Information Security Analyst

Talentify; College Station (TX); On-site; USD 70,000 - 110,000; Full time

Job summary

Talentify is seeking an Information Security Analyst to monitor security protocols and protect organizational networks and data in line with policy, regulatory requirements, and industry standards.

The role includes planning and maintaining security controls, conducting risk assessments and penetration testing, and leading incident response to minimize impact. Strong problem-solving, communications, and familiarity with security tools are essential.

Qualifications

• Bachelor’s degree in Computer Science, MIS or related field and three (3) years of professional Information Systems or Information Security experience.
• One or more certifications such as CED, CEH, GSEC, GIAC, Security+, CCENT, CCNA are preferred.
• Strong problem-solving and analytical skills; able to communicate effectively.
• Familiar with security software tools and Microsoft Office Suite.

Responsibilities

• Assist with planning, implementation, and maintenance of enterprise-wide information security policies and systems.
• Plan and maintain technical controls, policies, and procedures to protect information assets.
• Conduct training to promote security awareness and best practices among staff.

Skills

Problem-solving

Analytical skills

Verbal communication

Written communication

Microsoft Office

Education

Bachelor's degree in Computer Science, MIS or related field

Tools

Firewalls

Encryption

Access controls

Job description

Under general direction of the Chief Information Security Officer, the Information Security Analyst is responsible for monitoring security protocols for the protection of the organization’s computer networks and information, ensuring confidentiality, integrity and availability of information systems and assets in compliance with organizational policy, regulatory requirements, federal and state laws, accreditation standards, and industry standards.

1. Assist with planning, implementation, and maintenance of comprehensive enterprise-wide Information Security policies, strategies, and systems that protect the organization information systems in accordance with applicable laws, regulatory requirements, and industry standards.
2. Plan, implement, troubleshoot, and maintain the necessary technical systems, controls, policies, or procedures to protect information systems assets and data from intentional or inadvertent disruption, modification, disclosure, or destruction.
3. Safeguard system security and improve overall server and network efficiency by training users, promoting security awareness, and conducing security related training for City staff on information security standards, policies, and best practices.
4. Manage the installation and use of firewalls, data encryption, and other security tools and applications to conceal and protect transfers of confidential digital information.
5. Perform risk assessments, audits, and tests to ensure proper functioning of data processing activities and security measures, including but not limited to conducting periodic network scans and penetration testing to simulate an attack on the system to identify exploitable weaknesses or other vulnerability, monitoring networks and systems for security breaches, using software that detects intrusions and anomalous system behavior.
6. Lead the incident response in the event of a security breach, including but not limited to identifying steps to minimize the impact, conducting a technical and forensic investigation, determining the extent of the damage, and recommending programming and /or process changes.
7. Identify and communicate current and emerging security threats and implement security architecture elements to mitigate threats as they emerge.
8. Participate in ongoing enforcement and monitoring activities related to security and privacy in compliance with organizational policy, regulatory requirements, federal and state laws, accreditation standards, and industry standards.
9. Communicate or collaborate with city staff, managers, administration, external technology representatives, vendors and support staff to identify security threats and violations.
10. Perform other related work assignments, as required.

Required:

Bachelor’s degree in Computer Science, MIS or related field and three (3) years of professional Information Systems or Information Security experience; or an equivalent combination of education and experience. One or more of the following certifications: CED, Certified Ethical Hacker, GSEC, SANS GIAC Security Essentials, CompTIA Security+, Cisco CCENT, Cisco CCNA. Demonstrated problem-solving and analytical skills. Proficient, or able to gain proficiency with a broad array of security software application tools. Proficient in Microsoft Office Suite or related software. Thorough understanding of computer-related security systems, including firewalls, encryption, and password protection and authentication. Excellent verbal and written communication skills.

Preferred:

Five (5) years’ professional experience in Information Systems including four (4) years in Information Systems Security. One or more of the following certifications: CISSP, CISM, CISA, Cisco CCNP, ACCA, ACCP, ACNSA.

SPECIAL REQUIREMENTS:

Drug Screening: Due to the safety and/or security sensitive nature of this position, individuals shall be subject to pre-employment or pre-placement drug and/or controlled substance testing as outlined in City policy.

Additional Criminal Background Screening Required: In addition to the standard pre-employment criminal background check, individuals receiving a conditional offer for this position shall be subject to a fingerprint- based background screening due to the required access to secured buildings and/or secure data systems.