Cybersecurity Operations Analyst

Job Summary

The Cybersecurity Operations Analyst supports and advances THINK Surgical's cybersecurity program through security operations, incident response, vulnerability management, cybersecurity projects, compliance activities, AI governance initiatives, and data governance programs. Approximately 60% of the role focuses on cybersecurity operations, vulnerability management, incident response, compliance support, and security administration; approximately 40% focuses on cybersecurity projects, AI governance, data governance initiatives, and continuous security improvement. This position is based at THINK's corporate office.

Security Operations & Incident Response

• Monitor, triage, investigate, and respond to security alerts from MDR, SIEM, endpoint protection, cloud security, and identity security platforms
• Conduct incident investigations, collect forensic evidence, analyze root causes, and document findings
• Coordinate containment, remediation, recovery, and communication activities for cybersecurity incidents
• Develop recommendations to improve security controls, monitoring capabilities, and response procedures
• Assist with proactive threat hunting and security investigations
• Maintain incident response documentation, playbooks, procedures, and lessons learned

Vulnerability Management

• Own the vulnerability management lifecycle including identification, prioritization, remediation tracking, validation, risk acceptance, and reporting
• Coordinate with IT, Engineering, and system owners to ensure timely remediation
• Facilitate vulnerability review meetings and track remediation performance
• Analyze vulnerability trends and provide risk-based recommendations to management
• Assist with security hardening across endpoints, servers, cloud services, applications, and network infrastructure

Security Projects & Continuous Improvement

• Coordinate cybersecurity projects from planning through implementation and operational transition
• Develop project plans, timelines, status reports, risk registers, and implementation documentation
• Support deployment and optimization of security technologies including identity management, endpoint security, email security, vulnerability management, monitoring, and cloud security
• Participate in evaluation, testing, and implementation of new cybersecurity technologies and controls
• Coordinate activities with third-party vendors, consultants, and service providers
• Identify opportunities to improve security controls, operational processes, automation, and cybersecurity maturity
• Support strategic cybersecurity roadmap initiatives and continuous improvement programs

Identity & Access Management

• Support enterprise identity and access management processes including user provisioning, access reviews, privileged access management, conditional access, and authentication controls
• Assist with monitoring, investigation, and remediation of identity-related security events and risks
• Participate in implementation and continuous improvement of identity governance, least privilege, and zero-trust security initiatives

AI Governance & Data Governance

• Support the AI Governance Program by assisting with evaluation, monitoring, and secure adoption of artificial intelligence technologies and services
• Participate in cybersecurity reviews and risk assessments of AI-related use cases, applications, vendors, and third-party services
• Assist with development and implementation of security controls, standards, and policies related to responsible AI usage
• Support enterprise Data Governance initiatives including data inventory, classification, labeling, retention, protection, and lifecycle management
• Collaborate with stakeholders to identify and classify sensitive corporate, customer, employee, financial, and regulated data
• Participate in implementation and administration of DLP, data classification, information protection, and data labeling capabilities
• Assist in monitoring, reporting, and remediation activities related to data governance and information protection controls
• Support implementation and ongoing management of Microsoft Purview and other information protection technologies

Compliance, Risk Management & Customer Security

• Participate in cybersecurity risk assessments and remediation planning activities
• Maintain cybersecurity policies, standards, procedures, technical documentation, and operational artifacts
• Support quarterly IT General Controls (ITGC) reviews, access reviews, evidence collection, and remediation tracking
• Support SOC 2 audits and other compliance, regulatory, and certification activities
• Assist with vendor security reviews, third-party risk assessments, and customer due diligence activities
• Support customer security questionnaires and cybersecurity assessments related to organizational and product security controls
• Track and report remediation activities resulting from audits, assessments, and security reviews
• Coordinate security awareness initiatives including phishing simulations, employee training campaigns, policy communications, and effectiveness reporting
• Research emerging cyber threats, attack trends, and security best practices
• Assist with development of awareness materials, security communications, and educational content for employees

Collaboration & Communication

• Work cross-functionally with IT, Engineering, Quality, Regulatory, Compliance, and business stakeholders to improve the organization's security posture
• Serve as a cybersecurity subject matter resource for technology and business teams
• Present security findings, project updates, risk summaries, remediation status, and security metrics to management
• Assist with establishing and maintaining strong working relationships across the organization to promote a security-conscious culture

Tools & Environment

Work hands-on with a broad range of enterprise cybersecurity technologies and platforms supporting security operations, incident response, identity and access management, endpoint security, vulnerability management, cloud security, data protection, governance, risk, and compliance activities.