Information Security Analyst I-sr

TXNM Energy•Albuquerque, NM

67d

About The Position

Acts as an IT security subject matter expert and technical consultant for security initiatives. Functions as technical engineer, system architect and operational support for the Identity Management (IDM) suite of products. Analyzes the security of systems and applications, and develops security baselines to protect information against unauthorized access. Conducts forensic investigations including investigations done in coordination with other departments. Personnel in this job title may be covered by NERC CIP cyber security standards. If the position is covered, prior to being hired, promoted, or transferred into the position, the candidate must successfully pass a Personnel Risk Assessment, which includes identity verification and a criminal background check. Prior to being granted unescorted access to cyber secure areas, the candidate must attend cyber security training. Annual cyber security training is also required.

Requirements

Bachelor¿s degree from a four-year college or university in Information Resource Management, Business Computer Systems, Computer Science or Computer Security with five to seven years related experience, or equivalent combination of education and/or experience related to the discipline.
Ability to maintain positive and productive working relationships with various individuals and groups
Ability to recognize and initiate complex tasks without direction
Ability to read and interpret technical manuals and reports, instructional documents, and procedure manuals
Ability to write procedural documentation and user instructions
Ability to speak effectively with various individuals, groups, and vendors
Ability to calculate figures and amounts such as discounts, interest, commissions, proportions, percentages, area, circumference, and volume
Ability to apply concepts of basic algebra and geometry
In-depth knowledge and experience with Linux/UNIX servers, client & server applications and information security issues
In-depth knowledge of Microsoft, Linux and UNIX server security functionality
In-depth knowledge of related security software
In-depth knowledge of database product security technology, specifically Oracle and SQL, and general knowledge of physical security methods
Ability to understand and assimilate complex technical information. Ability to solve partial problems and deal with a variety of concrete variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written, oral, diagram or schedule form.
Ability to make access management and provisioning decisions without direction, in accordance with Company policies, procedures and programs. Examines potential areas for service improvement and makes recommendations for changes to senior staff or management.

Responsibilities

Assesses, designs, and recommends security access requirements for systems and applications; creates ad hoc reports for review
Collaborates with enterprise architecture on the development of system and application security standards and baselines
Provisions electronic access for supported systems and applications in accordance with the Enterprise Access Provisioning Program
Ensures all access issues are handled in a timely manner and that supported systems are functioning properly
Creates, modifies and deletes profiles and other access controls as part of Role Based Access Control (RBAC) program
Provides routine reaccreditation of existing users and associated entitlements
Produces evidence in support of Company policies and regulatory requirements, such as Sarbanes-Oxley (SOX) and North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP)
Participates in projects as a subject matter expert in support of business initiatives; ensures project work is completed in a timely manner in accordance with Information Security policies, programs and standards; oversees and continuously improves the Enterprise Access Provisioning Program
Performs user access reviews supporting Company investigation needs; assists with data preservation requests for litigation holds; conducts digital forensics in support of the Information Security program
Ensures teamwork to reduce security exposures