Information Security Analyst

Tulsa Airports Improvement Trust•Tulsa, OK

1d•$62,302•Onsite

About The Position

The Information Security Analyst reports directly to the Director of Technology and Innovation and plays a critical role in safeguarding Tulsa International Airport's data, infrastructure, and stakeholders from cyber threats. This position is responsible for designing, developing, documenting, testing, implementing cybersecurity controls and measures, and actively identifying and mitigating threats within the infrastructure. This position starts at $62,302 a year.

Requirements

Bachelor's degree in Cybersecurity, Management Information Systems (MIS), Computer Information Systems (CIS), or a related field.
Strong knowledge of threats and vulnerabilities associated with cloud and on-premise security.
Proficiency in Vulnerability Management scanning and reporting tools.
Hands-on experience with security monitoring tools, vulnerability scans, and assessment report review.
Experience as a systems or network administrator in modern infrastructure.
Proficiency in firewall management, endpoint protection, networking, and server security.
Excellent written and verbal communication skills.
Availability to work 40 hours per week and ability to work overtime when necessary.
Physical requirements include arm and hand steadiness and finger dexterity enough to use a keyboard and telephone; occasional lifting up to 30 pounds; frequent carrying, pushing and pulling up to 15 pounds with occasional carrying; vision, speech and hearing sufficient to perform the essential tasks; Capable of regularly walking to various parts of the Airport without overly being exerted.
Possession of a valid Oklahoma Driver's License; ability to obtain and maintain eligibility to hold a Security Identification Display Area (SIDA) badge.

Nice To Haves

Cybersecurity-related certifications are a plus.

Responsibilities

Lead the development, maintenance, and continuous improvement of the Airport Cybersecurity Improvement Plan (CIP), ensuring alignment with evolving threats and regulatory requirements.
Serve as the primary cybersecurity point of contact with federal agencies, including TSA, CISA, and FBI coordinating compliance efforts, reporting, and the adoption of available cybersecurity resources and directives.
Partner with Safety and Security to ensure adherence to TSA, FAA, and other applicable regulatory cybersecurity frameworks.
Design, implement, and enhance a comprehensive cybersecurity program to proactively identify, detect, and mitigate threats across airport systems.
Monitor security logs, alerts, and intelligence sources to identify anomalies, investigate incidents, and recommend corrective actions.
Develop and implement security hardening standards and best practices to strengthen the organization’s overall security posture.
Evaluate emerging threats and technologies, recommending improvements to enhance resilience and operational effectiveness.
Optimize cybersecurity tools, including Vulnerability Management platforms, Anti-Virus/Anti-Malware solutions, and SIEM tools.
Ensure tools are effectively configured, monitored, and continuously improved to meet organizational security objectives.
Lead the development and execution of cybersecurity training and awareness programs across the airport, including phishing simulations and social engineering exercises.
Design, facilitate, and evaluate cybersecurity tabletop exercises to test incident response capabilities and improve organizational readiness.
Report training outcomes, trends, and risk insights to leadership, recommending actionable improvements.
Conduct and support cybersecurity risk assessments, audits, and compliance reviews.
Analyze business impact and exposure to cybersecurity risks, developing mitigation strategies aligned with approved security architectures.
Maintain and enhance documentation for cybersecurity policies, procedures, and controls to support compliance and operational consistency.
Collaborate cross-functionally with IT, operations, and leadership to integrate cybersecurity into all aspects of airport technology and operations.
Provide technical support and backup for infrastructure systems, including servers and networks, as needed.