Information Security Analyst-Firewall Admin

Avera•Sioux Falls, SD

3d•Onsite

About The Position

Actively drives participation in the development, evaluation, and reporting of information technology security controls and risks mitigation strategies as well as security processes in the IT and business environments. Delivers and may assist other team members in risk identification and mitigation strategies and processes, control documentation, evaluation of control design, evaluation of control operation, reporting of control deficiencies, and remediation strategies. Reviews current processes for improvements in control documentation & testing for effectiveness and efficiency.

Requirements

Strong networking background required.
Firewall administration strongly preferred.
Communication Network Controls.
Must be able to work the hours specified.
Visual acuity adequate to perform position duties.
Ability to communicate effectively with others.
Ability to hear, understand and distinguish speech and other sounds.

Nice To Haves

Bachelor's in related area
Certified Information Systems Auditor (CISA) - ISACA
Certified Information Systems Security Professional (CISSP) - International Information System Security Certification Consortium (ISC2)
Network+ - Computing Technology Industry Association (CompTIA)
Security+ - Computing Technology Industry Association (CompTIA)
4-6 years Related experience in IT, project management, compliance or security areas

Responsibilities

Actively drives team participation in establishment, evaluation, and reporting on risks and controls in the IT and business environments.
Designs, performs, and evaluates the current testing of controls while maintaining and improving the process for evaluation of IT controls through a combination of automated testing and interviewing.
Assists in management of the IT policy lifecycle including development of IT policy standards and IT policy review processes.
Identify and review current risk areas for IT; analyze existing policies for gaps in coverage for these areas.
Perform internal self-assessments for management.
Monitor IT policies to ensure compliance with all aspects of federal, state, and local laws and regulations.
Collects information on control failures/unmitigated risks, and remediation results to build compliance reports for IT and business management.
Provides advisory services for IT controls to projects, teams, and audits by ensuring consistent control implementation through documented processes for identifying control requirements prior to their implementation into production IT environments.