At Nox Group, we are dedicated to humanizing construction as one of the fastest-growing industrial enterprises in the US. Nox Group owns and operates Corbins, RMCI, Nox Innovations, and Construction Labels, and our teams set the standard as industry leaders. As we continue to expand our reach nationwide, we seek people who are passionate about personal growth and eager to make a positive impact throughout the industries and communities we serve. We prioritize our people, our partners, and our relationships. Start your journey today and join our skilled team.
The Information Security Analyst operates and maintains Nox Group's information security program under the direction of the Director of IT, who owns the program, approves all policies and standards, and makes the final decision on remediation and program changes. The Analyst monitors and responds to security events, maintains the Information Security Management System (ISMS), coordinates vulnerability remediation, maintains incident response and disaster recovery plans, governs identity and data access, and owns compliance and insurance evidence. As the day-to-day internal point of contact for security matters, this role turns findings into assigned, documented, and closed work.
Responsibilities
• Security Operations & Incident Response: Monitor, investigate, and contain security events, including phishing, suspicious sign-ins, identity risk detections, and malicious domains, whether alerts originate in Sophos MDR, Microsoft Defender, Entra ID identity protection, or Egnyte Secure & Govern. Own the employee phishing report process and take containment action on your own judgment within approved procedure.
• Incident Response Planning: Maintain and annually review the Incident Response Plan (severity model, roles, decision authority, escalation paths, communication templates, and SOPs). Facilitate tabletop exercises with IT, Finance, Legal, and leadership, run post-incident reviews, and track corrective actions to completion.
• Disaster Recovery & Business Continuity: Maintain the Disaster Recovery Plan, including recovery priorities, recovery time and recovery point objectives, and restoration runbooks, for Director of IT approval. Coordinate backup verification and restore and failover testing with the IT Systems Engineer, and support department leaders on continuity procedures.
• Governance & ISMS: Draft security policies, standards, and procedures for Director of IT approval and document them in the Nox Group Standard Works format. Keep the Risk, Exception, Compliance Obligations, CIS Control Mapping, and Vulnerability Advisory registers current, run the policy exception process, and measure program maturity against the CIS Controls and NIST Cybersecurity Framework.
• Vulnerability Management: Review platform findings and vendor advisories, confirm applicability and impact, and recommend remediation and target dates for approval. Track approved remediation to closure with evidence, coordinate patch targets with the IT Systems Engineer, and manage external assessments such as PCI ASV scanning and penetration testing.
• Identity, Access & Data Governance: Coordinate periodic access reviews of users, privileged roles, service accounts, and shared resources, and recommend MFA, passwordless, Conditional Access, and privileged access requirements. Review the joiner, mover, and leaver process, and maintain data classification, protection, retention, DLP, external sharing, and guest access requirements across file, email, and endpoint platforms.
• Vendor & Third-Party Risk: Serve as the day-to-day contact for the MDR provider, reviewing its reporting and verifying escalation contacts, response authority, and coverage across jobsite devices, subsidiaries, and cloud tenants. Perform security reviews of new software, SaaS, and vendors before adoption and document exceptions.
• Compliance & Customer Assurance: Own evidence and responses for customer, prime contractor, and cyber insurance security questionnaires, customer prequalification applications, and PCI DSS obligations. Support audits and customer security reviews, including those from data center clients.
• Security Awareness: Administer onboarding training, Sophos Phish Threat simulations, and targeted training for finance, field, and executive staff. Track completion, follow up with teams that need support, and use phishing trends to shape awareness messaging.
• Reporting & Coordination: Keep the Director of IT informed on program status, open risks, and upcoming deliverables, and produce regular reporting on incidents, vulnerabilities, access reviews, and awareness results for the Director of IT and CIO. Maintain security documentation and runbooks, partner with Legal, Accounting, People Operations, Safety, Procurement, and department leaders, evaluate security tooling for Director decision, and perform other duties as assigned.
Qualifications
• Entry-level position; relevant internship, co-op, or project experience in IT, security operations, or compliance preferred.
• Working knowledge of security fundamentals, including access control, incident response, risk management, and common attack types (phishing, ransomware, business email compromise); familiarity with NIST CSF, CIS Controls, or ISO 27001 preferred.
• Proficiency with Microsoft 365, SharePoint, and Office for document control and reporting.
• Exposure to Microsoft Entra ID, Microsoft Defender, Sophos Central, and Egnyte Secure & Govern preferred; PowerShell and Microsoft Graph for queries and evidence a plus.
• Experience writing or maintaining policies, standard operating procedures, or training materials a plus.
• Sound analytical judgment: able to investigate ambiguous events with incomplete information, separate real threats from noise, and make containment decisions under pressure.
• Strong process discipline: follows and maintains documented procedures and keeps registers, evidence, and closure records complete; organized and self-directed with deadlines and follow-ups.
• Clear communicator who can explain risk and required actions in plain language to field crews, project teams, and executives across multiple operating companies, and who maintains confidentiality.
• Commitment to staying current with the threat landscape, Microsoft and Sophos security capabilities, and the CIS and NIST frameworks.
• Ability to walk, climb, stoop, reach, bend, and lift or move up to 50 pounds; occasional travel to job sites and branch offices.
Education & Certifications
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field preferred; equivalent practical experience will be considered.
• CompTIA Security+ required within 12 months of hire.
Safety Level
This is a safety sensitive position and all applicable policies including drug test and background check will apply.
It has been and continues to be the long-standing policy of any Nox Group operating company to provide equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, national origin, age, disability, or genetics. In addition to federal law requirements, Nox Group and all of its subsidiaries comply with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.