Analyst II - Information Security

ALSAC • Memphis, TN

1d • Hybrid

About The Position

The Information Security Analyst is responsible for supporting the development, implementation, and continuous improvement of the enterprise information security program. This role partners across Information Technology and business teams to protect organizational systems, applications, networks, and data from evolving cybersecurity threats. The analyst contributes to key cybersecurity functions including security operations, vulnerability management, security governance, incident response, identity and access management, risk assessment, and application security. This position provides technical analysis, consultation, reporting, and recommendations to strengthen the organization's security posture while supporting strategic business objectives. This role offers broad exposure to multiple cybersecurity domains and provides opportunities to work with a diverse set of security technologies, enterprise initiatives, and cross-functional stakeholders.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Business, or a related field.
• Five (5) years of progressive experience in information security, cybersecurity, systems administration, infrastructure security, or related technology disciplines.
• Demonstrated knowledge of cybersecurity principles, technologies, controls, and best practices.
• Strong analytical, problem-solving, and investigative skills.
• Excellent written and verbal communication skills, including the ability to communicate technical concepts to both technical and non-technical audiences.
• Ability to prioritize and manage multiple projects and initiatives in a dynamic environment.
• Valid driver's license required.

Nice To Haves

• Security+, GSEC, GCIH, CySA+, CISSP, CASP+, or comparable cybersecurity certifications preferred.
• Experience working with: Vulnerability management platforms, Security Information and Event Management (SIEM) tools, Endpoint Detection and Response (EDR) solutions, Identity and Access Management (IAM) technologies, Cloud security platforms and controls, Application security testing tools
• Familiarity with security frameworks and standards such as NIST Cybersecurity Framework, CIS Controls, ISO 27001, or similar.
• Knowledge of incident response methodologies, threat hunting, and security operations practices.

Responsibilities

• Partner with Information Security, Infrastructure, and Application Development teams to strengthen enterprise security controls and capabilities.
• Participate in security operations activities, including monitoring, investigation, and response to potential security incidents.
• Conduct vulnerability assessments, analyze findings, and support remediation efforts across technology environments.
• Assist in the development, implementation, and maintenance of security policies, standards, procedures, and response plans.
• Perform information security risk assessments and provide recommendations to reduce organizational risk.
• Support identity and access management processes, access reviews, and privilege management initiatives.
• Validate application security testing results and collaborate with development teams to promote secure coding practices.
• Evaluate emerging cybersecurity threats, vulnerabilities, and industry trends to recommend appropriate safeguards and mitigation strategies.
• Provide security consultation and guidance to systems administrators, technology teams, and business stakeholders.
• Develop meaningful security metrics, dashboards, and reports to communicate risk and program effectiveness to leadership.
• Participate in enterprise security projects, audits, compliance initiatives, and continuous improvement efforts.
• Help educate and train employees on cybersecurity awareness and security best practices.
• Monitor, analyze, and investigate security events, alerts, and suspicious activity across enterprise systems and networks.
• Support incident response activities, including triage, investigation, containment, documentation, and post-incident analysis.
• Assist in developing, maintaining, and improving enterprise information security policies, standards, procedures, and response plans.
• Perform security risk assessments and provide actionable recommendations to mitigate identified risks.
• Conduct vulnerability management activities, including scanning, validation, reporting, prioritization, and remediation tracking.
• Review security logs, alerts, and intelligence sources to identify threats, vulnerabilities, and potential indicators of compromise.
• Collaborate with security team members, system administrators, and application developers to address security concerns and implement controls.
• Assist with implementing, validating, and documenting security-related changes across enterprise technology environments.
• Support application security initiatives through testing validation, secure coding reviews, and collaboration with development teams.
• Develop and deliver security metrics, status reports, and presentations for management and stakeholders.
• Research emerging cybersecurity threats, vulnerabilities, technologies, and industry best practices to improve organizational defenses.
• Provide consultation and security guidance to technology teams regarding infrastructure, cloud, applications, and data protection.
• Maintain confidentiality, integrity, and professionalism while handling security-sensitive information and investigations.
• Support cybersecurity awareness, education, and training initiatives across the organization.
• Participate in audits, compliance assessments, and enterprise security improvement initiatives as assigned.

Benefits

• Core Medical Coverage: (low cost low deductible Medical, Dental, and Vison Insurance plans)
• 401K Retirement Plan with 7% Employer Contribution
• Exceptional Paid Time Off
• Maternity / Paternity Leave
• Infertility Treatment Program
• Adoption Assistance
• Education Assistance
• Enterprise Learning and Development

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level