Information Security Analyst

J  o  b    D  e  s  c  r  i  p  t  i  o  n

          Joy                         Care                      Competence                    Respect

Position Summary

The Information Security Analyst performs basic system security administration on designated technology platforms including operating systems, applications, and network devices.  This position serves as a liaison for communications related to information security both with internal colleagues as well as third parties.

Associates Degree in Information Security or related field is required.Bachelor’s Degree in Information Security or related field is preferred.

H.S.

Diploma and three years of relevant experience in information security, cyber security, or other related field may be considered in lieu of degree.

Three (3) years of experience in information security, cyber security or other related IT experience is preferred.

Certified Information Systems Security Professional (CISSP), CompTIA Security+, or other information security/cyber security certification is preferred.

Strong problem solving and trouble shooting skills.Excellent written and verbal communication and interpersonal skills.Ability to be flexible and handle multiple priorities at once.Strong teamwork and collaboration skills.Aptitude for continuous learning of information security topics and technologies.

Researches, plans, installs, configures, troubleshoots, maintains, upgrades, and provides basic support for software systems while complying with all Information & Technology Services (ITS) standards and procedures.Prepares detailed flow charts and diagrams outlining systems capabilities and processes, writes and maintains system documentation, and documents system problems and resolutions for future reference.

Troubleshoots and resolves basic hardware, software, and connectivity problems, including user access and component configuration.

Identifies security vulnerabilities and control weaknesses using industry standard methods.

Performs risk and threat assessment using information security technologies.

Explains business impact of risk assessment results to the data owners.

Correlates security control weaknesses and vulnerabilities to the relevant business functions.Participates in infrastructure projects to develop, plan, and implement specifications for network and distributed system security technologies in support of key information systems.

Prepares information security-related education and awareness materials.

Educates colleagues about information security related topics.

Recommends security control enhancements based on the underlying value of the asset.

Assists with developing plans for reducing vulnerabilities and enhancing security controls.Removes or otherwise mitigates known control weaknesses, such as unnecessary services or applications or redundant user accounts as a means of hardening systems in accordance with security policies and standards.

Audits systems, processes, and logs to evaluate current security state.

Possess the information, skill, and understanding of the work to be performed.  Actively participates in continuing education opportunities and maintains certifications, licensure as appropriate.

Abides by all safety requirements including demonstrating proper hand hygiene and wearing of Personal Protective Equipment (PPE), if applicable. 

Complies with all standards, policies and procedures including dress code, attendance and punctuality.  Attends required in-services and meetings and completes all mandatory competencies by deadline. Commits to keeping all patient, student or colleague information confidential and maintains ongoing communication and collaboration with team members. 

The purpose of this job description is to provide a summary of the major responsibilities performed by colleagues in this position. Colleagues may be requested to perform tasks other than those specifically presented in this job description.  Variances in job duties performed may exist between facilities, and colleagues may perform other related duties as assigned to meet the needs of the organization.

PHYSICAL, MENTAL AND ENVIRONMENTAL REQUIREMENTS

Physical, Mental and Environmental Requirements Category:

Administrative

Standing

X

Walking

X

Sitting

X

Lifting

X

20 lbs.

Carrying

X

20 lbs.

Pushing

X

20 lbs.

Pulling

X

20 lbs.

Climbing

X

Balancing

X

Stooping

X

Kneeling

X

Crouching

X

Crawling

X

Reaching

X

Use of Hands/Dexterity

X

Talking

X

Hearing

X

Eye/Hand/Foot Coordination

X

Extreme Cold

X

Extreme Heat

X

Humid

X

Wet

X

Noise

X

Hazards

X

Temperature Change

X

Atmospheric Conditions

X

Vibration

X

Other