Cybersecurity Analyst (AI Focus)

Florida Blue•United States,

9d•$100,400 - $163,200•Hybrid

About The Position

The Cybersecurity Analyst develops and implements information security programs, including defining security policies, processes, and standards. The role conducts audit assessments and establishes processes and standards to help ensure security configurations are maintained. It provides cybersecurity requirements and recommendations, with a focus on core AI architectures and solutions and AWS and Azure public cloud designs. The analyst partners with IT and business teams to identify and advise on security requirements, impacts, and risks; addresses vulnerabilities and residual risk; and participates in IT projects and technical-control initiatives throughout the project lifecycle. The role also develops security processes, policies, and procedures, advises on service-level agreements, evaluates security hardware and software, supports security architecture development, and leads audit-related coordination and remediation activities. This position has a hybrid work arrangement combining flexibility with office engagement. Team schedules depend on role requirements and business needs, and travel to corporate offices may be required.

Requirements

At least 5 years of related work experience in an IT-related field, or equivalent IT, IT infrastructure, and/or cybersecurity work experience.
A related bachelor's degree or additional related equivalent work experience.
Required certification depends on the cybersecurity analyst area: Enterprise Cybersecurity Services requires CISSP or CySA+; ICRM requires CISA, CISSP, or CRISC; Program Management requires CISM, Six Sigma Green Belt, or CISSP. The posting specifies 180 days.
Knowledge of information security principles, including risk assessment and management, threat and vulnerability management, incident response, and identity and access management.
Knowledge of network infrastructure, including routers, switches, firewalls, associated network protocols, and concepts.
Strong technical knowledge of current systems, software, protocols, and standards, including TCP/IP and network administration/protocols.
Experience developing, documenting, and maintaining security procedures.
In-depth knowledge of operating systems and security applications, and working knowledge of basic network protocols and tools.
Leadership abilities, including knowledge sharing, conflict resolution, facilitating open discussions, fairness, and appropriate assertiveness.
Ability to work under stress in emergencies and handle multiple high-pressure situations simultaneously.
Ability to communicate complex technical information clearly to varied audiences.
Ability to manage tasks independently and take ownership of responsibilities.
Ability to learn from mistakes and use constructive feedback to improve performance.
Strong customer focus, including managing customer expectations and building long-term relationships.
Strong team-oriented interpersonal skills and ability to work with vendors and IT-business personnel.
Ability to adapt to a rapidly changing environment.
Strong critical-thinking skills to evaluate alternatives and present solutions consistent with business objectives and strategy.

Nice To Haves

Relevant security certifications.
Experience using Agile methodology.

Responsibilities

Serve as a liaison with IT and business partners to identify, understand, document, and advise on security requirements, impacts, and risks.
Provide cybersecurity requirements and recommendations focused on core AI architectures and solutions, as well as AWS and Azure public cloud designs.
Analyze, propose, and implement solutions addressing residual risk, vulnerabilities, and other security exposures.
Participate in IT projects to ensure security issues are addressed throughout the project lifecycle.
Participate in initiatives to identify, select, and implement technical controls.
Develop information security processes, policies, and procedures; advise on service-level agreements and help ensure security controls are managed and maintained.
Research, evaluate, and recommend information-security hardware and software, including developing business cases for security investments.
Lead and coordinate audit-related initiatives, including relationship management, data collection, progress tracking, assessment, and remedial activities.
Assist with and support the development of security architecture.