IT Security and Systems Analyst

Texas Windstorm Insurance Association•Austin, TX

About The Position

The IT Security and Systems Analyst serves as a liaison between business departments, Information Technology, and Information Security to help ensure technology solutions support business needs and organizational priorities. This position defines and documents business and system requirements, supports Guidewire Insurance Suite and other enterprise applications, and assists with cybersecurity governance, risk management, compliance, and audit activities.

Requirements

Bachelor’s degree in Business, Information Systems, Computer Science, Cybersecurity, or a related field.
Five years of business or systems analysis experience supporting enterprise applications or business processes.
Experience gathering and documenting business, functional, and system requirements.
Experience supporting software development lifecycle and testing activities.
Experience working directly with business stakeholders and technical teams.
An equivalent combination of education and experience may be substituted for the stated requirements.
Willingness to obtain an approved entry-level cybersecurity certification within 12 to 18 months of hire and participate in ongoing security training.
Knowledge of business analysis, systems analysis, requirements gathering, and process-mapping practices.
Knowledge of software development lifecycle activities and testing practices.
Understanding of system integrations, APIs, application architecture, and related technical concepts.
Knowledge of Agile, Scrum, or similar delivery methodologies.
General knowledge of cybersecurity governance, risk management, internal controls, and compliance practices.
Strong analytical, critical-thinking, and problem-solving skills.
Ability to translate business needs into clear functional and technical requirements.
Ability to facilitate meetings and communicate technical information to nontechnical audiences.
Ability to build effective working relationships across business and technical teams.
Ability to organize and prioritize multiple assignments, projects, and deadlines.
Strong written communication, documentation, and attention-to-detail skills.
Proficiency with Microsoft 365, Visio, and collaboration or work-management tools.

Nice To Haves

Experience with Guidewire PolicyCenter, ClaimCenter, BillingCenter, or other Guidewire applications.
Experience supporting Guidewire InsuranceSuite implementations, upgrades, or enhancements.
Knowledge of property and casualty insurance operations, including underwriting, policy administration, claims, billing, or customer service.
Experience with Rally, Jira, Azure DevOps, or a similar work-management platform.
Familiarity with SQL and data-analysis tools.
Experience supporting regulatory compliance, internal or external audits, cybersecurity, or risk-management activities.
ISC2 Certified in Cybersecurity or another recognized cybersecurity certification.

Responsibilities

Gathers, analyzes, and documents business and system requirements, user stories, process flows, and acceptance criteria.
Facilitates requirements workshops, solution-design discussions, and process-improvement activities.
Serves as a liaison between business stakeholders, application teams, technical teams, vendors, and Information Security.
Supports Guidewire InsuranceSuite and other enterprise applications by evaluating system needs, enhancements, defects, and production issues.
Supports user acceptance testing, defect triage, production releases, and post-implementation activities.
Assists with prioritizing enhancement requests and maintaining technology-related backlogs.
Analyzes application metrics and operational data to identify opportunities to improve efficiency and effectiveness.
Supports the Information Security Officer in maintaining and improving the organization’s cybersecurity program.
Assists with security risk assessments, control reviews, vulnerability management, and remediation tracking.
Supports internal and external audits by gathering documentation, coordinating responses, and monitoring corrective actions.
Develops and maintains security policies, standards, procedures, and supporting documentation.
Assists with vendor security reviews, third-party risk assessments, and identity and access management reviews.
Supports security awareness, regulatory compliance, and cybersecurity governance activities.
Participates in incident response activities, documentation, and post-incident reviews.
Monitors emerging cybersecurity risks and recommends improvements to security controls and processes.