IT Security Analyst

POSITION DESCRIPTION:

IT Security Analyst

KEY RESPONSIBILITIES

• Security Policy and Procedure Management:

  Develop, update, and enforce

  security policies

  and procedures for accessing corporate systems, including membership management systems, network access, email systems, data handling, and employee device usage.

• Security Infrastructure and Application Management:

  Manage and maintain a variety of security layers and applications, such as firewalls, intrusion detection/prevention systems (IDS/IPS), security information and event management (SIEM) tools, endpoint protection solutions, VPN’s, and Google SSO and Security Applications

• Security Auditing and Compliance:

  Conduct regular

  security audits

  and vulnerability assessments to identify and mitigate potential risks. Ensure compliance with internal policies and external regulations (e.g., GDPR, HIPAA).

• Incident Response:

  Participate in the

  incident response

  team to investigate security breaches, analyze threats, and implement corrective actions.

• Training and Awareness:

  Assist in the development and delivery of

  security awareness training

  for employees to promote a culture of security.

• Collaboration:

  Work with IT and other departments to integrate security best practices into new and existing systems and applications.

QUALIFICATIONS

• Education:

  Bachelor's degree in Information Technology, Computer Science, or a related field. Relevant certifications such as

  CompTIA Security+

  ,

  Certified Information Systems Security Professional (CISSP)

  , or

  Certified Ethical Hacker (CEH)

  are highly desirable.

• Experience:

  Proven experience (3+ years) in a cybersecurity or IT security role, with a strong background in security policy development and network security.

• Technical Skills:

  In-depth knowledge of network protocols, operating systems (Windows, Linux), and security technologies. Experience with SIEM tools, vulnerability scanners, and penetration testing methodologies is essential.

• Soft Skills:

  Excellent analytical and problem-solving skills, strong attention to detail, and the ability to communicate complex security concepts to both technical and non-technical audiences.

• Teamwork:

  Ability to work independently and as part of a team in a fast-paced environment.