IT Security and Systems Analyst

Texas Windstorm Insurance Association; Austin (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

Texas Windstorm Insurance Association is seeking an IT Security and Systems Analyst to bridge business, IT, and Information Security. The role defines and documents requirements, supports Guidewire InsuranceSuite, and assists with cybersecurity governance, risk management, compliance, and audits.

You will gather requirements, facilitate workshops, liaise with stakeholders, support testing and production releases, and help improve security controls and incident response.

Qualifications

• Bachelor’s degree in a related field; five years of analysis experience.
• Experience gathering functional and system requirements.
• Experience supporting SDLC and testing activities.
• Experience working with business stakeholders and technical teams.
• Willingness to obtain an entry-level cybersecurity certification within 12–18 months of hire.

Responsibilities

• Gathers and documents business and system requirements and acceptance criteria.
• Facilitates requirements workshops and design discussions.
• Liaises between business stakeholders, application teams, technical teams, vendors, and Information Security.
• Supports Guidewire InsuranceSuite and other enterprise applications by evaluating system needs, enhancements, defects, and production issues.
• Assists with user acceptance testing, defect triage, production releases, and post-implementation activities.
• Assists with prioritizing enhancement requests and backlogs.
• Analyzes application metrics to identify improvement opportunities.
• Supports the Information Security Officer in cybersecurity program.
• Assists with security risk assessments, control reviews, and remediation tracking.
• Supports audits by gathering documentation and monitoring corrective actions.
• Develops and maintains security policies, standards, and procedures.
• Assists with vendor security reviews and third-party risk assessments.
• Supports security awareness, regulatory compliance, and governance activities.
• Participates in incident response activities and post-incident reviews.
• Monitors emerging cybersecurity risks and improves controls.

Skills

Business analysis

Systems analysis

Requirements gathering

Stakeholder collaboration

SDLC & testing

Cybersecurity cert readiness

Education

Bachelor’s degree in Information Systems

Bachelor’s degree in Computer Science

Bachelor’s degree in Cybersecurity

Bachelor’s degree in Business

Tools

Rally

Jira

Azure DevOps

SQL

Data-analysis tools

Job description

Position Summary

The IT Security and Systems Analyst serves as a liaison between business departments, Information Technology, and Information Security to help ensure technology solutions support business needs and organizational priorities. This position defines and documents business and system requirements, supports Guidewire Insurance Suite and other enterprise applications, and assists with cybersecurity governance, risk management, compliance, and audit activities.

ESSENTIAL FUNCTIONS

• Gathers, analyzes, and documents business and system requirements, user stories, process flows, and acceptance criteria.
• Facilitates requirements workshops, solution-design discussions, and process-improvement activities.
• Serves as a liaison between business stakeholders, application teams, technical teams, vendors, and Information Security.
• Supports Guidewire InsuranceSuite and other enterprise applications by evaluating system needs, enhancements, defects, and production issues.
• Supports user acceptance testing, defect triage, production releases, and post-implementation activities.
• Assists with prioritizing enhancement requests and maintaining technology-related backlogs.
• Analyzes application metrics and operational data to identify opportunities to improve efficiency and effectiveness.
• Supports the Information Security Officer in maintaining and improving the organization’s cybersecurity program.
• Assists with security risk assessments, control reviews, vulnerability management, and remediation tracking.
• Supports internal and external audits by gathering documentation, coordinating responses, and monitoring corrective actions.
• Develops and maintains security policies, standards, procedures, and supporting documentation.
• Assists with vendor security reviews, third-party risk assessments, and identity and access management reviews.
• Supports security awareness, regulatory compliance, and cybersecurity governance activities.
• Participates in incident response activities, documentation, and post-incident reviews.
• Monitors emerging cybersecurity risks and recommends improvements to security controls and processes.

Required Education And Experience

• Bachelor’s degree in Business, Information Systems, Computer Science, Cybersecurity, or a related field.
• Five years of business or systems analysis experience supporting enterprise applications or business processes.
• Experience gathering and documenting business, functional, and system requirements.
• Experience supporting software development lifecycle and testing activities.
• Experience working directly with business stakeholders and technical teams.
• An equivalent combination of education and experience may be substituted for the stated requirements.
• Willingness to obtain an approved entry-level cybersecurity certification within 12 to 18 months of hire and participate in ongoing security training.

Preferred Education And Experience

• Experience with Guidewire PolicyCenter, ClaimCenter, BillingCenter, or other Guidewire applications.
• Experience supporting Guidewire InsuranceSuite implementations, upgrades, or enhancements.
• Knowledge of property and casualty insurance operations, including underwriting, policy administration, claims, billing, or customer service.
• Experience with Rally, Jira, Azure DevOps, or a similar work-management platform.
• Familiarity with SQL and data-analysis tools.
• Experience supporting regulatory compliance, internal or external audits, cybersecurity, or risk-management activities.
• ISC2 Certified in Cybersecurity or another recognized cybersecurity certification.

Required Knowledge, Skills, And Abilities

• Knowledge of business analysis, systems analysis, requirements gathering, and process-mapping practices.
• Knowledge of software development lifecycle activities and testing practices.
• Understanding of system integrations, APIs, application architecture, and related technical concepts.
• Knowledge of Agile, Scrum, or similar delivery methodologies.
• General knowledge of cybersecurity governance, risk management, internal controls, and compliance practices.
• Strong analytical, critical-thinking, and problem-solving skills.
• Ability to translate business needs into clear functional and technical requirements.
• Ability to facilitate meetings and communicate technical information to nontechnical audiences.
• Ability to build effective working relationships across business and technical teams.
• Ability to organize and prioritize multiple assignments, projects, and deadlines.
• Strong written communication, documentation, and attention-to-detail skills.
• Proficiency with Microsoft 365, Visio, and collaboration or work-management tools.

Required Competencies

• Communication: Makes clear and convincing oral presentations and written documents (to individuals and groups) that achieve their purpose.
• Customer Focus: Identifies customer’s needs and requirements correctly and provides value added solutions; acts proactively for ensuring customer satisfaction.
• Interpersonal Skills: Demonstrate personal respect for others and conveys an understanding of others’ needs, feelings and perspectives.
• Decision Making: Uses effective approaches for choosing a course of action or developing appropriate solutions. Makes timely and sound decisions by comparing data from different sources to draw conclusions. Understands the impact and implications of decisions and provides feedback on outcomes. Takes responsibility for decisions.
• Critical Thinking: Approaches a situation or problem by defining the problem or issue, determining its significance, collecting data, making inferences about the meaning of the data, and using logic and intuition to arrive at conclusions or decisions.
• Job Knowledge: Possesses the level of technical and functional knowledge necessary to meet individual performance targets and perform the required duties as outlined in the position description.
• Initiative: Independently completes tasks and assignments with little or minimal direction.

PHYSICAL REQUIREMENTS:

This position requires the ability to sit, hear, converse over the telephone, and key frequently on a computer for long periods of time.