Information Security Analyst (GRC & Microsoft 365 Security)

Job overview

The Information Security Analyst (GRC & Microsoft 365 Security) role is onsite in Danvers, MA, with compensation of $100,000–$125,000 per year. Samsung HME America delivers medical imaging solutions and supports healthcare providers’ diagnostic capabilities and patient care. This analyst supports the organization’s information security and compliance program, maintaining ISO 27001 and CMMC readiness while contributing to Microsoft 365 security, incident response, AI governance, disaster recovery, and day-to-day IT operations.

What you'll do

• Maintain ISO 27001 and CMMC programs, evidence, remediation tracking, and audit readiness
• perform gap assessments and risk analyses
• develop security policies, procedures, and runbooks
• manage Microsoft 365 DLP policies and support Microsoft Purview and identity controls
• monitor SIEM alerts and support incident response and tabletop exercises
• contribute to AI usage policy and governance, disaster recovery planning and testing, help desk support, and user security guidance.

What we're looking for

Skills & competencies

information security analyst

grc

microsoft 365 security

iso 27001

cmmc

dlp

microsoft purview

siem

incident response

danvers ma

samsung hme america

$100k–$125k/year

Work arrangement

• Weekend coverage required

Benefits & perks

• Medical, dental, and vision plans
• company-paid disability, life, and AD&D coverage
• 401(k) match up to 5%
• tax-deferred health care savings programs
• accident, critical illness, hospital indemnity, pet, legal, and identity theft coverage
• paid time off and tuition reimbursement.

Why this role

Combines governance and audit readiness with hands-on Microsoft 365 security, AI policy, disaster recovery, and help desk support.

About the employer

Samsung HME America Inc is hiring for this role. Industry: Computer Systems Design Services. Sector: 54.