Cyber Security

Pokagon Band of Potawatomi Indians•Dowagiac, MI

2d•Onsite

About The Position

The Cyber Security Analyst leads the Pokagon Band’s information-security governance, risk, and compliance (GRC) functions to protect proprietary and sensitive information and digital assets. The role works across departments to identify and address weaknesses in security systems, policies, and programs, and recommends measures to improve the organization’s security posture. Work includes assessing online and on-site infrastructure, analyzing security monitoring logs and SIEM data for incident investigation and root-cause analysis, identifying and mitigating risks, coordinating incident response, and conducting post-incident reviews. This is a GRC, assessment, audit, policy, and oversight role, distinct from day-to-day network-security operations, and it coordinates closely with the Network Operations & Security Analyst. The position has three cumulative tiers. Tier I focuses on carrying out security assessments and reporting under guidance. Tier II independently owns audits, vendor risk, and the risk register, and may guide Tier I analysts. Tier III leads organization-wide security governance, policy, incident response, disaster recovery, and GRC initiatives, and mentors Tier I and II analysts. A higher-tier analyst performs the functions of lower tiers as operational needs require; lower-tier analysts may support higher-tier work with manager approval. The tiers describe levels of individual responsibility and team coverage and do not require one employee per tier. The position is based onsite in Dowagiac, Michigan. A hybrid schedule may be considered after 3–6 months of employment. The role supports exemplary service, dignity, and respect for Tribal Citizens, Tribal Council, and staff, and employees are expected to identify and report service concerns and participate in solutions through designated channels.

Requirements

Tier I: Bachelor’s degree in Information Technology, Computer Science, or a related field from an accredited institution recognized by the Council for Higher Education Accreditation or the U.S. Department of Education.
Tier I: Two years of experience in a cybersecurity role, or a combination of education and experience corresponding to the position requirements.
Tier I: CompTIA Security+ or GSEC certification.
Familiarity with firewalls, intrusion detection and prevention systems (IDS/IPS), security information and event management (SIEM), endpoint protection, and compliance management sufficient to assess, audit, and govern their use.
Strong written and oral communication, project-management, and service skills; ability to communicate clearly and concisely with staff and users; and the knowledge, intellect, temperament, and flexibility to work effectively in a fast-paced environment.
Ability to work evenings and occasional weekends.
Tier II: At least four years of total experience in a cybersecurity or GRC role.
Tier II: CISA or CRISC certification.
Tier II advancement competencies: Independently conduct risk assessments, internal audits, and breach root-cause analysis for at least six consecutive months; produce accurate compliance and policy-efficacy reports; and demonstrate working knowledge of HIPAA, CJIS, and NIST requirements.
Tier III: At least six years of total experience in a cybersecurity or GRC role.
Tier III: CISSP certification.
Tier III advancement competencies: Own internal, external, and compliance audits; manage vendor security risk and the risk register; commission offensive security testing; develop and deliver security training; lead or co-lead at least one GRC initiative; and provide documented guidance or mentoring to a Tier I analyst.
Tier advancement must be verified and approved in writing by the IT Director and Government Manager, with each demonstrated competency observed and documented by the employee’s supervisor.
Ability to travel locally as needed.
Pokagon Band Preference Code applies.

Responsibilities

Access and analyze security monitoring logs and SIEM data for incident investigation, root-cause analysis, and program oversight.
Conduct and oversee security risk assessments, including vulnerability and risk analysis, and track remediation across the organization.
Analyze security breaches to identify root causes.
Assist with security compliance audits and, at Tier II and above, own internal, external, and compliance audits.
Generate reports evaluating the effectiveness of security policies and support compliance with HIPAA, CJIS, and applicable NIST standards.
Verify third-party vendor security, collaborate with vendors on security requirements, and manage vendor security risk at the applicable tier.
Maintain the security risk register and track risk treatment and remediation.
Conduct or commission offensive security testing, including penetration testing, exploit validation, and external reconnaissance, coordinating execution with the network-security operations team.
Create and deliver employee security training programs at the applicable tier.
Develop, maintain, and enforce information-security policies, standards, and procedures at Tier III.
Continuously update incident-response and disaster-recovery plans and own those programs at Tier III.
Set the compliance framework and represent security governance across the organization at Tier III.
Lead GRC initiatives and mentor analysts at the applicable tier.
Perform other related tasks or functions as assigned.
Function as an on-call support resource as needed.