Information Systems Security Analyst

The Information Security Analyst is responsible for safeguarding the organization’s information assets by identifying, assessing, and mitigating security risks. This role monitors security systems, investigates potential threats, evaluates IT controls, and partners with cross-functional teams to ensure compliance with internal policies and industry best practices. The analyst will play a key role in maintaining the confidentiality, integrity, and availability of company data across on-premises and cloud environments. Security Operations • Monitor security tools, dashboards, and alerts to identify and respond to threats in real time. • Investigate and triage security events, escalating incidents when necessary. • Conduct root-cause analysis and ensure proper remediation and documentation. • Manage endpoint security policies, including antivirus, EDR/XDR, and patching compliance. Risk & Compliance • Support vulnerability management programs by performing scans, analyzing results, and tracking remediation. • Assist with internal and external security audits, assessments, and regulatory compliance efforts. • Maintain and update security documentation, policies, and procedures. • Evaluate third-party vendors for security risk and compliance requirements. Identity & Access • Support identity and access management (IAM) processes, including provisioning/deprovisioning and periodic access reviews. • Ensure proper enforcement of MFA, conditional access, and privileged account controls. Governance & Training • Assist in developing security awareness content to educate employees on cybersecurity best practices. • Contribute to ongoing improvement of security controls, monitoring, and reporting. Projects & Continuous Improvement • Collaborate with IT, Operations, Compliance, and other teams to improve security posture. • Participate in security-related projects including system hardening, tool deployment, and incident preparedness. • Research and recommend new security tools, standards, and best practices. Minimum Qualifications • Must be able to obtain a state medical marijuana badge and pass a background check • Reliable transportation and valid driver’s license are required • Must be able to communicate with GDF Team effectively and professionally • Must perform under high pressure situations. • Strong customer service orientation • Ability to work in a fast-paced environment and handle high stress situations • Self-Motivated • Ability to multitask • Excellent organizational skills • Ability to stay focused • Positive attitude and strong work ethic. Must be a team player with a “can do” attitude • Available to work weekends, after normal business hours, and holidays as needed. Reliable transportation and valid driver’s license are required. Education & Experience Requirements • Bachelor’s degree in information security, Computer Science, IT, or related field — or equivalent experience. • 2+ years of experience in cybersecurity, information security, IT security operations, or related role. • Knowledge of security principles, frameworks, and best practices (e.g., NIST, CIS, ISO 27001). • Experience with security monitoring tools (SIEM, EDR/XDR, vulnerability scanners). • Familiarity with IAM concepts and controls. • Strong analytical, problem-solving, and incident response skills. • Experience with cloud security such as Microsoft 365 and AWS • Preferred: Security-related certification(s) (Security+, CySA+, SSCP, GSEC) Physical Requirements • Must be able to lift and carry up to 50 pounds. • Dexterity of hands and fingers to operate a computer keyboard, mouse, power tools, and other computer components • The ability to respond quickly to sounds • The ability to move safely over uneven terrain or in confined spaces • The ability to see and respond to dangerous situations • The ability to wear personal protective gear correctly most of the day • The ability to sit or stand for up to 12 hours at a time • The ability to work in bright/hot/humid conditions • The ability to work in low light situations • Lifting, standing, sitting, walking, bending, reaching, push/pull, repetitive use of hands, grasping use of hands, visual activity • Exposure to limited hazardous chemicals Here, we believe cannabis is the most natural form of medicine, that's why we are obsessed with creating and curating the best cannabis products in the south, using natural and sustainable farming practices, and giving back to our local community. We believe in plants over pills, and using the magic of mother nature to help people feel their best. As the self-declared Southern ambassadors of weed, we pride ourselves in staying true to our roots as we bring the best the cannabis world has to offer to the places we love most. From our high-tech, high-touch growing practices to our expert extraction methods, we are obsessed with creating and curating the best cannabis offering in the south. Everything we do here is rooted in our desire to cultivate goodness. Our approach to cannabis is straightforward: good people, good cannabis, good day. The core of our mission is to deliver high quality cannabis products and support and educate our communities on the tremendous healing benefits of this medicinal plant—and it all starts with our People. We encourage you to explore opportunities with a company whose culture is dedicated to celebrating diversity and is committed to creating an inclusive work environment. We firmly believe that maintaining diversity and inclusion is what contributes to our stellar decision making and increased creativity! We know we cannot achieve our goals without excellent talent- and so we’re looking for the best, brightest, and most determined individuals in the industry and beyond to join our team at this pivotal moment in history- the end of cannabis prohibition in the United States. As a vertically integrated multi-state operator in the cannabis space, our company is rapidly growing and building out our Team. From Cultivation and Manufacturing our own products, to Wholesale and Retail, even Accounting, Marketing, Compliance, IT and HR, we have a myriad of opportunities for people to join the Team. Our full-time Team Members are also eligible for generous benefits packages, including insurance, paid time off and holidays, 401K and Employee Resource Groups! We also offer a highly competitive compensation package. Should you join the Team, you’ll also be able to participate in any one of our Employee Resource Groups, which provide safe space and community for specific groups and cultures. We are excited to see the initiatives in community outreach and social justice work that come from these groups! We are an equal opportunity employer. Apply tot his job Apply To this Job