Information Security Analyst (GRC & Microsoft 365 Security) in Danvers, Massachusetts at Samsung HME America Inc

Information Security Analyst (GRC & Microsoft 365 Security)

• Location: On-site in Danvers, MA

Who We Are

Samsung HME America (Healthcare and Medical Equipment) is Samsung’s U.S. medical imaging organization, delivering advanced diagnostic solutions across Ultrasound, Digital Radiography, and Computed Tomography. We lead nationwide sales, marketing, service, and distribution of Samsung’s imaging technologies, partnering with healthcare providers to strengthen diagnostic capabilities, streamline clinical workflows, and support better patient care. Samsung HME America also serves as the global manufacturing center for Samsung’s mobile Computed Tomography (mCT) business, leading the development of advanced CT systems used by healthcare providers worldwide.

Backed by Samsung Electronics’ global technology leadership, our teams work closely with clinicians to translate real-world challenges into innovative imaging solutions. Our culture combines a sense of urgency, customer focus, and clinical collaboration to advance the future of medical imaging.

Role Description

We are seeking a junior-to-mid level Information Security Analyst to support and own key elements of our information security and compliance program, with a strong emphasis on ISO 27001 and CMMC frameworks. This role focuses on policy creation, documentation, and audit readiness while supporting operational security across Microsoft 365, DLP, and incident response.

The analyst will work closely with IT and Compliance to maintain a strong security posture and will play a key role in driving compliance initiatives, managing documentation, and coordinating security processes. This role requires a hands-on approach, including participation in help desk support and day-to-day IT security operations.

Key duties and responsibilities, other duties may be assigned:

Compliance Ownership & Governance (ISO 27001 / CMMC):

Own and maintain ISO 27001 and CMMC compliance programsManage evidence, remediation tracking, and audit readinessPerform gap assessments and risk analyses

Policy Development & Documentation

Develop and maintain security policies, procedures, and runbooksEnsure documentation is audit-ready and version controlled

DLP & Microsoft 365 Security

Configure and manage DLP policies across Microsoft 365Support Microsoft Purview and identity security controls

Security Operations & SIEM:

Monitor alerts using SIEM toolsSupport incident response and tabletop exercises

AI Policy & Usage:

Support the development and maintenance of an Acceptable AI Usage PolicyEvaluate AI models and use cases to determine appropriate application across organizational rolesSupport tracking, logging, and governance methodologies for AI usage

Disaster Recovery:

Support disaster recovery planning, documentation, and testing activitiesAssist with tabletop exercises and post-test remediation tracking

IT Support:

• Provide help desk support and security guidance to end users
Assist with day-to-day IT security operations and user education

Qualifications and Requirements: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

Skills & Experience

2–5 years of experience in IT or information securityExperience with ISO 27001 and/or CMMCStrong documentation and policy writing skillsFamiliarity with Microsoft 365 securityUnderstanding of DLP, incident response, and DRUnderstanding of AI models and their use within an organizationWillingness to support help desk operations

Preferred Qualifications

Experience supporting ISO or CMMC auditsFamiliarity with Microsoft PurviewExperience with SIEM tools (e.g., Microsoft Sentinel, Splunk)Knowledge of NIST frameworksRelevant certifications (Security+, SC-900, etc.)

Competencies

Strong documentation skillsOwnership and accountabilityAttention to detailCollaborationProblem-solvingCustomer service mindset

Physical Requirements

Occasionally lift and /or move up to 25 poundsFrequently required to sit; use hands to finger, handle, or feel; reach with hands; and talk or hearMust be able to sit for long periods of time

Benefits

We offer a comprehensive benefit package which includes:

• Medical (Blue Benefit Administrators): 5 PPO Plans (with up to 95% employer contribution)
• Dental (Blue Cross Blue Shield): 2 PPO Plans (with up to 80% employer contribution)
• Vision (Blue Cross Blue Shield): 100% company paid
• Short/Long Term Disability, Life & AD&D (The Standard): 100% company paid
• 401k Retirement (Fidelity): 100% company match up to 5%
• Tax Deferred Health Care Savings Programs
• Accident Insurance, Critical Illness, Hospital Indemnity, Pet, Legal, ID Theft
• Generous paid time off, tuition reimbursement, and more!

Inclusion and Diversity Statement: We are an Equal Opportunity Employer and value diversity at all levels of the organization. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other characteristic protected by applicable law. We are committed to providing reasonable accommodation to individuals with disabilities throughout the application and employment process. If you require assistance or accommodation, please contact Human Resources.