IT Security Analyst

IT Security Analyst

Come join our amazing team and work remote from home!

What You’ll Do

Responsible for cybersecurity, data security, governance, and compliance across IT, cloud, applications, and enterprise data platforms. Has core security engineering responsibilities with advanced data protection, compliance, and Microsoft Purview capabilities. Protects organizational systems and information assets against unauthorized access, disclosure, modification, or destruction, while ensuring compliance with regulatory, legal, and contractual obligations. Perform all duties in accordance with the company’s policies and procedures, all US state and federal laws and regulations, wherein the company operates.

What You’ll Need

• Manage and monitor enterprise security controls including network, cloud, application, and endpoint security.
• Design, implement, and maintain data protection controls including Data Loss Prevention (DLP), information protection, and encryption.
• Implement and manage Microsoft Purview solutions including Information Protection, DLP, Insider Risk Management, eDiscovery, Audit, Data Governance, and Data Security Posture Management.
• Conduct security monitoring, investigations, and incident response in coordination with SOC teams.
• Manage firewall, CASB, web filtering, EDR, IDS/IPS, and vulnerability management technologies.
• Document and maintain security policies, standards, procedures, and technical playbooks.
• Participate in system access reviews, compliance audits, and evidence collection for internal and external auditors.
• Provide security guidance for new projects, applications, AI solutions, and non‑standard IT requests.
• Collaborate with Legal, HR, Risk, and business teams on insider risk, investigations, and regulatory matters.
• Remain current on emerging security threats, regulatory requirements, and security technologies.
• Strong knowledge of IT cybersecurity principles, network and application security, and data protection controls.
• Hands‑on experience with Microsoft security platforms including Microsoft Purview, Defender, and Azure security controls.
• Understanding of regulatory frameworks such as NIST, ISO 27001/27002, CIS, FINRA, and SEC.
• Experience with SIEM, audit logging, forensic analysis, and security investigations.
• Strong analytical, organizational, and problem‑solving skills.
• Excellent written, verbal, and presentation communication skills.
• Ability to assess business risk and apply appropriate security controls.
• Professionalism, integrity, confidentiality, and ability to work under pressure.
• Bachelor’s degree in Computer Science, Information Technology, Engineering, or related field, or equivalent experience.
• Minimum of 3–5 years’ experience in information security, cybersecurity engineering, or data security.
• Preferred Certifications: CISSP, CISA, CCSP, AZ‑500, or equivalent

Our Company

Carrington Mortgage Holdings is a holding company whose primary businesses include asset management, mortgages, real estate transactions and real estate logistics. Collectively, the businesses are vertically and horizontally integrated, and provide a broad range of real estate services encompassing nearly all aspects of single-family residential real estate transactions in the United States. Guided by a leadership team with a wealth of industry experience and guided by a consistent philosophy, Carrington maintains the necessary infrastructure to ensure stability and maximize value during any market cycle. We hope you’ll consider joining our growing team of uniquely talented professionals as we transform residential real estate. To read more visit: www.carringtonhc.com.

What We Offer

• Comprehensive healthcare plans for you and your family.
• Plus, a discretionary 401(k) match of 50% of the first 4% of pay contributed.
• Access to several fitness, restaurant, retail (and more!) discounts through our employee portal.
• Customized training programs to help you advance your career.
• Employee referral bonuses so you’ll get paid to help Carrington and Vylla grow.
• Educational Reimbursement.
• Carrington Charitable Foundation contributes to the community through causes that reflect the interests of Carrington Associates.

Key skills/competency

• IT Security Analyst
• Cybersecurity
• Data Security
• Governance
• Compliance
• Microsoft Purview
• Incident Response
• Security Controls
• Risk Management
• NIST