IT Security Analyst

About the position

The IT Security Analyst shall be responsible for essential IT and Security functions, focusing on Security Operations, Technical Expertise, Policy and Compliance, Collaboration and Communication, and Physical Security Responsibilities. This role involves administering and maintaining security tools, monitoring security alerts, and performing thorough incident investigations. The analyst will act as a subject matter expert, advising departments on security best practices, and will be responsible for updating and maintaining security systems to ensure they are current and effective. Additionally, the analyst will enable a vulnerability management program, administer operating systems, develop scripts for automation, and lead IT/Security projects while ensuring compliance with legal requirements and data protection guidelines.

Responsibilities

• Administer and maintain security tools; collaborate with vendors to resolve issues
• Monitor security alerts and reports; perform thorough incident investigations
• Act as a subject matter expert advising departments on security industry best practices
• Updating and maintaining the security systems, ensuring they are current and effective
• Enabling a vulnerability management program, including routine patching and maintenance
• Administer Linux and Windows operating systems, Virtual Private Networks, Local Area Networks, vulnerability scanning, and firewalls
• Develop and maintain scripts to automate data collection and generate reports
• Lead and execute Information Technology/Security projects, ensuring timely delivery and adherence to security standards
• Develop and update security policies and procedures in line with industry best practices and legal requirements
• Facilitating internal and external audits; ensure compliance with data protection guidelines and applicable laws
• Monitoring the activities of employees, visitors, and other personnel to maintain security and protect organizational assets
• Collaborate with Client Services, Risk Management and IT teams on matters related to physical and information security
• Representing the security practices during prospect client meetings and contributing to business continuity planning
• Playing a role in business continuity events
• Maintaining organization's stability and reputation by complying with legal requirements
• Monitor premises to maintain security and prevent unauthorized access
• Secure physical assets and ensure the safety of personnel
• Produce detailed reports on security observations, incidents, and surveillance activities
• Triaging and route security event tickets; monitor and respond to security events

Requirements

• Bachelor's degree (BS) in Computer Science, Information Technology, Cybersecurity, or a related field
• Minimum of 2 years of experience in information security or a related IT role; 4-6 years related experience and/or training preferred
• Strong understanding of TCP/IP networking and networking security principles
• Proficiency with security tools and technologies, including firewalls, intrusion detection/prevention systems, and vulnerability scanners
• Demonstrate ability to work collaboratively across teams and build consensus
• Excellent communication skills, both written and verbal, with the ability to convey complex security concepts to non-technical stakeholders
• Experience with scripting languages (e.g., Python, PowerShell) for automation and data analysis
• Strong analytical and problem-solving abilities; capable of managing multiple deadlines and priorities

Nice-to-haves

• Relevant certifications such as CompTIA Security+, Certified Information Security Systems Professional (CISSP) or Systems Security Certified Practitioner (SSCP) are highly desirable.