Senior Information Security Analyst

National Education Association

1d•Onsite

About The Position

The position supports the NEA’s strategic objective to focus the energy and resources of its 3 million members toward the promotion of public education by providing high level safety of Information Technology assets and to protect systems from intentional or inadvertent access, harm, or destruction. The primary responsibilities include assisting in the development and implementation of security standards, procedures and guidelines for multiple platforms and diverse systems environment. The incumbent updates, maintains, and documents security controls. The incumbent works collaboratively with departmental teams to ensure that new and existing infrastructure, software, hardware, architecture, and/or applications are developed and deployed in a secure manner. In addition, the incumbent is responsible for assisting in the development and management of security for one or more IT functional areas across the enterprise; implementing and maintaining security technology solutions, which may include technology for encryption, firewalls, authorization, authentication, intrusion detection, and gateway security controls; developing, implementing, and ensuring documentation of security standards, procedures, processes, guideline and policies, such as user authentication rules, security breach resolution procedures, security auditing procedures, and use of firewalls and encryption routines; and ensuring requirements and deliverables are clearly defined. Other duties include: analyzing and preparing status reports on security matters; monitoring and recommending solutions for correcting issues related to security technology performance and capabilities. To carry out responsibilities, the incumbent uses a personal computer, associated software, and other office technology.

Requirements

Bachelor degree in Computer Science or a related discipline or an equivalent combination of education and experience from which comparable knowledge and skills may be acquired.
Five years experience in the security aspects relating to multiple platforms, operating systems, software, communications and network protocols.
Experience with networking and security technologies such as IPSEC (Internet Security Protocol), VPN (Virtual Private Network), routers, switches, firewalls, intrusion detection and prevention, data leakage, WAF (Web Application Firewall).
Extensive knowledge of business operations.
Experience in identifying underlying principles, reasons, or facts of information or data into separate parts.
Demonstrated experience with information security and compliance, such as PCI, SOX, and HIPAA requirements for information systems and industry best practices such as ISO17799/27011, National Institute of Standards and Technology (NIST).
Demonstrated experience with compiling, coding, categorizing, calculating, tabulating, auditing, or verifying information or data.
Demonstrated experience in monitoring and reviewing information from materials, events, or the environment, to detect or assess problems.
Broad knowledge of on-line systems, access methodologies, and security procedures.
Successful references.

Nice To Haves

Knowledge of industry best practice standards pertaining to Information Security and data privacy.
Significant experience in collaborating with others for purposes of identifying, defining and solving problems.
Experience understanding the implications of new information for both current and future problem-solving and decision-making.
Effective interpersonal and customer service skills to interact with all levels of staff.
Ability to work independently and collaboratively with team members (internal and external to the organization).
Familiarity with business objectives and strategies.
Ability to analyze information using logic to address work-related issues and problems.

Responsibilities

Assisting in the development and implementation of security standards, procedures and guidelines for multiple platforms and diverse systems environment.
Updating, maintaining, and documenting security controls.
Working collaboratively with departmental teams to ensure that new and existing infrastructure, software, hardware, architecture, and/or applications are developed and deployed in a secure manner.
Assisting in the development and management of security for one or more IT functional areas across the enterprise.
Implementing and maintaining security technology solutions, which may include technology for encryption, firewalls, authorization, authentication, intrusion detection, and gateway security controls.
Developing, implementing, and ensuring documentation of security standards, procedures, processes, guideline and policies, such as user authentication rules, security breach resolution procedures, security auditing procedures, and use of firewalls and encryption routines.
Ensuring requirements and deliverables are clearly defined.
Analyzing and preparing status reports on security matters.
Monitoring and recommending solutions for correcting issues related to security technology performance and capabilities.