Job description

Position Summary: The Information Security & Compliance Analyst supports the organization's cybersecurity governance, risk management, and compliance initiatives. This role focuses on ensuring security controls align with business, customer, contractual, and regulatory requirements through risk assessments, control testing, policy management, audit support, and security documentation. The analyst will work closely with IT, business leaders, project teams, customers, and external auditors to assess security risks, validate control effectiveness, maintain compliance obligations, and drive continuous improvement of the organization's information security program. This position requires a strong understanding of cybersecurity principles, excellent communication skills, attention to detail, and the ability to translate security requirements into practical business processes. Key Responsibilities • Manage Information Security Governance and Compliance Activities by supporting cybersecurity, compliance, and data privacy initiatives, ensuring alignment with organizational objectives, customer requirements, and applicable regulatory frameworks. • Develop and Maintain Security and Privacy Documentation, including policies, standards, procedures, risk registers, security assessments, and compliance evidence repositories. • Conduct Risk Assessments and Control Reviews to identify gaps, evaluate security and privacy risks, and validate that administrative, technical, and operational controls are implemented and functioning effectively. • Support Audit, Compliance, and Security Readiness Activities by coordinating internal and external audits, collecting evidence, responding to customer security assessments, conducting regular cybersecurity tabletop exercises, and tracking corrective actions through remediation. • Administer Data Privacy and Information Governance Programs by supporting data classification, data handling, retention practices, privacy assessments, and compliance with contractual and regulatory privacy requirements. • Collaborate with Business and Technical Teams to promote security awareness; develop, maintain, coordinate, and track information security and data privacy training programs; monitor remediation activities; review vendor security practices; and provide reporting on security, risk, compliance, and privacy initiatives to leadership. Required Qualifications • 3-5 years of experience in information security, cybersecurity compliance, or risk management. • Working knowledge of security technologies, infrastructure, and operational security practices is preferred • Experience supporting cybersecurity frameworks such as NIST 800-171, NIST CSF, ISO 27001, SOC 2, CIS Controls, or CMMC. • Experience conducting tabletop exercises, risk assessments, control reviews, audits, incident management, and remediation tracking activities. • Experience developing and maintaining security policies, procedures, standards, and compliance documentation. • Strong communication and organizational skills, with the ability to effectively collaborate with business leaders, technical teams, customers, and auditors. • Bachelor's degree in a related field required; industry certifications such as Security+, CISA, CRISC, CGRC, or CISSP may be considered in lieu of a degree with at least two years of relevant experience COMPENSATION AND BENEFITS • Competitive salary and performance bonus • 401(k) program with company match up to10% of pay • Family medical, dental and vision insurance • Paid time off and other benefits • Barnhart CARES family care and community service opportunities PURPOSE – Barnhart is built on a strong foundation of serving others. The fruit of our labor is used to grow the company, care for our employees, and serve those in our communities and around the world. MINDS OVER MATTER – Barnhart has built a reputation for solving problems. We specialize in the lifting, heavy-rigging, and heavy transport of major components used in North American industry. NETWORK – Barnhart has built teams that form one of our industry’s strongest networks of talent and resources with over 70 branch locations across North America working together to serve our customers. This growing network offers our team members constant opportunity for career growth and professional development. CULTURE – Barnhart has a strong team culture -- the “One TEAM.” We are looking for smart, hard-working people who strive for excellence in their work and appreciate collaboration. Join a team that values Safety, Servant Leadership, Quality Service, Innovation, Continuous Improvement, Fairness, and Profit with a Purpose. EOE/AA Minority/Female/Disability/Veteran

Requirements

Must-haves

This position requires a strong understanding of cybersecurity principles, excellent communication skills, attention to detail, and the ability to translate security requirements into practical business processes.
Develop and Maintain Security and Privacy Documentation, including policies, standards, procedures, risk registers, security assessments, and compliance evidence repositories.
Conduct Risk Assessments and Control Reviews to identify gaps, evaluate security and privacy risks, and validate that administrative, technical, and operational controls are implemented and functioning effectively.
Administer Data Privacy and Information Governance Programs by supporting data classification, data handling, retention practices, privacy assessments, and compliance with contractual and regulatory privacy requirements.
3-5 years of experience in information security, cybersecurity compliance, or risk management.
Experience supporting cybersecurity frameworks such as NIST 800-171, NIST CSF, ISO 27001, SOC 2, CIS Controls, or CMMC.
Experience conducting tabletop exercises, risk assessments, control reviews, audits, incident management, and remediation tracking activities.
Experience developing and maintaining security policies, procedures, standards, and compliance documentation.
Strong communication and organizational skills, with the ability to effectively collaborate with business leaders, technical teams, customers, and auditors.
Bachelor's degree in a related field required; industry certifications such as Security+, CISA, CRISC, CGRC, or CISSP may be considered in lieu of a degree with at least two years of relevant experience

Nice-to-haves

Working knowledge of security technologies, infrastructure, and operational security practices is preferred

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: breezy
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off

Professional Development