IT Security Analyst I-III

Unisource Energy Services • Tucson, AZ

266d

About The Position

Responsible for the design, planning, testing, implementation, and administration of regulatory requirements and industry-wide accepted information security principles, practices, and information systems to ensure the protection of information assets processed, stored, or transmitted at UniSource. Evaluate the effectiveness of information security solutions and processes in place, keeping in mind the state of world events. Monitor for and identify security risks and exposures, determine the causes of security violations, assess, and implement procedures to halt future incidents. Understand and provide assistance to system users relative to information systems security matters. Participates in a team environment that provides cost-effective IT security services to the various business units. Works closely with other areas to insure optimum reliability and cohesiveness.

Requirements

• High school diploma or GED for Level I.
• Effective written and oral communication skills are required plus a willingness to learn in a rapidly changing environment.
• Demonstrated ability to work both independently and as part of a team.
• For Level II: Requires self-direction and the ability to work with vendors on creating statements of work and completing that work.
• Industry certifications (i.e. GSEC or CISSP) or equivalent experience of 3-5 years in an information security or network discipline for Level II.
• For Level III: Requires leadership abilities and mentoring skills.
• Industry certifications (i.e. GSEC or CISSP) or equivalent experience of five or more years in an information security or network discipline for Level III.

Nice To Haves

• Bachelor's degree in management information systems, Computer Science or related discipline is preferred for Level I.
• Two or more years in an IT related discipline is preferred for Level I.
• Assists more experienced administrators on projects and deals with day-to-day support for Level II.
• Individual is considered at full proficiency in the information security field and a leader on the security team for Level III.

Responsibilities

• Responsible for day-to-day security administration of company databases (e.g. Oracle and MSSQL), e-mail applications, key business applications and networks.
• Responsible for provisioning and de-provisioning users.
• Performs security incident response and forensic investigations.
• Evaluates new and emerging security technologies, features, and products to determine their application in the protection of company information assets.
• Performs security analysis, including architecture review, baselines, vulnerability assessments, and risk assessments to proactively identify security risks and exposures.
• Monitors security events across the network and ensures alerting and resolution of security issues and threats.
• Provides anti-virus, spam, and malware administration and management.
• Provides second-level support for the IT Help Desk. Performs 24 x7 support on a rotating basis.
• Ensures change control processes are followed and service levels affected by those changes are maintained.
• Works with internal and external project managers to complete projects and efforts on time.
• Leads or participates in IT projects to provide information security expertise, guidance, or training.
• Works with internal and external auditors to implement technical aspects of regulatory/compliance/privacy controls, such as Sarbanes-Oxley, NERC CIP, HIPAA, and PCI DSS.
• Works with Human Resources or Legal to provide sensitive investigative or litigation hold support.

Benefits

• 401k plan with a generous company match and additional non-discretionary employer contribution.
• Affordable individual and family health insurance plans.
• Tuition assistance.
• Life insurance.
• Long-term disability insurance.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Industry: Utilities
• Education Level: High school or GED