In order to be considered for this role, after clicking "apply now" above and being redirected, you must fully complete the application process on the follow-up screen.
POSITION PROFILE: Information Security Analyst
DEPARTMENT: IT
REPORTS TO: Director of Technology Infrastructure
STATUS: Full-Time, Exempt
_____________________________________________________________________________
JOB SUMMARY: We are seeking an Information Security Analyst to be a lead point of contact for cybersecurity initiatives throughout our organization. This person will regularly update our data security policies, procedures, and technology to keep up with industry best practices and regulatory requirements including NIST, PCI, HIPAA, etc. They will also perform routine security related tasks such as reviewing alerts from our MSP, reviewing vulnerability scan/pen test results, and advise other technology subject matter experts on where changes or patches may be needed. Additionally, they will administer our 3rd party management information security program to ensure compliance by our vendors and partners. We require someone with great organizational skills and a passion for being at the forefront of cybersecurity.
PRIMARY RESPONSIBILITIES:
Strategy & Planning
- Maintain and update the enterprise’s security awareness training program.
- Create and maintain the enterprise’s security documents (policies, standards, baselines, guidelines, and procedures).
- Create and maintain the enterprise’s compliance and risk management platform, including management of third-party vendors.
- Create and maintain the enterprise’s Business Continuity Plan and Disaster Recovery Plan, where appropriate.
Acquisition & Deployment
- Maintain up-to-date knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.
- Select and acquire additional security solutions or enhancements to existing security solutions to improve overall enterprise security as per the enterprise’s existing procurement processes.
- Oversee the deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically.
Operational Management
- Monitor security update and patching processes to ensure functionality and completeness.
- Ensure the enforcement of enterprise security documents.
- Perform investigations into problematic activity and provide on-going communication with senior management.
- Supervise the design and execution of vulnerability assessments, penetration tests and security audits.
- Perform regular security awareness training for all employees to ensure consistently high levels of compliance with enterprise security documents.
QUALIFICATIONS AND EXPERIENCE:
- Bachelor’s degree from a four-year college or university or equivalent work experience.
- Proficient in Microsoft security and identity solutions.
- One or more of the following certifications preferred:
- GIAC Security Essentials Certification
- Microsoft Certified: Security, Compliance, and Identity Fundamentals
- (ISC)2 CISSP
- Three or more years of relevant experience.
- Experience in enterprise security document creation.
- Experience in designing and delivering employee security awareness training.
- Experience in developing Business Continuity Plans and Disaster Recovery Plans.
- Strong understanding of IP, TCP/IP, and other network administration protocols.
- Familiarity with Cisco security products such as Firepower, Cisco Secure Endpoint, and Umbrella.
PHYSICAL REQUIREMENTS:
- Light office duties and activities
- Mobility to walk Stadium, climb ladders, and enter confined spaces.
COMPETENCIES:
- Problem Solving-Identifies and resolves problems in a timely manner; gather and analyze information skillfully.
- Technical Skills-Assesses own strengths and weaknesses; pursues training and development opportunities. Strives to continuously build knowledge and skills. Share skills with others and recognizes training opportunities for staff.
- Judgment-Displays willingness to make decisions and exhibits sound and accurate judgment. Includes appropriate people in decision making process.
- Motivation-Demonstrates excellent personal motivation and encourages others to be motivated and enthusiastic. Shows persistence and overcomes obstacles. Takes calculated risks to accomplish goals.
- Oral Communications-Speaks clearly and persuasively in positive or negative situations; listens and gets clarification.
- Written Communications- Writes clearly and informatively.
