Security & Compliance Analyst

Job Description

We are seeking a Technical Security & Compliance Analyst to support security, compliance, and operational readiness across complex post production and creative technology environments. This role serves as the bridge between Creative Operations, Production Technology, Infrastructure, and Cyber Security teams, ensuring enterprise security controls are implemented without disrupting critical creative workflows.

The ideal candidate combines hands-on experience supporting macOS, Windows, and Linux systems with a strong understanding of vulnerability management, endpoint security, compliance monitoring, and post production technologies. This individual will help maintain secure, compliant technology environments while supporting the unique requirements of media production operations.

Responsibilities Monitor and maintain the security and compliance posture of macOS, Windows, Linux, workstation, and server environments. Perform vulnerability identification, investigation, remediation, and validation using enterprise security and compliance tools. Deploy, troubleshoot, and support endpoint security solutions, including EDR platforms, security agents, and monitoring tools. Identify systems with missing, unhealthy, or outdated security software and coordinate remediation efforts with support teams. Support operating system patching, application updates, vulnerability remediation, and security hardening initiatives. Partner with Cyber Security teams to assess security requirements and determine their impact on creative technology platforms and production workflows. Validate security controls and configurations across post production applications and supporting technologies. Assist with testing security agents, patches, configuration changes, and compliance controls prior to production deployment. Support credential management, privileged access controls, and related security technologies. Maintain evidence and documentation required for audits, compliance reviews, and control validation activities. Perform asset discovery and inventory reconciliation to ensure accurate visibility of workstations, servers, applications, and infrastructure. Identify technical compliance gaps and coordinate resolution efforts across infrastructure, endpoint, application, and vendor teams. Track vulnerabilities through remediation and closure while validating corrective actions. Support security scanning, configuration reviews, compliance assessments, and ongoing monitoring activities. Document technical risks, remediation plans, dependencies, and mitigation strategies. Contribute to security and compliance reporting, including vulnerability metrics, remediation status, asset visibility, and control effectiveness.

Skills and Requirements

5+ years of experience supporting enterprise technology, information security, compliance, or infrastructure environments. Strong knowledge of macOS administration and troubleshooting. Working knowledge of Windows desktop, Windows Server, and Linux environments. Experience supporting endpoint security, vulnerability management, and security compliance programs. Familiarity with vulnerability management platforms such as Qualys, Tenable, Rapid7, or similar solutions. Experience supporting endpoint detection and response (EDR) platforms such as CrowdStrike, Microsoft Defender, SentinelOne, or comparable technologies. Understanding of patch management, endpoint protection, security hardening, and asset management practices. Experience documenting remediation activities, technical controls, and audit evidence. Strong analytical, troubleshooting, and problem-solving skills. Ability to communicate effectively with technical teams, security stakeholders, and business partners. Experience supporting post production, media technology, broadcast, film, television, or creative services environments. Familiarity with Avid Media Composer, Adobe Creative Cloud, Adobe Premiere Pro, DaVinci Resolve, and related production technologies. Experience working in Mac-heavy enterprise environments. Knowledge of shared storage systems, creative workstation technologies, and media workflows. Experience collaborating with Cyber Security, Infrastructure, Endpoint Engineering, or Compliance organizations. Hands-on experience performing vulnerability remediation and validating remediation results. Familiarity with security and compliance frameworks, audit requirements, and enterprise security controls. Experience supporting specialized production technologies where security requirements must be balanced against operational needs.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].