Senior Cyber Defense & Risk Analyst

HYBRID ROLE BASED OUT OF OUR ATLANTA OFFICE **Job Purpose:** Our Senior Cyber Defense & Risk Analyst is responsible for strengthening Veritiv’s security posture through both cybersecurity operations and governance, risk, and compliance. This position partners closely with IT teams, Legal, Internal Audit, and third-party security providers to ensure risks are understood, prioritized, and reduced through practical and measurable actions. **Job Responsibilities:** ● Monitor, analyze, and validate security alerts using Veritiv’s security monitoring ecosystem (e.g., SIEM/MDR, endpoint security, identity protection, and email security tools). ● Investigate, triage, and respond to incidents (e.g., phishing, identity compromise, malware, suspicious network activity), coordinating with internal stakeholders and third-party providers as needed. ● Perform root cause analysis and support containment, eradication, and recovery activities; document incident details, actions taken, and lessons learned. ● Assist with technical security reviews of new or changing technologies (SaaS, cloud services, integrations, and vendors), identifying misconfigurations and recommending compensating controls. ● Partner with Internal Audit and control owners to support IT audit activities (e.g., evidence collection, walkthroughs, remediation validation, and closure of findings). ● Participate in third-party / vendor risk activities, including review of security documentation, questionnaires, and assessment results; help translate vendor technical risks into business impact and mitigation steps. ● Communicate complex technical topics clearly to non-technical stakeholders; produce concise written deliverables (incident summaries, risk write-ups, audit evidence narratives). ● Identify opportunities to automate and streamline GRC and security operations processes (e.g., alert triage, evidence collection, control testing support, reporting), including the responsible use of approved AI-enabled security capabilities to improve speed, consistency, and quality. **Additional Responsibilities & Qualifications:** * Working knowledge of common security controls and frameworks (e.g., NIST CSF, ISO 27001/27002, CIS Controls) and the ability to map technical issues to control requirements. * Hands-on experience with at least two of the following areas: security monitoring (SIEM/MDR), incident response, vulnerability management, endpoint security (EDR), identity and access management, email security. * Experience supporting audits and control testing (e.g., ITGC, internal audit, SOC report reviews), including evidence collection and remediation tracking. * Ability to write clearly and maintain thorough documentation (risk statements, procedures, incident notes, and audit evidence narratives). * Strong interpersonal and communication skills, including the ability to work effectively with both technical teams and business stakeholders. * Aptitude and desire to leverage AI-enabled capabilities and automation to improve security outcomes (e.g., workflow automation, scripting, playbooks, and repeatable process improvement) while maintaining appropriate governance and data handling practices. * IT, Risk Management, Computer Science and Business Administration majors preferred. **Work Experience:** ● 3-5 years of related job experience. ● Ability to manage multiple projects, work under pressure, and adapt to sudden changes in the work environment. ● Ability to work quickly and efficiently. ● Excellent verbal, written, people, and diplomacy skills are required. ● Experience of interpreting strategy and policy in order to set and deliver objectives. ● Proficient with Microsoft Office Suite. ● Strong customer service skills (friendly, courteous and helpful). ● Strong planning and organization skills are required. **Education:** ● Bachelor's Degree Preferred ● Certified Information Systems Security Professional (CISSP) - International Information System Security Certification Consortium ● Certified Information Systems Auditor (CISA) - Information Systems Audit and Control Association (ISSACA) **What We Offer** * Engaging and inclusive culture with employee-led Employee Resource Groups, Veritiv Cultural Alliance, recognition platform, etc. * Extensive training opportunities, professional development programs, career pathing, and mentorship opportunities. * Collaborative atmosphere with our customers and suppliers to create healthier, safer and more sustainable communities through our responsible operations and innovative solutions. * Healthcare benefits (including medical, dental, vision, and health savings account), life, AD&D, and disability insurance, 401k, paid time off, tuition reimbursement, employee assistance program, and other fringe benefits. **About Veritiv** Together with its subsidiaries, Veritiv is the leading full-service provider of packaging solutions. Veritiv also provides JanSan, hygiene, print and publishing products and services. Veritiv serves customers in a wide range of industries, through team members around the world helping shape the success of its customers. For more information, visit [www.veritiv.com](http://www.veritiv.com/) and connect with the Company on [LinkedIn](https://www.linkedin.com/company/veritiv/).