Cyber Information Assurance Analyst I

APS•Phoenix, AZ

20h•Remote

About The Position

Responsible for designing and implementing information assurance and data security for applications, software, databases, flat files, and procedures. The role assesses and mitigates data security threats and risks throughout the data life cycle and validates data security requirements through analysis. The analyst supports compliance and audit activities by helping ensure appropriate data security controls, documentation, and processes are in place and operating effectively. The role partners with internal stakeholders and audit teams to support control assessments, address findings, identify potential compliance gaps, and strengthen the organization’s security and control environment. Work is generally limited in scope and performed under close supervision, using methods designed by other technical colleagues and receiving oversight from more advanced analysts.

Requirements

Bachelor's degree in computer science, business administration, finance, accounting, or a related field and one year of prior relevant experience, or an equivalent combination of education and directly related experience.
Basic technical subject matter knowledge within a job area or system.

Nice To Haves

Experience with risk management and information security frameworks such as National Institute of Standards and Technology (NIST), Critical Infrastructure Protection (CIP), or Generally Accepted Privacy Principles (GAPP).
Knowledge of networks and information assurance; security and malware detection and prevention technologies; information assurance regulations and standards; compliance; software applications and programming; communication protocols; security design; and the Information Assurance Vulnerability Management program (IAVM) and other information assurance programs.
Skill in designing and implementing information assurance programs and supporting secure systems operations.
Ability to design and implement information assurance and security systems with multiple requirements, including business continuity, physical security, and data security.
Ability to educate internal and external stakeholders on information assurance policies and practices.

Responsibilities

Follow information security and data privacy framework controls to help ensure adequate protection procedures exist for APS' sensitive information.
Maintain and regularly reconcile the inventory of applications and databases containing sensitive information, incorporating privacy by design into projects and the data life cycle.
Perform risk management tasks, identify cybersecurity risks, and assist in developing mitigation processes.
Participate in the vendor risk management program and assess risks associated with vendors possessing APS' sensitive information.
Assist in monitoring applications and databases for unusual activity.
Perform basic data loss prevention reviews by monitoring data received or sent on premises and through cloud solutions.
Participate in implementing technical standards, procedures, and guidelines under oversight from more advanced analysts.
Assist with coordinating, designing, evaluating, and submitting regulatory compliance evidence demonstrating controls, solutions, policies, and procedures.
Assist with security and privacy awareness efforts to educate APS' workforce on safe data use and handling.
Use systems that help prevent cyber threats, including data breaches and inadvertent over-sharing of sensitive data.
Report current or future security concerns to more advanced analysts.
Conduct research and analysis to solve information assurance-related problems, which may include security risks.
Support compliance and audit activities, including control assessments, addressing findings, identifying potential compliance gaps, and strengthening security and controls.