Information Security Analyst Jobs

About The Position

Requirements

• Bachelor's degree in Information Security, Computer Science, or a related field. Degree may be substituted for 5+ years commensurate experience.
• 3+ years of experience in Identity Access Management (IAM) or related cybersecurity area preferred.
• Experience with risk assessment, policy development, and implementation.
• Experience with enterprise systems and applications.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• Minimum of 3 years of relevant US based experience.

Responsibilities

• Review and attest to the accuracy and completeness of rights and roles in enterprise systems and applications. This includes ensuring that only authorized users have access to sensitive data and systems, and that access rights are revoked when employees leave the organization.
• Develop and implement policies and procedures to ensure that access is granted and maintained in a secure and compliant manner. This includes creating policies that define access rights, procedures for granting and revoking access, and training for employees on how to follow the policies.
• Work with business stakeholders to understand their needs and requirements for access to enterprise systems and applications. This includes understanding the business needs for access, and working with stakeholders to develop solutions that meet those needs while still maintaining security.
• Communicate security risks and mitigation strategies to business stakeholders. This includes keeping stakeholders informed of the latest security threats, and explaining how the organization is mitigating those threats.
• Conduct risk assessments to identify and assess the security risks associated with access to enterprise systems and applications. This includes identifying potential threats and vulnerabilities, assessing the likelihood and impact of those threats, and developing mitigation strategies.
• Stay up-to-date on the latest security threats and trends. This includes reading security blogs and articles, attending security conferences, and taking security training courses.
• Conduct training and awareness sessions for employees on security best practices. This includes teaching employees about security risks, how to identify and report suspicious activity, and how to protect their personal information.