Information Security Analyst (GRC & Operations)

b'tttttnttttttntttnnnnnnntttttnttntttttttttttttt Monster Solutionsnttttttttttt JS Job Detailsntttttnttnttttttttttttnttttttttnnttttnttttnnttttnttnttnttnnttttttn ttttnnttttnttttntttttttttntttnttttttttttttttttntttttttttttttttnnttn ttnttnttnttttnttnttnttn nttttttnnnnnttnttnnnttnttnttttntttnttnnttntt-->nttttn nttttnttntttttttnnttttnnttttnnt ttn nttnn n nt nt tnttt This site attempts to protect users against rntCross-Site Request Forgeries attacks. In order to do so, you must have JavaScript enabled in your web browser otherwise this site will fail to work correctly for you.rnt See details of your web browser for how to enable JavaScript.ntnttntntttt

ntt

nnttttttttttt

ttttnnnnnnntttttt

nttn n n n n n

n n

n n Toggle navigationn n n

n

n

n

• n Job Searchn n
• n View All Jobsn n n

nn

n

• n Create Accountn n
• n Log inn n nttttttttttttttttttttttttttttt
• n Help n

n

• Help on this Page n

n n

n

n n

n nttttt

nttttttttnnnnnnnttt

nttnttntt

nntttttntt

tt

ntttnttt

nntttttttttttttttttntttttntttttnttttttttnttt

ntttnnnttttnn

ntntttnnnnnnnnnn

n

n

Job Details

n

n

nnnttttttttnttttttttttttttttnttttttn This site attempts to protect users against rntCross-Site Request Forgeries attacks. In order to do so, you must have JavaScript enabled in your web browser otherwise this site will fail to work correctly for you.rnt See details of your web browser for how to enable JavaScript.nnnnnnnnnnnntnntttntt

Information Security Analyst (GRC & Operations) - (SSC - 9090.1)

nnttnttttt

nttttttt

nttttntttttttttt

nttttntttttttttt

nttttt

nttttttnttttttntttttttnttttttttntttttttnttttttnttttt nttttt

nttttt

Share this job as a link in your status update to LinkedIn.

ntttttt

nttttttt

ntttttt

ntttt

ntttntt

ntttt

ntttnt

ntttttntttttttttttttttttttt

nttttttttttttttt

ntttttttntttttttttttttttttJob Titlenttttttttnttttttttttttttt

ntttttttttttttt

nttttttttInformation Security Analyst (GRC & Operations)ttttttttttttttt

ntttttt

nttttttttttttttttttttttttttttttt

nttttttttttttttt

ntttttttntttttttttttttttttLocationnttttttttnttttttttttttttt

ntttttttttttttt

nttttttttSupport Center - Las Vegas, NV 89119 US (Primary)

ttttttttttttttt

ntttttt

nttttttttttttttttttttttttttttttt

nttttttttttttttt

ntttttttntttttttttttttttttJob Typenttttttttnttttttttttttttt

ntttttttttttttt

nttttttttFull-timettttttttttttttt

ntttttt

nttttttttttttttttttttttttttttttt

nttttttttttttttt

ntttttttntttttttttttttttttCategorynttttttttnttttttttttttttt

ntttttttttttttt

nttttttttInformation Technologyttttttttttttttt

ntttttt

nttttttttttttttttttttttttttttttt

nttttttttttttttt

ntttttttntttttttttttttttttEducationnttttttttnttttttttttttttt

ntttttttttttttt

nttttttttttttttttttttttt

ntttttt

nttttttttttttttttttttttttttttttt

nttttttttttttttt

ntttttttntttttttttttttttttJob Descriptionnttttttttnttttttttttttttt

ntttttttttttttt

ntttttttt

WHSmith North America has an exciting opportunity for an Information Security Analyst to join our team in Las Vegas, NV!

nn

As the Information Security Analyst, you will support and secure our current and future cyber infrastructure while playing a key role in our Governance, Risk, and Compliance (GRC) program. This hybrid role blends hands-on security operations with compliance, training, and continuous control assessment responsibilities.

nn

What You'll Do

nn

nt

• Secure the organization's systems and information assets by applying cybersecurity best practices and protecting against unauthorized access, modification, or destruction. nt
• Partner with end users and department leaders to identify security needs and embed appropriate controls across business units. nt
• Deploy, integrate, and configure new and existing security solutions in line with standard operating procedures. nt
• Serve as a Tier 1 responder for cybersecurity alerts and remediations - triage, contain, escalate, document, and investigate problematic or anomalous activity. nt
• Support vulnerability assessments and penetration testing and coordinate timely remediation of identified weaknesses. nt
• Administer periodic access reviews to enforce least privilege. nt
• Support the global cybersecurity compliance program, maintaining alignment with frameworks such as NIST CSF, CIS Controls, ISO 27001, and PCI DSS. nt
• Perform continuous control assessments, document evidence, identify gaps, and report findings to key stakeholders. nt
• Maintain the risk register, control catalog, and support policies, standards, and procedures; assist with internal/external audits, third-party risk reviews, and ongoing monitoring. nt
• Deliver corporate cybersecurity training - new-hire onboarding, annual refreshers, role-based training, and phishing simulations. nt
• Manage training and awareness metrics (completion rates, click/report rates, repeat offenders, behavioral trends), report results to leadership, and coordinate remedial training with HR, IT, and managers. nt
• Foster a culture of security consciousness across the organization. n

nn

Compensation: $62,000 - 80,000

nn

MORE REASONS TO JOIN THE WHSMITH NORTH AMERICA TEAM

nn

nt

• Excellent Medical, Dental & Vision Insurance, Life Insurance, Short & Long-Term Disability Insurance nt
• Competitive Compensation nt
• Exceptional Time-Off Benefits including FTO and Holidays nt
• Growth opportunities and opportunities for career development nt
• 401k with company match nt
• Employee Assistance Program nt
• Commuter Benefits nt
• Incredible Employee Discounts through our Discount Marketplace! n

nn

About WHSmith North America

nn

WHSmith is a leading global travel retailer with over 1,700 stores across 30 countries worldwide. WHSmith North America, incorporating Marshall Retail Group (MRG) and InMotion, represents over half of the Company's international store estate, with a collection of attractive, successful specialty retail stores located in airports and resorts across North America.

nn

EEO/ADA/DFWP

nn

WHSmith North America is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sexual orientation, national origin/ancestry, age, gender identity, gender expression, military/veteran status, marital status, disability status or any other basis prohibited by law.

ttttttttttttttt

ntttttt

nttttttttttttttttttttttttttttttt

nttttttttttttttt

ntttttttntttttttttttttttttJob Requirementsnttttttttnttttttttttttttt

ntttttttttttttt

ntttttttt

nt

• Education: Bachelor of Science in Cybersecurity or a related field, or equivalent hands-on experience. nt
• Experience: 1-2 years of experience or internships in cybersecurity, IT, or GRC - or a strong academic background with relevant projects, certifications, or lab work. nt
• Frameworks & standards: Foundational understanding of common cybersecurity frameworks such as NIST CSF, CIS Controls, ISO 27001, or PCI DSS, and an interest in growing into continuous control assessments and compliance work. nt
• Security operations & EDR: Exposure to endpoint security or EDR tooling and a basic understanding of alert triage, escalation, and incident documentation; willingness to learn Tier 1 response workflows. nt
• Vulnerability & access management: Familiarity with vulnerability scanning concepts, remediation tracking, user access reviews, and least-privilege principles. nt
• Risk, policy & audit: Awareness of risk management and policy concepts, with an interest in supporting control assessments, evidence collection, and audit activities. nt
• Security awareness & training: Interest in helping build and deliver cybersecurity awareness content (onboarding, annual, phishing simulations) and tracking basic training and phishing metrics. nt
• Communication: Clear written and verbal communication skills, with the ability to explain technical topics to non-technical coworkers. nt
• People & soft skills: Approachable, collaborative, and customer-service oriented - comfortable working across departments, building trusted relationships, and engaging users with patience and empathy (especially when coaching on phishing, training, or access topics). Strong teamwork, active listening, and a positive, professional demeanor. nt
• Mindset: Curious, detail-oriented, and eager to learn - comfortable asking questions and growing into broader security and GRC responsibilities. n

nn

nn

Additional Requirements

nn

nt

• Frequent sitting nt
• Limited standing, walking, climbing, crouching, bending, pushing, or pulling nt
• Limited travel or overnight nt
• Occasional travel or overnight nt
• Frequent travel or overnight; including international nt
• Normal or corrected vision and hearing nt
• Can distinguish varying or specific colors, patterns, or materials nt
• Fluency in English is required for training, customer interactions, and ensuring compliance with company policies and procedures nt
• Typically, indoors nt
• Typically, at a consistent temperature nt
• Lift 0-25 lbs. nt
• Use of fine motor hand functions n

ttttttttttttttt

ntttttt

nttttttttttttttttttttttttntttntntt

nttntttttt

ntttttttttttt

ntttttt

nttttttttttttttttttttttttttttttttttttttttttttntttttttttnt

ntttttttttttn

ttttttttttt ntttttttttttn Apply To This Jobnntttttttttt

ntttttttttntnttttttttnnttttttttttttttttttttttntttn tttnttttttttttt

ntttt

nttt

ntnnnnntnntttn

n

n

nnn

nn

n

n

nv18.5.1.1n

n

nLast sync: 2026-07-09 00:30:10n

nnnnn

n n

nnn

n

n

nnnntttttnttttttttttnttt nttntnnnnntttnntttt

ntttttnttttt

3755 W. Sunset Road, Las Vegas, NV 89118 702.385.5233

nntttttnnttttt

nttttt

• Contact n
• Vendors n
• Privacy n

ttttt 2015 Marshall Retail Group. All rights reserved.

nntttt

nntttnnttnnnn

nt

nttMRG nt

n nt

ntt

nttt

• Aboutnttt

nttt

• History nttt
• What We Do nttt
• Specialization nttt

nttt nttt

• Brandsnttt

nttt

• Men nttt
• Women nttt
• News & Gifts nttt
• Souvenir nttt
• Candy nttt
• Licensed nttt
• Airports nttt
• Casinos nttt

nttt nttt

• Locations nttt
• Press nttt
• Partners nttt
• Careers ntt

nt

n

nnnn

n

x

n

n

n

n

n

n

Menu

n

nnnnnnn.