Information Security Analyst 3 (689939

State of Georgia•Decatur, GA

4d•Hybrid

About The Position

The Information Security Analyst position establishes and supports the technical information security posture of DCSD’s information systems. This includes proactive security measures to protect DCSD and school district staff, students, and systems. The Information Security Analyst also assists in reactive investigations and computer forensics as directed by the Chief Information Officer. The position also helps guide Information Security policy, procedure, and education at DCSD. The Information Security Analyst works closely with other technology staff within DIIT to improve the overall Information Security health of schools. This role performs a wide range of professional duties to ensure all best practices related to information security and data privacy are followed at DCSD; conducts deep-dive assessments related to information security compliance, such as FERPA and HIPAA, across multiple systems and processes; advises and trains DCSD staff on standards, laws, policies, regulations, processes, and best practices as it applies to the management of electronic information and data privacy.

Requirements

Any combination of education and experience equivalent to a bachelor's degree in computer science, information technology, information security, or a related field.
Three (3) years of progressively more responsible experience information technology and/or cybersecurity, some of which shall have been in a lead capacity in information security or a related field.
Knowledge of theories, procedures, practices, materials, and methods related to cybersecurity compliance.
Knowledge of applicable local, state, and federal privacy laws and regulations.
Knowledge of HIPAA, FERPA, and PCI-DSS compliance frameworks.
Skill in analytics and reporting tools.
Familiar with O365, Palo Alto, and Aruba products
Proficiency in data compilation, analysis, and reporting.

Nice To Haves

Advanced degree(s) beyond the minimum degree requirement in a relevant field may be considered for some experience.

Responsibilities

Monitor and mitigate end devices based on Windows Defender’s reporting
Monitor and mitigate end devices based on SecureWorks Taegis reporting
Oversee and train staff on update and patch management. These tasks would include Microsoft patches, 3rd party patches, zero-day updates for firewalls and security devices, scheduled firmware updates and VMWare updates.
Ensure all DCSD devices are enrolled in SecureWorks Taegis
Ensure mandated DCSD SaaS applications logs are integrated with SecureWorks Taegis
Ensure DCSD Firewall logs are integrated into the SecureWorks Taegis
Monitor and mitigate O365 risky users and logins
Ensure O365 Identity Protection is configured properly to identify and mitigate user risk
Train DCSD staff on identification and mitigation of security incidents.
Continuously monitor and improve the district’s security posture while preventing, detecting, analyzing, and responding to cybersecurity incidents.
Familiarize itself with the various devices, processes, and applications that need safeguarding within the district’s environment.
Provide continuous, proactive monitoring, such as performing scans of the IT environment 24/7 and reviewing the log of all network activity and communications to flag any abnormalities or suspicious activities and detect threats.
Utilize monitoring tools to receive alerts of potential threats and then determine the severity of said threats.
In the event of an incident, the vendor shall work to restore systems and recover any lost or compromised data.
In the event of an incident, the vendor shall be responsible for investigating the incident to ascertain what occurred, when it occurred, and how it occurred, to take steps and make recommendations to prevent similar problems from occurring in the future.