IT Support and Security Specialist

Position Overview: We are seeking a dedicated and knowledgeable IT Support and Security Specialist to join our team. In this role, you will be responsible for providing technical support to end-users, troubleshooting hardware and software issues, implementing and maintaining security measures, and ensuring the integrity and availability of our IT systems. The ideal candidate will be someone with experience working for a small or start-up company with a wide range of IT experience and excited to take on and learn many facets of IT. Your efforts will be crucial in protecting our organization's data and systems from cyber threats, ensuring compliance with security standards, and maintaining a secure and efficient IT environment.

Responsibilities:

• Collect and catalog evidence for compliance audits. Assist in developing and enforcing IT security policies and procedures.
• Provide technical support to end-users, diagnosing and troubleshooting hardware and software issues, resolving network connectivity problems, and assisting with system access and permissions. Respond to IT support tickets and inquiries in a timely and professional manner.
• Create and manage user accounts and permissions following established processes and procedures
• Determine deviations from standards, policies, or contractual terms and conditions. 
• Maintain and assist in application and system documentation by updating written procedures
• Collaborate on and escalate issues with senior IT staff
• Conduct cybersecurity risk assessments on vendors to identify security deficiencies of the vendors security posture, utilizing passive traffic analysis techniques with commercially available technology and open-source tools. 
• Utilize Open-Source Intelligence (OSINT) platforms and threat intelligence software to understand potential threat of breach to vendor and historical security incidents to communicate basic recommendations of compensating controls. 
• Apply industry best practice methodology to determine the impact of a realized incident to the organizations data/infrastructure of the identified vulnerabilities and develops and/or recommends appropriate mitigation countermeasures to remediate or mitigate risk to the organization.
• Administer user accounts, permissions, and access rights across various systems. Maintain user directories and ensure compliance with IT policies and procedures.
• Assist in monitoring implemented security measures to protect systems from cyber threats, including firewalls, antivirus software, and intrusion detection systems.
• Track and manage the organization's IT assets, including hardware and software. Ensure all hardware and software assets are up to date, licensed, and functioning properly. Coordinate the lifecycle management of IT assets, including procurement, deployment, maintenance, and decommissioning. Maintain accurate records of all IT assets and ensure compliance with asset management policies.
• Stay Current with Technology Trends: Keep abreast of emerging technologies, industry best practices, and IT security trends. Continuously enhance technical knowledge and skills through self-learning, training, and certifications.
• Other duties as assigned.

Required Qualifications

• Bachelor's Degree in IT or related field
• 3 years of general IT experience
• Strong technical troubleshooting and problem-solving skills
• Knowledge of cybersecurity principles and practices (SOC2, ISO 27001 preferred)
• Experience with security monitoring tools and technologies
• Good communication and interpersonal skills
• Ability to work independently and as part of a team, and manage multiple tasks simultaneously
• Flexibility to adapt to changing priorities and work in a fast-paced environment

Preferred Qualifications

• Experience working in a start up or small company with a wide experience
• Familiarity with network and system administration