Information Security Analyst

About Propelled Brands Franchising, LLC

Propelled Brands® is the multi-brand platform company under which service industry franchise brands operate and grow. We are excited to propel brands forward. We know franchising, we love franchisees, and we have a supportive, motivating culture. Our current brands are FASTSIGNS®, My Salon Suite®, and Camp Bow Wow®.

What we offer

At Propelled Brands, our total rewards package is a direct reflection of our commitment to attracting and retaining top talent. Our benefits are built on the foundation of our core values: Make it Happen, Expertise and Mastery, Positive Attitude, Growth Mindset, and being Considerate. As a member of our team, you will find a supportive environment with rewards designed to help you thrive.

• Employer sponsored medical and dental plans
• Voluntary benefits such as vision, critical illness, accident, and pet insurance
• 100% Employer sponsored Short-Term Disability, Long-term Disability, and Basic Life Insurance
• Retirement Savings employer match up to 3% and 100% vested
• Generous paid time off policies
• Paid Parental Leave for mothers and fathers

About the opportunity

Propelled Brands is seeking an experienced Information Security Analyst to protect the confidentiality, integrity, and availability of the organization's information systems and infrastructure. In this critical position, you will lead security incident response, conduct vulnerability assessments, and implement security automation to reduce risk across on-premises, Google Cloud, and SaaS environments. You will provide ongoing threat detection, investigation, and remediation while contributing directly to strategic security planning and overall program maturity.

How you will make a difference

• Security Operations & Incident Response: Lead the response to complex security incidents using industry frameworks (e.g., NIST CSF 2.0) alongside our MDR partner, while conducting proactive threat hunting and analyzing suspicious files and URLs.
• Enterprise Security Stack Management: Own the operational health, configuration, and continuous tuning of our enterprise security stack—including SIEM/SOAR, EDR, Email Security Gateway, Cloud Security, and NG-Firewalls—and integrate security controls into new and existing systems.
• Vulnerability, Risk & Patch Management: Perform regular security and vulnerability assessments, monitor external exposure, coordinate penetration testing, and partner with infrastructure and engineering teams to set patching priorities and track SLA compliance.
• Identity, Access & Zero-Trust Governance: Audit user access privileges, enforce zero-trust security controls, and oversee identity governance across cloud platforms, SaaS suites, and secure remote access tools to minimize attack surface.
• AI Tool Governance: Oversee the secure deployment and use of enterprise AI tools (including Claude Enterprise, Gemini Enterprise, and NotebookLM), managing data access settings and acceptable use policies.
• Governance, Risk & Compliance (GRC): Develop and maintain security policies and documentation aligned with industry best practices, support privacy compliance, and conduct ongoing third-party risk assessments for vendors, SaaS tools, and supply chain partners.
• Resilience & Physical Security: Participate in designing, testing, and executing disaster recovery and business continuity plans (including backup validation for ransomware resilience), and administer physical security systems (cameras and access control) to integrate physical events into incident response.
• Security Awareness & Executive Reporting: Run the employee security awareness and phishing simulation program, and report on security posture, incidents, and risk metrics to leadership with actionable recommendations to mature the program.

A strong candidate will have

• Education & Experience: A bachelor’s degree in Cybersecurity, Computer Science, or a related field (or equivalent professional experience) paired with 3+ years of IT security experience, including at least 1 year of hands-on experience in incident response and threat analysis.
• Certifications: At least one (and preferably more) industry certification, such as CISSP, CISM, CISA, Security+, or SANS/GIAC.
• Security & Cloud Tooling Expertise: Hands-on expertise with security monitoring and cloud platforms (such as SentinelOne EDR/MDR, SIEM/SOAR, Splunk, Google Workspace, Google Cloud Platform [GCP], and Security Command Center Enterprise [SCCE]), alongside familiarity with tools like KnowBe4, Abnormal AI, Twingate, Any.Run, Shodan, Cisco Meraki, Fortinet, Kandji, NinjaOne, and Rhombus.
• Technical & Scripting Proficiency: Strong proficiency in Python and PowerShell for security automation, backed by a solid grasp of network security, application security, and industry frameworks (NIST, ISO 27001).
• Analytical & Ethical Execution: Strong analytical, problem-solving, and decision-making skills, combined with high integrity and strict adherence to professional cybersecurity standards.
• Communication & Work Environment: The ability to collaborate effectively with IT teams, external vendors, and end-users; work full-time in a professional office environment (with occasional evening/weekend support as duties demand); occasionally lift up to 50 pounds; and accommodate up to 10% travel (including some international).

We believe that everyone is capable of great things. Because of this, we encourage you to apply even if you do not have 100% of the qualifications listed above.

EEO Statement   

Propelled Brands values diversity and inclusion because it brings richness and strength to our business. We envision diversity as encompassing an individual’s unique characteristics and experiences, including not only race, gender, ethnicity, age, religion, disability, national origin, and sexual orientation, but also personality, gender expression, military status, mental health, educational and career backgrounds, and other life experiences. We know that supporting and building diversity is the right thing to do for our employees, our franchisees, our franchisees’ teams, and our stakeholders.