Cybersecurity Operations Analyst

JOB SUMMARY The Cybersecurity Operations Analyst is responsible for supporting and advancing THINK Surgical's cybersecurity program through a combination of security operations, incident response, vulnerability management, cybersecurity projects, compliance activities, AI governance initiatives, and data governance programs. This role serves as a key contributor to the organization's overall cybersecurity and information protection strategy, helping secure systems, cloud services, endpoints, data, and emerging technologies while continuously improving cybersecurity maturity across the organization. Approximately 60% of the role is focused on cybersecurity operations, vulnerability management, incident response, compliance support, and security administration. Approximately 40% of the role is focused on cybersecurity projects, AI governance, data governance initiatives, and continuous security improvement efforts. The successful candidate will investigate security events, coordinate remediation efforts, support data protection initiatives, contribute to AI governance activities, and lead security improvement projects in collaboration with IT, Engineering, Quality, Compliance, and business stakeholders. This position is based at THINK’s corporate office. DUTIES & RESPONSIBILITIES Security Operations & Incident Response Monitor, triage, investigate, and respond to security alerts generated from MDR, SIEM, endpoint protection, cloud security, and identity security platforms. Conduct incident investigations, collect forensic evidence, analyze root causes, and document findings in accordance with established procedures. Coordinate containment, remediation, recovery, and communication activities related to cybersecurity incidents. Develop recommendations to improve security controls, monitoring capabilities, and response procedures based on incident findings. Assist with proactive threat hunting and security investigations. Maintain incident response documentation, playbooks, procedures, and lessons learned. Vulnerability Management Own the vulnerability management lifecycle including identification, prioritization, remediation tracking, validation, risk acceptance, and reporting. Coordinate with IT, Engineering, and system owners to ensure timely remediation of identified vulnerabilities. Facilitate vulnerability review meetings and track remediation performance against established targets. Analyze vulnerability trends and provide risk-based recommendations to management. Assist with implementation of security hardening recommendations across endpoints, servers, cloud services, applications, and network infrastructure. Security Projects & Continuous Improvement Coordinate cybersecurity projects from planning through implementation and operational transition. Develop project plans, timelines, status reports, risk registers, and implementation documentation. Support deployment and optimization of security technologies including identity management, endpoint security, email security, vulnerability management, monitoring, and cloud security solutions. Participate in evaluation, testing, and implementation of new cybersecurity technologies and controls. Coordinate activities with third-party vendors, consultants, and service providers supporting cybersecurity initiatives. Identify opportunities to improve security controls, operational processes, automation, and overall cybersecurity maturity. Support strategic cybersecurity roadmap initiatives and continuous improvement programs. Identity & Access Management Support enterprise identity and access management processes including user provisioning, access reviews, privileged access management, conditional access, and authentication controls. Assist with monitoring, investigation, and remediation of identity-related security events and risks. Participate in implementation and continuous improvement of identity governance, least privilege, and zero-trust security initiatives. AI Governance & Data Governance Support the organization's AI Governance Program by assisting with the evaluation, monitoring, and secure adoption of artificial intelligence technologies and services. Participate in cybersecurity reviews and risk assessments of AI-related use cases, applications, vendors, and third-party services. Assist with development and implementation of security controls, standards, and policies related to responsible AI usage. Support enterprise Data Governance initiatives, including data inventory, classification, labeling, retention, protection, and lifecycle management activities. Collaborate with business and technical stakeholders to identify and classify sensitive corporate, customer, employee, financial, and regulated data. Participate in implementation and administration of Data Loss Prevention (DLP), data classification, information protection, and data labeling capabilities. Assist in monitoring, reporting, and remediation activities related to data governance and information protection controls. Support implementation and ongoing management of Microsoft Purview and other information protection technologies. Compliance, Risk Management & Customer Security Participate in cybersecurity risk assessments and remediation planning activities. Maintain cybersecurity policies, standards, procedures, technical documentation, and operational artifacts. Support quarterly IT General Controls (ITGC) reviews, access reviews, evidence collection, and remediation tracking. Support SOC 2 audits and other compliance, regulatory, and certification activities. Assist with vendor security reviews, third-party risk assessments, and customer due diligence activities. Support customer security questionnaires and cybersecurity assessments related to both organizational and product security controls. Track and report remediation activities resulting from audits, assessments, and security reviews. Coordinate security awareness initiatives, including phishing simulations, employee training campaigns, policy communications, and effectiveness reporting. Research emerging cyber threats, attack trends, and security best practices applicable to the organization. Assist with the development of awareness materials, security communications, and educational content for employees. Collaboration & Communication Work cross-functionally with IT, Engineering, Quality, Regulatory, Compliance, and business stakeholders to improve the organization's security posture. Serve as a cybersecurity subject matter resource for technology and business teams. Present security findings, project updates, risk summaries, remediation status, and security metrics to management. Assist with establishing and maintaining strong working relationships across the organization to promote a security-conscious culture. Tools & Environment Work hands-on with a broad range of enterprise cybersecurity technologies and platforms supporting security operations, incident response, identity and access management, endpoint security, vulnerability management, cloud security, data protection, governance, risk, and compliance activities. SUPERVISORY RESPONSIBILITIES N/A QUALIFICATIONS Required: Bachelor’s degree in a relevant field or equivalent experience. 3-5 years of hands-on experience in cybersecurity, information security, or security-focused IT roles. Experience investigating security events and coordinating remediation activities. Experience managing vulnerability remediation efforts and security improvement initiatives. Working knowledge of: Security Operations Vulnerability Management Incident Response Identity & Access Management Endpoint Security Data Protection & Information Security Controls Familiarity with data classification, data governance, information protection, or DLP concepts. Understanding of cybersecurity risks associated with cloud services, SaaS platforms, and emerging AI technologies. Strong analytical, troubleshooting, documentation, project coordination, and communication skills. Ability to independently manage multiple priorities and projects with limited supervision. Preferred: Experience in healthcare, medical device, biotechnology, manufacturing, or other regulated industries. Experience supporting SOC 2, HIPAA, NIST Cybersecurity Framework, ISO 27001, ISO 13485, or FDA-regulated environments. Experience with Microsoft 365 security technologies including Defender, Entra ID, Intune, Conditional Access, and Purview. Experience implementing or supporting data governance, data classification, information protection, or DLP programs. Familiarity with AI governance, emerging technology risk management, or responsible AI practices. One or more relevant cybersecurity certifications (e.g., Security+, CySA+, SSCP, GSEC, SC-200, AZ-500, CISSP, or Associate of ISC2). COMPETENCIES Drives results Decision quality Effective collaboration and communication Optimize work processes Maintain confidentiality and trust Project and initiative management Technical and analytical problem-solving Continuous learning and adaptability PHYSICAL DEMANDS & WORK ENVIRONMENT Must be able to remain in a stationary position and operate office equipment for a prolonged period of time. Physical activities include, but not limited to constant manual dexterity, moving about the work site, and/or handling objects weighing up to 20 lbs. Other infrequent physical activities include, but not limited to, positioning self to complete assigned tasks, and ascending/descending floors and/or ladders. Occasionally work around moving mechanical parts. Must be able to work in a schedule that commensurate with business operation, including work during weekends, holidays and/or times outside of normal business hours. Must be able to travel as business necessitates (up to 10%). Disclaimer: The above is intended to describe the general content of and requirements for the performance of this job. It is not to be construed as an exhaustive statement of duties, responsibilities, or physical requirements. Nothing in this job description restricts management’s right to assign or reassign duties and responsibilities to this job at any time. Reasonable accommodations may be possible to enable individuals with disabilities to perform the essential functions. THINK Surgical, Inc. (“THINK”) is committed to hiring the best qualified candidates for approved positions while engaging in recruitment and selection practices that are in compliance with all applicable employment laws. It is the policy of THINK to provide equal employment opportunity for employment to all applicants and employees, regardless of any protected status. Any qualified applicant or employee with a disability who requires an accommodation in connection with their employment at THINK should contact Human Resources and request an accommodation. THINK also participates in E-Verify, a web-based system that allows THINK to confirm an employee’s eligibility to work in the United States. Actual compensation offered will depend on several factors including but not limited to geographic location, work experience, education, skill level, and/or other business and organizational needs.