Information Security Analyst II

West Bend Insurance Company•WI-West Bend US-WI-Madison US-WI-Appleton, WI

2d•$68,933 - $86,166•Hybrid

About The Position

Under limited supervision, the Information Security Analyst II works closely with other members of the Information Security team to support a comprehensive information security program. This role contributes to the development and execution of security policies, processes, and standards, and may lead small to moderate-sized efforts. The analyst collaborates with IT teams to deploy technical controls, meet security requirements, and monitor system configurations.

Requirements

2-4 years of experience in Information Security or a related IT field
Knowledge of network infrastructure, cloud platforms, modern OS’s, SIEM tooling and incident management
Experience performing business impact, control, vulnerability and vendor management assessments
Experience with information security management frameworks; NIST, CIS, Mitre Att&ck, ISO 2700x, ITIL and/or COBIT
Ability to effectively articulate subject matter, in writing and verbally to peers, management and business stakeholders
Proven ability to develop and leverage scripts and automation to improve security operations and efficiency
Experience working with IAM and GRC platforms to support identity lifecycle processes (joiner/mover/leaver), access governance, and access controls
Detail orientated, analytical and a creative problem solver
Security first mindset

Nice To Haves

Bachelor’s degree in Cybersecurity, Information Systems or equivalent work experience
Certification in CompTIA, CISSP, SSCP,GIAC or other security industry certifications

Responsibilities

Execute assigned information security projects, including leading small to moderate efforts.
Contribute to the definition and implementation of security policies, processes, and standards.
Collaborate with IT teams to deploy and monitor technical security controls.
Support the analysis and response to security incidents and vulnerabilities.
Assist in developing security awareness, training, and education program materials.
Research current security and privacy issues, technologies, best practices, and hardening standards.
Recommend solutions to address security exposures and emerging threats.