Information Security Analyst

City-of-College-Statio; College Station (TX); On-site; USD 65,000 - 90,000; Full time

Job summary

City of College Station seeks an Information Security Analyst to monitor security protocols and protect organizational networks. You will ensure confidentiality, integrity, and availability of information systems in line with policy, regulatory requirements, and industry standards.

Responsibilities include implementing enterprise-wide security policies, managing firewalls and encryption, conducting risk assessments, and leading incident response.

Qualifications

• Bachelor’s degree in Computer Science, MIS or related field and three (3) years of professional Information Systems or Information Security experience; or an equivalent combination of education and experience.
• Certifications: CED, Certified Ethical Hacker, GSEC, SANS GIAC Security Essentials, CompTIA Security+, Cisco CCENT, Cisco CCNA, or equivalent.
• Demonstrated problem-solving and analytical skills.
• Proficient with a broad array of security software applications.
• Proficient in Microsoft Office Suite or related software.
• Thorough understanding of security systems, including firewalls, encryption, password protection and authentication.
• Excellent verbal and written communication skills.

Responsibilities

• Assist with planning, implementation, and maintenance of enterprise-wide Information Security policies and systems.
• Plan, implement, troubleshoot, and maintain controls to protect information systems assets and data.
• Promote security awareness and conduct security-related training for City staff.
• Manage installation and use of firewalls, encryption, and other security tools.
• Perform risk assessments, audits, and tests including network scans and penetration testing.
• Lead incident response during security breaches and conduct investigations.
• Identify and communicate current and emerging security threats and mitigate them.
• Participate in enforcement and monitoring activities for security and privacy compliance.
• Collaborate with city staff, managers, external tech representatives, vendors and support staff to address threats.
• Perform other related work assignments as required.

Skills

Analytical thinking

Problem-solving

Communication skills

Security awareness

Team collaboration

Education

Bachelor’s degree in Computer Science, MIS or related field

Tools

Firewalls

Encryption

Intrusion detection systems

Penetration testing tooling

Job description

Under general direction of the Chief Information Security Officer, the Information Security Analyst is responsible for monitoring security protocols for the protection of the organization’s computer networks and information, ensuring confidentiality, integrity and availability of information systems and assets in compliance with organizational policy, regulatory requirements, federal and state laws, accreditation standards, and industry standards.

1. Assist with planning, implementation, and maintenance of comprehensive enterprise-wide Information Security policies, strategies, and systems that protect the organization information systems in accordance with applicable laws, regulatory requirements, and industry standards.
2. Plan, implement, troubleshoot, and maintain the necessary technical systems, controls, policies, or procedures to protect information systems assets and data from intentional or inadvertent disruption, modification, disclosure, or destruction.
3. Safeguard system security and improve overall server and network efficiency by training users, promoting security awareness, and conducing security related training for City staff on information security standards, policies, and best practices.
4. Manage the installation and use of firewalls, data encryption, and other security tools and applications to conceal and protect transfers of confidential digital information.
5. Perform risk assessments, audits, and tests to ensure proper functioning of data processing activities and security measures, including but not limited to conducting periodic network scans and penetration testing to simulate an attack on the system to identify exploitable weaknesses or other vulnerability, monitoring networks and systems for security breaches, using software that detects intrusions and anomalous system behavior.
6. Lead the incident response in the event of a security breach, including but not limited to identifying steps to minimize the impact, conducting a technical and forensic investigation, determining the extent of the damage, and recommending programming and /or process changes.
7. Identify and communicate current and emerging security threats and implement security architecture elements to mitigate threats as they emerge.
8. Participate in ongoing enforcement and monitoring activities related to security and privacy in compliance with organizational policy, regulatory requirements, federal and state laws, accreditation standards, and industry standards.
9. Communicate or collaborate with city staff, managers, administration, external technology representatives, vendors and support staff to identify security threats and violations.
10. Perform other related work assignments, as required.

Required:

Bachelor’s degree in Computer Science, MIS or related field and three (3) years of professional Information Systems or Information Security experience; or an equivalent combination of education and experience. One or more of the following certifications: CED, Certified Ethical Hacker, GSEC, SANS GIAC Security Essentials, CompTIA Security+, Cisco CCENT, Cisco CCNA. Demonstrated problem-solving and analytical skills. Proficient, or able to gain proficiency with a broad array of security software application tools. Proficient in Microsoft Office Suite or related software. Thorough understanding of computer-related security systems, including firewalls, encryption, and password protection and authentication. Excellent verbal and written communication skills.

Preferred:

Five (5) years’ professional experience in Information Systems including four (4) years in Information Systems Security. One or more of the following certifications: CISSP, CISM, CISA, Cisco CCNP, ACCA, ACCP, ACNSA.

SPECIAL REQUIREMENTS:

Drug Screening: Due to the safety and/or security sensitive nature of this position, individuals shall be subject to pre-employment or pre-placement drug and/or controlled substance testing as outlined in City policy.

Additional Criminal Background Screening Required: In addition to the standard pre-employment criminal background check, individuals receiving a conditional offer for this position shall be subject to a fingerprint- based background screening due to the required access to secured buildings and/or secure data systems.