Information Security Analyst

Strategic Government Resources, Inc.; College Station, Northern (TX, KY); Hybrid; USD 80,000 - 110,000; Full time

Job summary

Strategic Government Resources, Inc. is seeking an Information Security Analyst to monitor security protocols and ensure confidentiality, integrity and availability of information systems in compliance with policy, regulatory requirements, federal and state laws, accreditation standards, and industry standards.

Under the Chief Information Security Officer, the role will plan, implement and maintain security controls, conduct risk assessments, lead incident response, and collaborate with staff to

Qualifications

• Bachelor’s degree in Computer Science, MIS or related field and three (3) years of professional Information Systems or Information Security experience.
• One or more of the following certifications: CED, Certified Ethical Hacker, GSEC, SANS GIAC Security Essentials, CompTIA Security+, Cisco CCENT, Cisco CCNA.

Responsibilities

• Assist with planning, implementation, and maintenance of enterprise-wide Information Security policies, strategies, and systems.
• Plan, implement and maintain technical systems, controls, and procedures to protect information assets and data.
• Lead security awareness training for City staff and users.
• Manage firewalls, encryption and other tools to protect transfers of confidential information.
• Perform risk assessments, audits, and tests, including network scans and penetration testing.
• Lead incident response in security breach events, including investigation and remediation.
• Identify and communicate security threats and implement mitigations.
• Enforce security and privacy compliance with policies, laws and standards.
• Collaborate with staff, managers, vendors, and external tech partners to address threats.

Skills

Problem-solving

Analytical skills

Security software proficiency

MS Office proficiency

Verbal and written communication

Education

Bachelor’s degree in Computer Science, MIS or related field

Three years of information systems or information security experience

CED (Certified Ethical Hacker)

GSEC (GIAC Security Essentials)

CompTIA Security+

Cisco CCENT

Cisco CCNA

Tools

Firewall tools

Encryption software

Intrusion detection systems

Job description

Description

Under general direction of the Chief Information Security Officer, the Information Security Analyst is responsible for monitoring security protocols for the protection of the organization’s computer networks and information, ensuring confidentiality, integrity and availability of information systems and assets in compliance with organizational policy, regulatory requirements, federal and state laws, accreditation standards, and industry standards.

Principal Duties

1. Assist with planning, implementation, and maintenance of comprehensive enterprise-wide Information Security policies, strategies, and systems that protect the organization information systems in accordance with applicable laws, regulatory requirements, and industry standards.


2. Plan, implement, troubleshoot, and maintain the necessary technical systems, controls, policies, or procedures to protect information systems assets and data from intentional or inadvertent disruption, modification, disclosure, or destruction.


3. Safeguard system security and improve overall server and network efficiency by training users, promoting security awareness, and conducing security related training for City staff on information security standards, policies, and best practices.


4. Manage the installation and use of firewalls, data encryption, and other security tools and applications to conceal and protect transfers of confidential digital information.


5. Perform risk assessments, audits, and tests to ensure proper functioning of data processing activities and security measures, including but not limited to conducting periodic network scans and penetration testing to simulate an attack on the system to identify exploitable weaknesses or other vulnerability, monitoring networks and systems for security breaches, using software that detects intrusions and anomalous system behavior.


6. Lead the incident response in the event of a security breach, including but not limited to identifying steps to minimize the impact, conducting a technical and forensic investigation, determining the extent of the damage, and recommending programming and /or process changes.


7. Identify and communicate current and emerging security threats and implement security architecture elements to mitigate threats as they emerge.


8. Participate in ongoing enforcement and monitoring activities related to security and privacy in compliance with organizational policy, regulatory requirements, federal and state laws, accreditation standards, and industry standards.


9. Communicate or collaborate with city staff, managers, administration, external technology representatives, vendors and support staff to identify security threats and violations.


10. Perform other related work assignments, as required.

Qualifications

Required:

Bachelor’s degree in Computer Science, MIS or related field and three (3) years of professional Information Systems or Information Security experience; or an equivalent combination of education and experience. One or more of the following certifications: CED, Certified Ethical Hacker, GSEC, SANS GIAC Security Essentials, CompTIA Security+, Cisco CCENT, Cisco CCNA. Demonstrated problem-solving and analytical skills. Proficient, or able to gain proficiency with a broad array of security software application tools. Proficient in Microsoft Office Suite or related software. Thorough understanding of computer-related security systems, including firewalls, encryption, and password protection and authentication. Excellent verbal and written communication skills.

Preferred:

Five (5) years’ professional experience in Information Systems including four (4) years in Information Systems Security. One or more of the following certifications: CISSP, CISM, CISA, Cisco CCNP, ACCA, ACCP, ACNSA.

Supplemental Information

SPECIAL REQUIREMENTS:

Drug Screening:Due to the safety and/or security sensitive nature of this position, individuals shall be subject to pre-employment or pre-placement drug and/or controlled substance testing as outlined in City policy.

Additional Criminal Background Screening Required:In addition to the standard pre-employment criminal background check, individuals receiving a conditional offer for this position shall be subject to a fingerprint- based background screening due to the required access to secured buildings and/or secure data systems.

An Equal Opportunity and Military Friendly Employer