Information Security Analyst

Oneida Innovations Group; Town of Verona (NY); On-site; USD 70,000 - 110,000; Full time

Job summary

Oneida Innovations Group is seeking an Information Security Analyst to join our team in New York. We focus on secure IT services for the hospitality and regulated industries, delivering risk-aware security programs and proactive protection.

Responsibilities include policy development, disaster recovery planning, security awareness training, and coordinating with auditors to ensure compliance. Strong communication and on-call availability are required.

Qualifications

• Degree or 2 years security experience.
• Strong TCP/IP and security tools knowledge.
• Able to work under pressure and communicate clearly.
• Willingness to on-call 24/7.

Responsibilities

• Review and implement information security practices.
• Develop and audit enterprise security policies.
• Help create and test Disaster Recovery plans.
• Deliver Security Awareness Training.
• Coordinate with auditors for annual audit.
• Conduct quarterly vulnerability assessments and penetration testing.
• Analyze logs to detect unauthorized activity.
• Document security matters for risk analysis and reporting.
• Collaborate with networks and applications teams on security changes.
• Maintain security monitoring systems.

Skills

Security knowledge

Network administration

Systems administration

Communication skills

Education

Bachelor's degree or equivalent experience

Job description

Oneida Innovations Group is a tribally owned enterprise of the Oneida Indian Nation, an innovative and experienced Indian Nation owning and operating several multifaceted business enterprises, each focused on delivering exceptional customer experiences and service.

Many IT services companies approach cyber solutions from a technological standpoint. Our coming of age in the casino gaming and hospitality industry - complex security and regulated environments - supporting New York's most awarded resort and casino means our approach is not only sophisticated but also highly customer-centric.

We don't just take care of problems. We seek out ways to anticipate and prevent them. We don't just improve connectivity. We constantly strive to make connecting safer and in doing so, more accessible. And we do so as IT professionals, as trusted allies and as partners in your success.

Come join our team as we are currently seeking an Information Security Analyst to join our group!

Duties & Responsibilities:

• Effectively reviews, plans, evaluates, and implements information security practices.
• Assists with development, implementation and auditing of enterprise information security policies.
• Assists in development and implementation of Enterprise Disaster Recovery Plan, ensuring that the plan is tested and updated periodically.
• Assists in the development and delivery of Security Awareness Training program for the
• Interfaces with third party auditors to provide detailed documentation related to annual audit.
• Assists in the development and execution of quarterly vulnerability assessments and penetration testing.
• Analyzes logs and resolves issues relating to unauthorized activities and access.
• Provides documentation as necessary for project tracking and management reporting that may require review.
• Works closely with networking and engineering team members to implement necessary information security changes, upgrades and enhancements to the systems.
• Works closely within the Applications Group to develop a clear understanding of information security practices, regulations and strategies to support the IT mission.
• Consistently documents neat and accurate records of security matters to develop security risk analysis scenarios and response procedures.
• Ensures the high quality maintenance and administration of enterprise security monitoring systems.

Minimum Qualifications:

• A degree in related discipline and/or minimum equivalent experience of two years security related experience or equivalent combination of academic training and business exposure.
• Must have strong background in systems administration, network administration including in-depth knowledge of the TCP/IP protocol suite and security tools, combined with the knowledge of security practices and procedures.
• Must have good organizational, verbal and writing skills, and the ability to perform well under pressure.
• Flexible and willingness to be on call 24/7.
• Must be able to interface with users and perform as a liaison between IT and the affected area.
• Must be able to keep abreast of new technological and/or procedural developments and present options for improvement to the Security Manager.

Desired Qualifications

• Relevant industry certificates such as CISSP and GISP.
• System programming and scripting.
• Disaster Recovery planning and testing.

Oneida Innovations Group is an equal opportunity employer and will consider all qualified applicants for employment without regard to race, color, religion, sex, national origin, age, disability, marital status, veteran status, sexual orientation, gender identity, genetic information or any other protected characteristic under applicable law.