Information Security Analyst II — Protect & Improve IT

alsacstjude; Memphis (TN); On-site; USD 75,000 - 115,000; Full time

Job summary

ALSAC is seeking an Information Security Analyst to develop, implement, and continuously improve the enterprise information security program. The role partners across IT and business teams to protect systems, applications, networks, and data from evolving cybersecurity threats.

The analyst contributes to security operations, governance, incident response, risk assessment, IAM, and application security, delivering technical analysis, reports, and recommendations to strengthen security posture

Responsibilities

• Monitor, analyze, and investigate security events, alerts, and activity across enterprise systems and networks.
• Support incident response activities including triage, investigation, containment, documentation, and post-incident analysis.
• Assist in developing, maintaining, and improving enterprise information security policies, standards, procedures, and response plans.
• Perform security risk assessments and provide actionable recommendations to mitigate identified risks.
• Conduct vulnerability management activities including scanning, validation, reporting, prioritization, and remediation tracking.
• Review security logs and intelligence sources to identify threats, vulnerabilities, and indicators of compromise.
• Collaborate with security staff, system administrators, and developers to address security concerns and implement controls.
• Assist with implementing, validating, and documenting security-related changes across environments.
• Support application security initiatives through testing validation and secure coding reviews.
• Develop and deliver security metrics, status reports, and presentations for management and stakeholders.
• Participate in enterprise security projects, audits, and continuous improvement efforts.
• Educate and train employees on cybersecurity awareness and best practices.

Job description

ALSAC is seeking an Information Security Analyst to develop, implement, and continuously improve the enterprise information security program. The role partners across IT and business teams to protect systems, applications, networks, and data from evolving cybersecurity threats.

The analyst contributes to security operations, governance, incident response, risk assessment, IAM, and application security, delivering technical analysis, reports, and recommendations to strengthen security posture