Info Security Analyst I

At Maritz, decades of innovation and perseverance have built a culture where human connection and collaboration are at the heart of everything we do. Joining Maritz means becoming part of a workplace that values people and their potential as our greatest resource. We help companies achieve their business goals by inspiring people to perform their best through experiences, incentives, and recognition programs. Our teams are intentionally built to care for each other and collaborate powerfully, with nearly 90% of employees reporting that their managers care about their concerns and 82% feeling genuinely appreciated. We’ve created a flexible environment that empowers you to do your best work while balancing personal life—nearly 90% of employees say they have the flexibility they need, and nearly 80% believe Maritz prioritizes employee well-being.

About the role

As a member of the Engagement Solutions Business Information Security Team, you will partner with business and technology teams to identify, assess, and mitigate information security risks while supporting Maritz's overall information security program. This role involves security reviews, vulnerability management, threat evaluation, incident response support, DevSecOps initiatives, risk assessment, fraud operational support, and audit/compliance activities. You will evaluate business processes, applications, and technologies to ensure alignment with security policies, regulatory requirements, and industry best practices, serving as a liaison between security, technology, and business stakeholders.

Responsibilities

• 30% Support secure use case reviews, application security assessments, architecture reviews, security exception requests, and third-party/vendor risk evaluations. Research emerging technologies and security requirements to identify risks and recommend appropriate controls, mitigations, and security best practices.
• 25% Support vulnerability management and DevSecOps initiatives by reviewing vulnerability findings, evaluating remediation plans and extension requests, maintaining application security scans, tracking remediation activities, coordinating efforts with application, infrastructure, and DevOps teams, and assisting with the evaluation and response to emerging security threats and vulnerabilities.
• 20% Support security governance, compliance, and audit activities including customer security assessments, PCI and SOC evidence collection, policy and standards maintenance, and responses to client security questionnaires and vendor assessments.
• 15% Develop, maintain, and utilize security reporting, automation, and analysis solutions through scripting, APIs, security tools, and data analysis to improve operational efficiency and provide meaningful security metrics.
• 10% Collaborate with development, DevOps, infrastructure, business, and security teams to communicate security requirements, support remediation efforts, assist with security initiatives, promote secure practices, and contribute to continuous improvement efforts.

Requirements

• Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field of study; equivalent practical experience may be considered in lieu of a degree.
• At least two years of experience within information security.
• Ability to research unfamiliar technologies, analyze technical documentation, troubleshoot issues, and develop practical recommendations or solutions.
• Knowledge of fundamental cybersecurity concepts including risk management, vulnerability management, incident response, secure software development, network security, cloud security, and authentication and authorization principles.
• Strong written and verbal communication skills with the ability to communicate technical concepts, security requirements, and risk-based recommendations to both technical and non-technical audiences.
• Ability to work independently and within a team environment to identify and analyze security risks, formulate recommendations, and coordinate remediation activities across multiple stakeholders.

Skills

• Basic scripting, automation, or data analysis experience using Python, PowerShell, SQL, APIs, Bash, Power Automate, or similar technologies (preferred).
• Familiarity with cybersecurity frameworks and standards such as NIST Cybersecurity Framework, CIS Controls, PCI DSS, SOC 1, and SOC 2.
• Experience working with cloud platforms, application security tools, vulnerability management platforms, source code repositories, CI/CD pipelines, or ticketing systems (preferred).

Nice to Have

• Security+, Network+, GSEC, or other security-focused certifications.
• Academic research experience, cybersecurity competition participation, internships, homelab projects, or other hands-on technical experience.
• Exposure to cloud-native architectures, containers, APIs, infrastructure-as-code, or DevSecOps practices.
• Experience using collaboration, DevOps, cloud, and security platforms such as Jira, Confluence, Bitbucket, Rapid7, SonarQube, GCP (and SCC), Azure, AWS, or similar technologies.

Schedule

This is a hybrid role based in Fenton, MO, requiring in-office presence on Tuesday, Wednesday, and Thursday.

Benefits

Maritz offers a comprehensive benefits package for full-time employees, including:

• Medical, dental, and vision insurance
• Life insurance and disability coverage
• Paid parental leave
• 401k retirement plan
• Tuition reimbursement
• Paid time off
• Year-end holiday closure

View all details at: www.MaritzBenefits.com