Security Posture Analyst I (Remote) at SouthState Bank in Remote Opportunity, VA

Job description

The SouthState story is one of steady growth, deep community roots, and an unwavering commitment to helping our customers move forward. Since our beginnings in the 1930s to becoming a trusted financial partner across the South and beyond - we are known for combining personal relationships with forward-thinking solutions. We are committed to helping our team members find their success while maintaining the integrity of our values: building trust, fostering lasting relationships and pursuing excellence. At SouthState, individual contributions are recognized, potential is cultivated and team members are inspired to achieve their greater purpose. Your future begins here! Summary The Security Posture Analyst I supports the Cyber Threat Exposure Management program by monitoring, analyzing, and reporting on the security posture of the Company's on-premises, cloud, SaaS, and security technology environments. This role helps provide visibility into control effectiveness, exposure trends, configuration drift, and emerging risks through actionable metrics, dashboards, and reporting. The position enables informed risk-based decision making by ensuring security posture data is accurate, measurable, and effectively communicated to stakeholders. Duties & Responsibilities Enterprise Security Posture Monitoring - Monitor and assess the security posture of on-premises, cloud, SaaS, identity, endpoint, network, application, and security technology environments to identify exposure, control weaknesses, configuration drift, and emerging security risks. Security Metrics, KRIs & Executive Reporting - Develop, maintain, and publish security posture scorecards, dashboards, KPIs, KRIs, trend analysis, and management reporting that measure exposure, control effectiveness, remediation performance, asset coverage, and alignment to established risk tolerances. Exposure Analysis & Risk Prioritization - Analyze vulnerabilities, misconfigurations, exposed assets, and control deficiencies to identify material exposures and support risk-based remediation prioritization using threat intelligence, exploitability, business criticality, and potential business impact. Posture Data Management & Analytics - Correlate, validate, normalize, and analyze information across security, cloud, SaaS, vulnerability management, asset management, and threat intelligence platforms to ensure accurate risk representation and identify systemic weaknesses, coverage gaps, and emerging trends. Remediation Oversight & Risk Governance Support - Monitor remediation activities, validate corrective actions, track exposure reduction efforts, support escalation processes, and provide posture visibility that promotes accountability for risk reduction and compliance with security standards and service level objectives Compliance, Assessments & Program Maturity - Support regulatory, audit, risk management, and internal assessment activities through posture reporting and evidence collection while identifying opportunities to improve visibility, automation, measurement capabilities, and overall Threat Exposure Management program effectiveness. It is the responsibility of this role to take ownership of all tasks and challenges that they encounter in the operation of their assigned position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Qualifications Education Requirements Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Data Analytics, or a related field preferred. Equivalent education, military experience, certifications, or relevant work experience may be considered. Minimum Experience 2-4 years of experience in cybersecurity, information technology, risk management, technical analysis, security operations, or a related field. Experience gained through internships, co-op programs, military service, help desk support, systems administration, security operations, or similar technica