IT Security Analyst

Job Description

Job Description

IT Security Analyst (Onsite)

Position Summary

We are seeking an IT Security Analyst to join our team. The successful candidate will assist in implementing Information Security Architecture as outlined by the Information Security team. This role involves working closely with the team during the introduction and upgrade of systems, starting from the development phase through to deployment.

Duties and Responsibilities

• Establish monitoring procedures to detect and correct security incidents and policy violations.
• Assess and report on threats, vulnerabilities, and residual risks.
• Identify and collect data required for audit reporting.
• Manage various IT security incidents and deliver IT Security engineering and integration services to internal customers.
• Evaluate technical controls and recommend changes or additions to strengthen the security posture.
• Update, maintain, and document security controls.
• Configure monitoring alerts and generate reports.
• Provide 1st and 2nd level incident reports.
• Support the development of information security policies, standards, and procedures.
• Assist in implementing overall security strategy, policies, and procedures.
• Help conduct risk assessments and related impact analyses.
• Assist with vulnerability management and patching programs.
• Participate in application development or acquisition projects to evaluate and ensure security requirements and controls are in place as planned.

Performance Requirements

The individual must consistently demonstrate attention to detail, follow established security protocols, and respond promptly to incidents or requests. Timely completion of assigned tasks and proactive identification of potential security improvements are essential. Additionally, maintaining confidentiality and adhering to compliance requirements are key performance expectations for this role.

Education

A bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field is typically required. Relevant certifications, such as CISSP, CISM, or CompTIA Security+, are highly desirable and can strengthen a candidate's qualifications.

Experience Required

Experience in emerging IT trends, including IT Security, cloud computing, mobile computing, PCI, and SOC compliance, is required. Strong analytical and communication skills are crucial, along with the ability to work effectively with clients and IT management staff. Candidates should have 1–3 years of related experience in Information Security.

Other Knowledge and Skills

Certifications

Professional Licensure : None required

Certification(s) : None required