Information Security Analyst

Plans, implements, upgrades and monitors security protocols for the protection of the organization’s computer networks and information.

The list of essential functions, as outlined herein, is intended to be representative of the duties and responsibilities performed within this classification. It is not necessarily descriptive of any one position in the class. The omission of an essential function does not preclude management from assigning duties not listed herein if such functions are a logical assignment to the position.

• Collaborates with users regarding computer data access needs, to identify security threats and violations, and to identify and recommend needed programming or process changes
• Uses data encryption, firewalls, and other appropriate security tools and applications to conceal and protect transfers of confidential digital information
• Develops and implements plans to safeguard digital data from accidental or unauthorized modification, destruction, or disclosure; adheres to emergency data processing needs
• Reviews violations of security procedures; provides training to ensure violations do not recur
• Monitors and restricts access to sensitive, confidential, or other high-security data
• Modifies security files and applications as able and necessary to provide specialized access, allow new software to be installed or integrated, or correct errors
• Performs risk assessments, audits, and tests to ensure proper functioning of data processing activities and security measures 
• Safeguards system security and improves overall server and network efficiency by training users and promoting security awareness
• Determines when to update virus protection systems by monitoring current reports of computer viruses; facilitates or performs needed updates.

To perform this job successfully, an individual must be able to perform each essential duty and responsibility satisfactorily.  The requirements listed below are representative of the knowledge, skill, and/or ability required.  

EDUCATION AND/OR EXPERIENCE:

Bachelor’s degree in Information Systems, Security, Business, Engineering or related field from an accredited college or university and three (3) to five (5) year of IT Security or Technical Support or an equivalent combination of education, certification, training and/or experience.

CERTIFICATES, LICENSES, REGISTRATIONS AND DESIGNATIONS:

CISM (Certified Information Security Manager) or CISA (Certified Information Systems Auditor) preferred

KNOWLEDGE, SKILLS AND ABILITIES 

• Knowledge and experience in complex systems, platform engineering, servers/storage, network and data center operations
• Knowledge in information security management and systems monitoring tools
• Knowledge of information security best practices
• Knowledge and experience in IT within a healthcare or non-profit organization
• Knowledge of national and international regulatory compliances and frameworks such as ISO, SOX, BASEL II, EU GDPR, HIPAA, and PCI DS
• Knowledge of computer-related security systems including firewalls, encryption and password protection and authentication
• Strong analytical and problem-solving skills
• Ability to deliver high quality customer service and support 
• Ability to work in a team setting and under tight deadlines
• Ability to commute with personal transportation
• Proficient in Microsoft Office Suite or related software
• Excellent verbal and written communication skills
• Ability to commute with personal transportation
• Ability to travel 33% of the time 

PHYSICAL REQUIREMENTS 

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job.  Ability to exert light physical effort in sedentary to light work, which may involve some lifting, carrying, pushing and/or pulling of objects and materials of light weight (up to 40 pounds).

ENVIRONMENTAL REQUIREMENTS:

The work environment characteristics described here are representative of those an employee may encounter while performing the essential functions of this job.  

Functions are regularly performed inside without potential for exposure to adverse conditions, such as inclement weather, atmospheric elements and pathogenic substances.