IT Security Analyst

Summary

The IT Security Analyst role will assess information risk, track vulnerabilities, and facilitate remediation of vulnerabilities across Corporate IT.

Essential Functions

Facilitates and manages risk remediation tasks, track risk mitigation

Maintains risk register, prepares reports and documentation and reports on findings

Develops recommendations for corrective action

Performs vulnerability assessments utilizing IT security tools and methodologies

Performs assessments of the IT security/risk posture within the IT network, systems, and software applications

Identifies and implements IT security tools in support of recommended strategy

Identifies opportunities to reduce risk and document remediation options reg arding acceptance or mitigation of risk scenarios

Facilitates and assists in IT audits, IT risk assessments and regulatory compliance activities

Facilitates and assists in addressing questions from internal and external audits and examinations as requested by Compliance

Recommends policies, procedures and standards that meet existing and newly developed policy and regulatory requirements

Serves as project manager/lead for IT security projects working collaboratively with technical and business teams

Promotes awareness of applicable regulatory standards, upstream risks, and industry best practices

Conducts analysis of technical approaches to achieve compliance requirements and to improve processes

Collaborates with the corporate Information Security and Compliance team to ensure IT alignment with corporate standards and policies

Required Qualifications

Bachelor's Degree in Computer Science, Computer Engineering, Information Systems – security certifications will be considered in lieu of a degree

At least 2 years IT security experience with a proven ability to engage with IT, business, and corporate compliance teams

Experience in managing IT security controls in an organization

Experience conducting IT compliance assessments

Knowledge of technical infrastructure, networks, databases, and systems in relation to IT Security and IT Risk

Project management skills

Windows workstation and server administration experience

Knowledge of data risk management frameworks and compliance practices

• Analytical thinking, strong analytical and assessment skills

• Ability to effectively coordinate collaborate and coordinate with technical and business teams

• Effective and creative technical problem-solving and troubleshooting skills

• Effective written and verbal communication skills, ability to prepare reports and documentation and deliver presentations to team leaders and coworkers

Desired/Preferred Qualifications

Security+, GISF, SSCP or comparable certifications