Iam Analyst

TEKsystems•Tucson, AZ

1d•$25 - $30•Hybrid

About The Position

Responsible for the design, planning, testing, implementation, and administration of regulatory requirements and industry-wide accepted information security principles, practices, and information systems to ensure the protection of information assets processed, stored, or transmitted at UniSource. Evaluate the effectiveness of information security solutions and processes in place, keeping in mind the state of world events. Monitor for and identify security risks and exposures, determine the causes of security violations, assess, and implement procedures to halt future incidents. Understand and provide assistance to system users relative to information systems security matters. Participates in a team environment that provides cost-effective IT security services to the various business units. Works closely with other areas to insure optimum reliability and cohesiveness.

Requirements

Strong customer service and communication skills
Ability to interpret and apply policies and procedures
Ability to manage competing priorities in a fast-paced environment
Critical thinking and problem-solving skills
Ability to identify process gaps and opportunities for improvement
Ability to work effectively with both technical and business teams
Sound judgment and attention to detail when handling access requests and sensitive information
Identity access management
saviynt

Nice To Haves

Understanding of identity and access management (IAM) concepts
Understanding of joiner, mover, leaver (access lifecycle) processes
Experience balancing security, compliance, and user experience
Experience with ServiceNow, Workday, Saviynt, or similar platforms
Audit, compliance, or regulated industry experience

Responsibilities

Responsible for day-to-day security administration of company databases (e.g. Oracle and MSSQL), e-mail applications, key business applications and networks
Responsible for provisioning and de-provisioning users
Performs security incident response and forensic investigations
Evaluates new and emerging security technologies, features, and products to determine their application in the protection of company information assets
Performs security analysis, including architecture review, baselines, vulnerability assessments, and risk assessments to proactively identify security risks and exposures
Monitors security events across the network and ensures alerting and resolution of security issues and threats.
Provides anti-virus, spam, and malware administration and management.
Ensures change control processes are followed and service levels affected by those changes are maintained.
Works with internal and external project managers to complete projects and efforts on time.
Leads or participates in IT projects to provide information security expertise, guidance, or training.
Works with internal and external auditors to implement technical aspects of regulatory/compliance/privacy controls, such as Sarbanes-Oxley, NERC CIP, HIPAA, and PCI DSS.
Works with Human Resources or Legal to provide sensitive investigative or litigation hold support.
This position may provide services to affiliates of the Company subject to the UNS Energy Code of Conduct and the related Policies and Procedures.
Knowledge is expected in the following disciplines: Authentication and Access Control Tools, Management and Administration; Anti-Virus, Spam and Malware Tools, Management and Administration; Application Security Architecture & Cloud Computing Concepts; Change & Security Configuration Audit and Control; Encryption Processes, Management and Administration; Firewall Management and Administration; Hardware/software Security Testing and Evaluation; Intrusion Detection/Prevention; Incident Response Practices and Procedures; Computer Forensic Practices and Procedures; Layer 2 and 3 routing and switching protocols (TCP/UDP, IPv4, IPv6, OSPF, etc.); Security Information & Event Management (SIEM) and Logging; Scripting Languages, such as PowerShell