Information Security Analyst

Job Description

Duties and Responsibilities

Essential Duties and Responsibilities

The Information Security Analyst, under general direction, ensures that appropriate Information Technology (IT) security policies, standards, procedures, and compliance requirements of Laredo College are met. Works with other departments to ensure network security, access control, physical security, application development, and management meet institution, Federal, State, and industry regulatory requirements.

Characteristic Duties and Responsibilities

1. Conducts security reviews to ensure that information resources comply with institutional, Federal, State, and industry regulatory requirements.
2. Investigates and respond to security alerts generated by information security systems.
3. Performs technical analysis with a variety of Information Security Tools and techniques to identify, analyze, and resolve security threats, vulnerabilities, events, and incidents.
4. Coordinates with internal and external stakeholders to remediate or mitigate security vulnerabilities, events, and incidents.
5. Assists with the conducting of periodic audits of internal data security controls to validate effectiveness, identify risks, and promote continuous improvement.
6. Provides administrative support for the Security awareness program and other operational security activities.
7. Periodically reviews security audit logs.
8. Evaluates compliance with established security policies and standards.
9. Conducts relevant research, data analysis, and develop reports.
10. Participates in team problem-solving efforts and offers ideas to solve issues.
11. Uses critical thinking to bring together information from multiple sources to determine if a threat is present.

Qualifications/Certifications/Licenses/Skills

NOTICE: Required Documents

To be considered for this position, you are required to upload your resume and unofficial transcript(s). If recommended for this position an official transcript(s) will be required. In addition, if a license or certificate is required for this position, upload proof of your current license/certificate.

Required:

• Associate in Applied Science Degree in a computer-related field with emphasis in computer networks or information security.
• Three years of related experience in IT, including at least one year in information security.

Preferred:

• Bachelors degree in Computer Science, Management Information Systems, or Information Security
• Certification such as Security+, CISA, Associate CISSP, or equivalent

Knowledge, Skills and Abilities

• Knowledge of information security principles and practices.
• Understanding of data security standards and protocols.
• Knowledge of technical support processes and protocol.
• Knowledge of NIST, TCF, or other security frameworks.

Additional Information

Introductory Review Period:
All hires are subject to a 90 day introductory review period.

Supervision Exercised
Not Applicable

Supervision Received
Associate Vice President of Information Technology

Physical Requirements
While performing the duties of this job, the employee is regularly required to sit.
The employee is occasionally required to stand, walk, stoop, kneel, or crouch.
The employee must occasionally lift and/or move items weighing up to 50 pounds.
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Work Environment
Work is performed in a standard office environment.
Work inside a well-lighted and air-conditioned area most of the time.
The noise level in the work environment is usually quiet to moderate.

Safety
Required to work safely and follow safety rules.
Report unsafe working conditions and behavior.
Take reasonable and prudent actions to prevent others from engaging in unsafe practices.

Special Conditions
Immediate supervisor may assign other duties.
May be required to work outside regular working hours, as needed.
May be required to work at a different college work site or campus as needed.