCoordinate and execute periodic user access reviews and validate offboarding completion\nReview third-party application and OAuth grants across M365 and Google environments\nReporting and Security Operations Support\nBuild and maintain security metrics and dashboards covering operational trends, compliance posture, and training completion; support leadership reporting\nProduce periodic threat intelligence digests for the team\nDepending on experience and interest, support security alert triage, incident documentation, and tabletop exercise coordination\nSupport business continuity and disaster recovery plan maintenance and test coordination\n Skills and Qualifications\nTwo-year or four-year degree in information security, information technology, business, or related field; or 3+ years of equivalent experience\n2-5 years of experience in a security analyst, GRC, IT audit, compliance, or similar role title and level will be commensurate with experience\nWorking knowledge of security and compliance frameworks such as SOC 2, NIST CSF, or ISO 27001\nExperience responding to security questionnaires, conducting vendor assessments, or supporting audits\nFamiliarity with data privacy regulations (CCPA, GDPR, etc.)\nHands-on experience using generative AI tools, and a strong interest in AI governance and safe adoption\nExcellent written communication - much of this work is turning technical reality into clear, accurate answers\nStrong organization and attention to detail, with the ability to manage many parallel workstreams\nAbility to work effectively with technical and non-technical stakeholders across the business\nPreferred Qualifications\nCertifications such as Security+, CISA, CRISC, or CIPP\nExperience with compliance automation platforms (Vanta, Drata, or similar)\nFamiliarity with AI governance frameworks (NIST AI RMF, ISO/IEC 42001, OWASP GenAI Security)\nExposure to security operations tooling (SIEM, EDR) and alert triage\nExperience with M365 and Google Workspace administration or security configuration\nBasic scripting skills (Python or similar) for reporting and automation\nExperience working with personal information or other regulated data\nPay Transparency\nAt Ovative, we offer a transparent view into three core components of your total\ncompensation package: Base Salary, Annual Bonus, and Benefits. The salary range for this position below is inclusive of an annual bonus. Actual offers are made with consideration for relevant experience and anticipated impact. Additional benefits information is provided below.\nFor our senior security analyst positions, our compensation ranges from $90,000 to $132,000, which is inclusive of a 20% bonus.\nWorking at Ovative Group:\nWe provide strong, competitive, holistic benefits that understand the importance of your life inside and out of work.\nAt Ovative, culture isn’t a buzzword-it’s the reason we’ve been named a Top Workplace for ten years running. We lead with trust, transparency, and a commitment to doing the hard work others avoid.\nWe offer flexibility. You'll work from our Minneapolis, Chicago, or New York office on set days each week, and an option to work remote on others.\nOur open floor plan reflects our open communication and flat structure-where interns collaborate with VPs, analysts partner with senior leaders, and our CEO engages with every team member. Together, we create an environment where smart, driven people can do their best work and support one another in the process.\nWe’re equally committed to inclusion and belonging. Ovative fosters a workplace where everyone can participate and thrive-regardless of ethnicity, gender, sexual orientation, gender identity, or expression or other protected class status. Our benefits and policies reflect that commitment, from inclusive medical leave coverage for same-sex spouses to equitable care and support for all families.\nBenefits:\nWe strive to hire and retain the best talent by offering fair, competitive compensation, a meaningful bonus program, and excellent health coverage. When the company performs well, we all benefit.\nSome tangible benefits and amenities we enjoy:\nAccess to all office spaces in MSP, NYC, and CHI \nFrequent, paid travel to our Minneapolis headquarters for company events, team events, and in-person collaboration with teams\nGenerous paid vacation policy \n401k match program \nTop-notch health insurance options, inclusive of same sex partners \nFamily formation benefits including reimbursement options for fertility, pregnancy, and parenting needs \nMonthly stipend for your mobile phone and data plan \nSabbatical program \nCharitable giving via our time and a financial match program \nShenanigan’s Day \nAdditional information can be found at Ovative's Career Page.\nThe details of the benefits are covered by applicable plan documents for group benefits and by company policies where a plan document does not apply.\nWorking at Ovative won’t be easy-but if you like challenging, hard work, driving results, and being surrounded by the best talent, it has the potential to be the most rewarding job you’ll ever have. If you think you can make us better, we want to hear from you!\nEEO & Accessibility:\nOvative is an Equal Opportunity Employer committed to a respectful, inclusive workplace for all. Applicants receive consideration without regard to legally protected characteristics (e.g., color, religion, creed, national origin, sex, pregnancy, childbirth and related conditions, sexual orientation, gender identity/, gender expression, gender identity, age, physical or mental disability, marital/ status, familial status, military or veteran’s status, genetic information, status with regard to public assistance, and any other status protected under applicable law).\nWe provide reasonable accommodations consistent with the Americans with Disabilities Act and applicable state law to qualified applicants and employees with disability, unless doing so would create an undue hardship.\nIf you need assistance or accommodation at any stage of the application or interview process due to a disability, please contact us at .\nApplication Details and Process:\nApplicants must be legally authorized to work in the United States for any employer on a full-time basis, without current or future need for visa sponsorship. Ovative is unable to sponsor or take over sponsorship of an employment visa for this position. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification documentation upon hire.\nOpen Until Filled or Otherwise Withdrawn:\nWe encourage interested candidates to apply early. The position will remain open for at least 10 business days from the first day of posting. After this time, if the position has not been filled, the posting will remain open until the position is filled, or until the posting is otherwise closed or withdrawn for business reasons.","description_format":"text","description_chars":10460,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Company events","Health insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Business Development","Marketing Analytics & Attribution","Media & Audience Measurement"],"lifecycle":[{"event":"open","at":"2026-09-30T16:22:57Z"}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":36,"reasons":["conf:13","velocity","win:early"],"computed_at":"2026-10-01T05:45:00Z"},"pay":{"stated_usd_annual":132000,"is_top_pay":false},"html_url":"https://alion.io/job/ovative-group-lead-security-analyst","json_url":"https://alion.io/job/ovative-group-lead-security-analyst.json","meta":{"generated_at":"2026-10-01T10:40:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":1808,"day_limit":5000,"remaining_today":3192,"minute_limit":60,"resets_at":"2026-10-02T00:00:00Z"}}}