Security Analyst

• Security Operations: Perform first-line triage and investigation of Rapid7 and CrowdStrike alerts. Generate weekly vulnerability reporting, validate patches and updates, and monitor threat intelligence against Windsor’s environment.
• Audit Support: Coordinate internal evidence collection, manage compliance artifacts, and track remediation tasks across multiple concurrent assessments, including Grant Thornton (financial), AON (cybersecurity), Tevora (PCI-DSS Level 1), and the annual CCPA Cybersecurity Audit. Support the Manager as the internal engine driving the workflow behind external assessor engagements.
• Privacy Operations: Administer the OneTrust platform, manage Data Subject Access Request (DSAR) workflows, and drive cross-department follow-ups to ensure all statutory privacy timelines are met.
• Third-Party Risk Management: Perform first-pass vendor security reviews. Ingest and evaluate industry-standard vendor questionnaires-specifically the Standardized Information Gathering (SIG) questionnaire and the Consensus Assessments Initiative Questionnaire (CAIQ)-and track Data Processing Agreements (DPAs).
• Awareness and Training: Administer the security awareness training platform. Track user assignments for corporate and store employees, execute phishing simulations, and generate compliance reporting to meet audit requirements.
• Policy Administration: Manage the intake process for policy exceptions and risk-acceptance workflows. Schedule regular policy review cycles and ensure control-evidence documentation is kept up to date.
• Tabletop and IR Support: Provide logistical and administrative support for incident response readiness. Assist with scenario preparation, scheduling, and tracking after-action items to closure.

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 3-5 years of experience in a security analyst or security operations role.
• Strong understanding of core security principles and operational best practices.
• Hands-on experience with vulnerability management platforms and endpoint detection and response (EDR) tools.
• Knowledge of network and system administration within cloud and retail environments.
• Excellent problem-solving, project coordination, and analytical skills.
• Strong communication and interpersonal skills to collaborate with multi-department audit stakeholders.
• Certifications such as CompTIA’s Security+ and CySA+, Certified Ethical Hacker (CEH), or AWS Certified Security - Specialty are a plus.

Physical/Environmental Demands and Overtime & Availability: Ability to work overtime during peak seasons and as the business needs. Work is performed in an office environment and requires the ability to operate standard office equipment and keyboards. Must have the ability to walk short distances. Sedentary work. Exerting up to 10 pounds of force occasionally and/or a small amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects. Repetitive motion. Adequate movements (motions) of the wrists, hands, and/or fingers. Team members are required to have close visual acuity to perform activities such as: preparing and analyzing data and figures; transcribing; viewing a computer terminal; extensive reading.

• Job descriptions are merely a summary of the position. Duties and responsibilities are subject to change and may include any other that management finds necessary to successfully maintain business operations.