IT Security Analyst - Technical

The IT Security Analyst is responsible for supporting and analyzing the Company’s IT security and compliance documentation, process, procedures, and audits. The IT Security Analyst will participate in conducting overall security assessments through vulnerability testing and risk analysis.  In addition, the role will act as a liaison between the business and IT ensuring all security processes and procedures are being followed in the organization while working with IT leadership to identify new and current software solutions and controls are in place to secure both online and on-premises infrastructures.

The essential functions in this job description are not all-inclusive of this position’s duties and responsibilities.  Reliable and dependable attendance is required.

• Assess, gather, and present data for the internal audit process for user rights access management for access to all required systems.
• Support annual PCI audit process and documentation delivery to ensure business is compliant to PCI standards.
• Understand security related patching process, log & event correlation, and related reporting tools.
• Coordinate annual penetration and weekly vulnerability scanning with 3rd party partner.
• Understand and complete monthly application security scanning/external websites.
• Assist in reviewing annual policies, procedures, and control processes to ensure proper execution. This may include creating procedural documentation and runbooks to support compliance and audit efforts.
• Assist in planning and performing walk-throughs as determined by internal and external auditors.
• Analyze IT requirements and provide objective advice on the use of IT security requirements
• Work with IT Leaderships and Training to create and update security training programs to train employees on security awareness
• Provide insights on the efficacy of the current security policies, incident responses, disaster recovery plans, and other security-related information.

• Bachelor’s degree or equivalent experience required
• Minimum of two years’ IT\cyber security experience is required
• Strong understanding of MS AD and, Intune Azure AD
• Experienced in operating and reporting with the following platforms: SIEM, EDR/XDR/MDR, & Vulnerability/Penetration testing systems
• Halo experience is preferred
• N-Able RMM tool experience is helpful
• Experience with SaaS, EASM, FIM, CSPM, CSAM
• Experience with phishing and email filtering tools
• Qualys and CrowdStrike experience is helpful
• Restaurant IT support experience is preferred

First Watch is the leading Daytime Dining concept serving made-to-order breakfast, brunch and lunch using the freshest ingredients available. Guided by its “Follow the Sun” culinary philosophy, First Watch’s chef-driven menu rotates multiple times per year to feature the highest-quality flavors at their peak, offering elevated executions of classic favorites, fresh juices like the Kale Tonic, and fan favorites such as the Lemon Ricotta Pancakes, Quinoa Power Bowl and signature Million Dollar Bacon. For every kid’s meal served, First Watch proudly donates a portion to organizations and causes making a positive impact to our communities – raising approximately $2.0 million to date. A recipient of many “Best Breakfast” and “Best Brunch” awards, First Watch was voted #1 Best Breakfast by Newsweek’s Readers’ Choice Awards 2025, and also named 2025 and 2024’s #1 Most Loved Workplace in America by the Best Practice Institute – an accolade most recently featured in The Wall Street Journal – after appearing on the list in 2022 and 2023, as well. With a commitment to quality, hospitality and community, First Watch is redefining Daytime Dining across more than 630 First Watch restaurants in 32 states. For more information, visit www.firstwatch.com.

First Watch is an equal opportunity employer.  In compliance with the Americans with Disabilities Act, First Watch will provide reasonable accommodations to qualified individuals with disabilities and encourages both prospective and current employees to discuss potential accommodations with the employer.