Cyber Security

Pokagon Band of Potawatomi Indians•Dowagiac, MI

3d•Onsite

About The Position

The Cyber Security Analyst leads the organization’s information-security governance, risk, and compliance (GRC) functions to protect the Pokagon Band’s proprietary and sensitive information and digital assets. The position works across departments to identify and correct weaknesses in security systems, policies, and programs, and recommends measures to improve the organization’s security posture. Work includes assessing online and on-site infrastructure, analyzing security monitoring logs and SIEM data, investigating incidents and root causes, identifying and mitigating risks, and coordinating incident response and post-incident reviews. This GRC role focuses on assessment, audit, policy, and oversight, and coordinates closely with the Network Operations & Security Analyst, who performs day-to-day network-security operations. The role is tiered. Tier I focuses on assessments, analysis, compliance support, and reporting under close to moderate supervision. Tier II independently owns audits, vendor risk, the risk register, offensive security testing, and employee training, and may guide Tier I analysts. Tier III provides organization-wide security governance and program leadership, including policy authority, ownership of incident-response and disaster-recovery programs, and representation of security governance across the organization. Tiers are cumulative, and higher-tier analysts cover the functions of lower tiers. Lower-tier analysts may support higher-tier work with manager approval. The position is located onsite in Dowagiac, Michigan; a hybrid schedule may be considered after 3–6 months of employment. Local travel is required, and the employee must be able to work evenings and occasional weekends. Work is generally sedentary in a general office environment, with some standing, walking, light lifting, and other physical activities described in the posting. Pokagon Band Preference Code applies.

Requirements

Tier I: Bachelor’s degree in Information Technology, Computer Science, or a related field from an accredited institution recognized by the Council for Higher Education Accreditation or the U.S. Department of Education.
Tier I: Two years of experience in a cybersecurity role, or a combination of education and experience corresponding to the position requirements.
Tier I: CompTIA Security+ or GSEC certification.
Tier I: Familiarity with firewalls, intrusion detection and prevention systems (IDS/IPS), SIEM, endpoint protection, and compliance management, sufficient to assess, audit, and govern their use.
Strong written and oral communication, project-management, and service skills; ability to communicate information clearly and concisely to staff and users; and the knowledge, intellect, temperament, and flexibility to work effectively in a fast-paced environment.
Ability to work evenings and occasional weekends.
Tier II: At least four years of total experience in a cybersecurity or GRC role.
Tier II: CISA or CRISC certification.
Tier II advancement competencies: Independently conducted risk assessments, internal audits, and breach root-cause analysis for at least six consecutive months; produced accurate compliance and policy-efficacy reports; and demonstrated working knowledge of HIPAA, CJIS, and NIST requirements.
Tier III: At least six years of total experience in a cybersecurity or GRC role.
Tier III: CISSP certification.
Tier III advancement competencies: Owned internal, external, and compliance audits; managed vendor security risk and the risk register; commissioned offensive security testing; developed and delivered security training; led or co-led at least one GRC initiative; and provided documented guidance or mentoring to a Tier I analyst.
Tier advancement must be verified and approved in writing by the IT Director and Government Manager; demonstrated competencies must be observed and documented by the employee’s supervisor.
Ability to travel locally as needed.
Physical ability to perform the described duties, including sitting, standing, walking, light lifting, operating equipment, and occasionally lifting or moving up to 30 pounds.

Responsibilities

Access and analyze security monitoring logs and SIEM data for incident investigation, root-cause analysis, and program oversight.
Conduct and oversee organization-wide security risk assessments, including vulnerability and risk analysis, and track remediation.
Analyze security breaches to identify root causes.
Assist with security compliance audits and, at Tier II and above, perform internal and external security audits.
Generate reports evaluating the effectiveness of existing security policies and support compliance with HIPAA, CJIS, and applicable NIST standards.
At Tier II and above, verify third-party vendor security, collaborate with vendors to meet security requirements, and maintain the security risk register and track risk treatment and remediation.
At Tier II and above, conduct and commission offensive security testing, including penetration testing, exploit validation, and external reconnaissance, coordinating execution with the network-security operations team.
At Tier II and above, create and deliver employee security training programs.
At Tier III, develop, maintain, and enforce information-security policies, standards, procedures, and strategy.
At Tier III, own and continuously update incident-response and disaster-recovery plans and programs, set the compliance framework, and represent security governance organization-wide.
At Tier III, lead GRC initiatives and mentor Tier I and Tier II analysts.
Function as an on-call support resource as needed and perform other related tasks or functions as assigned.
Identify and report service problems, issues, or concerns and participate in solutions through designated channels.
Travel locally as needed.