Information Security Analyst

Hagadone Media Group • Coeur d'Alene, ID

2d • Onsite

About The Position

The Information Security Analyst reports directly to the CIO and is responsible for supporting and strengthening the organization’s cybersecurity posture. This is done through vulnerability management, security operations, governance, risk management, compliance initiatives, and information security program development. This position works collaboratively with IT, HR, Legal, and business teams to identify and mitigate security risks, maintain security policies and procedures, support incident response activities, and ensure compliance with industry standards and regulatory requirements. The Information Security Analyst also plays a key role in disaster recovery planning, security awareness training, technical documentation, and the secure adoption of emerging technologies, including Artificial Intelligence (AI). This role requires a proactive, analytical professional who can balance technical security requirements with business objectives while helping protect organizational data, systems, and operations. This is a primarily on-site role based in Coeur d’Alene, Idaho. Due to the collaborative nature of this position, regular in-person attendance is required.

Requirements

• Bachelor’s degree in Cybersecurity or Computer Science.
• 3 or more years of relevant IT, Cybersecurity, system administration, infrastructure, or information security experience.
• Familiarity with vulnerability scanning, penetration testing concepts, and remediation workflows.
• Strong verbal and written communication skills with the ability to effectively collaborate with internal teams, external partners, and stakeholders.
• Ability to work effectively both independently and as part of a team, with a strong willingness to learn across diverse cybersecurity and operational areas.
• Familiarity with AI and machine learning concepts, including generative AI and Large Language Models (LLMs), with practical experience in assessing security and data privacy risks associated with these technologies.
• Ability to develop and implement AI-specific security guidelines and policies.
• Demonstrated ability to write, edit, and maintain comprehensive technical documentation, such as security policies, procedures, incident response plans, and disaster recovery runbooks.
• Experience in documenting security assessments, vulnerability findings, and remediation plans.

Nice To Haves

• CompTIA Security+, CySA+, CISSP, CISM, or similar industry-recognized certifications.

Responsibilities

• Track missing patches, CVEs, and vulnerability remediation progress.
• Coordinate security patching and upgrades across Windows servers, network devices, and appliances.
• Define patching priorities based on business risk, ensuring proper change documentation and post-patch validation.
• Monitor EDR and SIEM alerts, escalating potential security incidents as appropriate.
• Participate in cybersecurity incident response, remediation planning, and follow-up tracking.
• Support PCI audits, regulatory compliance reviews, and quarterly/annual security scans.
• Work with internal teams and third parties to remediate findings.
• Develop and maintain comprehensive IT security policies, standards, and guidelines, including Acceptable Use, Access Control, Data Classification, and Incident Response.
• Proficiency in creating and updating technical documentation, such as incident response playbooks, disaster recovery runbooks, and security configuration guides.
• Ensure policies and procedures align with industry best practices, established cybersecurity frameworks, and regulatory requirements such as PCI-DSS.
• Manage the policy exception process by evaluating business justification, assessing associated security risks, and recommending compensating controls.
• Conduct periodic reviews of documentation to ensure it reflects current operational practices, technology changes, and the evolving threat landscape.
• Collaborate with internal departments such as HR, Legal, and IT to support policy enforcement, track employee acknowledgments, and integrate security guidelines into standard operating procedures.
• Support backup and DR planning by defining recovery objectives, ensuring critical system coverage, reviewing backup statuses, participating in restore testing, and maintaining DR runbooks.
• Help create and deliver cybersecurity awareness training for employees.
• Stay current on emerging cybersecurity trends, threat landscapes, and AI-related technologies.
• Champion the organization’s AI initiatives by providing strategic security guidance, evaluating AI platforms for data privacy and security risks, and ensuring business adoption aligns with organizational risk tolerance.
• Work closely with Hagadone team members to provide and participate in hands-on training opportunities that build practical AI knowledge, strengthen secure adoption practices, and support effective use of AI tools across the organization.
• Develop and enforce AI acceptable use guidelines, proactively educating employees on ethical usage, data protection, and the risks of inputting sensitive company information into public AI models.
• Work directly with the Corporate Administrative Manager to serve as the organization’s primary liaison for IT and cybersecurity communications by developing and delivering company-wide updates on technology initiatives, cybersecurity threats, AI developments, system changes, security best practices, and incident-related communications.
• Partner with HR, IT, and leadership to ensure employees receive timely, consistent, and understandable information regarding HRIS implementations, software updates, security policies, compliance requirements, and emerging technology risks, while fostering a culture of security awareness and responsible technology use.

Benefits

• Competitive compensation package based on experience, skills, and qualifications.
• Medical Benefits
• Coverages offered: medical, dental, vision, life insurance, flexible reimbursement plans, hospital indemnity, critical care, accident, and short-term disability.
• Access to The Hagadone Medical Clinic (no co-pay, no deductibles, free prescriptions, on-site).
• 401(k) Plan with Company Match.
• PTO (7 days after 6 months, 10 days after 1 year, 15 days after 2 years, 20 days after 5 years).
• Employee Discounts (e.g., 25% off CDA Resort Spa, 20% off at Hagadone Restaurant, free daily cruises, special room rates, 20% off at Quicksilver Photography).

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level