Information Technology Security Analyst

Responsibilities:

• Guide the business to follow the company's information security policies
• Identify critical information assets
• Maintain updated data flow diagrams to address data protection risks
• Assist with the implementation and testing of the security incident response plan
• Document all activities during an incident
• Effectively communicate with users and peers regarding information security-related matters, audits, and policies.
• Assist in developing security-related programs such as employee training, phishing tests, system and vendor audits, client Requests for Information (RFI), document and information gathering, and review of user exception requests.
• Work closely with infrastructure and third-party security service providers to help achieve the desired security goals and objectives.
• Support IT system owners with Disaster Recovery and Business Continuity Planning and testing.
• Maintain DRP/BCP documentation for all major IT areas
• Administer security products and software packages
• Provide on-call assistance

Qualifications:

• Experience working with 3rd party vendors
• Must have knowledge of security frameworks, governance and compliance documentation, industry audit requirements (ISO27001, IATF, TISAX), Azure, Office365, and Entra (AAD)
• Experience with IT administration, such as network and security administration
• Familiarity with Networks and Data communications, System Management Activities, Active Directory, Microsoft O/S, Exchange Server, Desktop applications, Firewall and Database Management Systems

Nice to haves:

• Certifications such as MCITP Enterprise Admin, ITIL, CCNA
• CISSP – Certified Information Security Professional or CGRC – Governance, Risk & Compliance

Note:

Travel as required to perform company duties