Sr Information Security Analyst

Sundt Construction•Tempe, AZ

About The Position

The Information Security Analyst will be responsible for supporting computer network defense, to include auditing the network for vulnerabilities, identifying relevant threats, recommending corrective actions, developing solutions for security issues, and investigating security incidents and breaches.

Requirements

Bachelor's degree in Computer Science, Computer Information Systems, or equivalent work experience.
Excellent organizational and communication skills and someone who is able to work collaboratively in a team environment.
Minimum of 8 years' experience within IT and 5 years' as a Security Analyst, preferably in an environment with strong compliance requirements.
Proficient use of all Microsoft Office Suite programs.

Nice To Haves

Professional certifications in computer technology, security, risk management or business continuity, preferably CISSP, CEH or CISA.
Technology Project Management experience preferred.

Responsibilities

Assist in the coordination of disaster recovery (DR) efforts for the Company including plan development, IS communication plan, site assessments, training, testing and execution.
Develop and implement a comprehensive plan for regular compliance verification against approved/selected security controls.
Develop and use of a standardized "Compliance Checklist".
Facilitate the remediation of any vulnerabilities in websites, production applications or network access points identified by a security scan.
Help strengthen the security culture across the IS department and the company.
Implement and administrate user-based security/phishing awareness and training programs.
Other information security related tasks as required.
Participate in development of security policies, standards and best practices.
Recommend threat protection security solutions to business problems and analyze security breaches to determine their root cause.
Regularly contribute to security and other information technology research to drive continuous improvements to the company's security, risk management and disaster recovery programs.
Review access control requirements.
Support security incident response team, as needed, through execution of the communication plan and providing additional support as requested.
System audits and/or security scans of network connected devices, servers, web applications, network printers, file services, database access and applications.
Walk through audits of desks, offices, conference rooms and shared workspaces for compliance.