DescriptionPosition Summary:
The Information Security Analyst is an entry‐level position that performs monitoring of security events, security investigations, and incident response as the primary role. The Analyst will also participate in monitoring, troubleshooting, installation and maintenance on equipment and software related to electronic access control and general security‐based solutions. In addition, they participate in in‐house, regulatory and industry teams including working groups, committees, and business continuity teams as required.
Education, License & Cert:
B.S. degree in Computer Science related field, and/or 5 years equivalent work experience. One or more of the Certifications listed. GSEC GIAC Security Essentials Certification GSLC GIAC Security Leadership Certification CISM ISACA Certified Information Security Manager SSCP Systems Security Certified Practitioner CISSP Certified Information Systems Security Professional ISSAP Information Systems Security Architecture Professional MCSE Microsoft Certified Systems Engineer: Security
Experience:
• Five years of related experience
• Extensive experience in enterprise security architecture design.
• Extensive experience in enterprise security document creation.
• Experience in designing and delivering employee security awareness training.
Essential Functions:
1. Perform regular security awareness training for all employees to ensure consistently high levels of compliance with enterprise security documents.
2. Create and maintain the enterprise’s security documents (policies, standards, baselines, guidelines and procedures).
3. Maintain up‐to‐date knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.
4. Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security as per the enterprise’s existing procurement processes.
5. Ensure the confidentiality, integrity and availability of the data residing on or transmitted to/from/through enterprise workstations, servers and other systems and in databases and other data repositories.
6. Ensure the enforcement of enterprise security documents.
7. Engage in ongoing communications with peers in the Systems and Networking groups as well as the various business groups to ensure enterprise wide understanding of security goals, to solicit feedback and to foster co‐operation.
8. Oversee the deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically.
9. Create and maintain the enterprise’s security architecture design.
10. Create and maintain close relationship with professional and industry recognized security organization(s)
Other Duties:
1. Demonstrates willingness to accept non routine work assignments as appropriate.
2. Other duties as assigned.
