The IS Security Analyst performs two core functions for the enterprise. The first is the day-to-day operations of the in-place security solutions while the second is the identification, investigation, and resolution of security breaches detected by those systems. Secondary tasks may include involvement in the implementation of new security solutions, participation in the creation and or maintenance of policies, standards, baselines, guidelines, and procedures as well as conducting vulnerability audits and assessments. The IS Security Analyst is expected to be fully aware of the enterprise's security goals as established by its stated policies, procedures, and guidelines and to actively work towards upholding those goals. Practices proper safety techniques in accordance with Center and departmental policies and procedures. Responsible for the reporting of employee/patient/visitor injuries or accidents, or other safety issues to the supervisor and in the occurrence notification system. Monitors and ensures compliance with all regulatory requirements, organizational standards, and policies and procedures related to area of responsibility. Identifies potential risk areas within area of responsibility and supports problem resolution process.
JOB RESPONSIBILITIES Accountabilities:
- Responsible for implementing, maintaining, and monitoring information security controls implemented to protect Shepherd Center's Information Technology.
- Will triage security related events and act upon established incident response procedure.
- Assist in developing and enforcing standards for network, server, workstation, and application configurations.
- Work with end users to ensure security controls do not impede business functions.
- Maintain situational awareness of active and emerging information security threats.
- Assist continuing development and execution of Security Education Training and Awareness for staff.
- Will remain stationary for extended periods of time in an office environment; however, may be required to lift objects up to 50 lbs., such as network or server equipment, for installation.
- Ability to work flexible hours and extended hours during information security incidents or activation of organizational disaster recovery plan.
- Performs other related duties as required.
REQUIRED MINIMUM EDUCATION- Bachelor's degree in Information Technology/Information Security related field.
REQUIRED MINIMUM CERTIFICATION- Possess or be working towards Information Security related certifications.
- Vendor specific certifications from Cisco and Microsoft are a plus.
REQUIRED MINIMUM EXPERIENCE- Possess or be working towards Information Security related certifications.
- Vendor specific certifications from Cisco and Microsoft are a plus.
REQUIRED MINIMUM SKILLSPREFERRED QUALIFICATIONSPHYSICAL DEMANDS - Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time or exerting up to 15 pounds of force occasionally or a negligible amount of force frequently to lift, carry, push, pull, or otherwise move objects, including the human body.
WORKING CONDITIONS- Normal office environment.
The above statements are intended to describe the general nature and level of work performed by people assigned to this classification. They are not intended to be an exhaustive list of all job duties performed by the personnel so classified.
