Senior Analyst, Cyber Security

NIGHTINGALE EDUCATION LLC SOLE MB•Salt Lake City, UT

2d•Onsite

About The Position

The Senior Analyst, Cybersecurity supports Nightingale College’s security operations, vulnerability management, vendor risk management, and access governance activities. This role monitors security events, coordinates investigations and remediation, performs vendor security assessments, and helps mature information security processes, reporting, policies, and controls.

Requirements

Bachelor’s degree in Computer Science, Information Security, Information Technology, Cybersecurity, Engineering, or related field preferred; equivalent experience may be considered.
5+ years of experience in cybersecurity, information technology, security operations, vulnerability management, vendor risk, access governance, or related technical risk functions preferred.
Experience with identity and collaboration platforms, endpoint/security tools, vulnerability management tools, ticketing systems, and vendor security documentation preferred.
Working knowledge of incident response, vulnerability remediation, third-party risk management, MFA/SSO, access controls, encryption, NIST CSF, SOC 2 reports, ISO 27001 certifications, FERPA, and GLBA concepts.
Strong documentation, communication, analytical, stakeholder coordination, and follow-through skills.

Responsibilities

Monitor, triage, document, and escalate security alerts, phishing reports, suspected account compromise, malicious email, suspicious forwarding rules, and endpoint security events.
Coordinate with managed detection and response, secure access, identity and collaboration, and IT teams to investigate alerts and complete containment or remediation actions such as password resets, session revocation, ticket follow-up, and evidence collection.
Operate vulnerability management workflows using a vulnerability management tool and related endpoint data, including recurring reporting, prioritization, remediation coordination, and security stack coverage review.
Perform third-party risk assessments for new and existing vendors, including review of SOC 2 reports, HECVAT responses, ISO certifications, bridge letters, security questionnaires, access controls, SSO/MFA, encryption, and data protection practices.
Prepare vendor assessment summaries, identify risks and follow-up items, maintain assessment documentation, and support vendor inventory, reassessment, and reporting processes.
Support access governance, privileged access reviews, local administrator reviews, policy/procedure updates, SLA/KPI development, and security process improvement.
Provide security guidance to IT and business stakeholders and support security awareness or collaborator communications when needed.
Leverage approved AI-enabled tools and automation technologies to accelerate analysis, summarize security documentation, improve assessment workflows, generate reports, and support operational decision-making while maintaining appropriate security and privacy controls.
Identify repetitive or manual security processes and implement automation solutions that improve scalability, consistency, and operational effectiveness.
Create dashboards, reports, and data analysis workflows that provide actionable security metrics, trends, and performance insights.