What are the responsibilities and job description for the IT Security Analyst position at Internal Career Site?
Overview
Xanterra Travel Collection is a growing, exceptional group of travel and leisure businesses operating across the globe. Our properties/services combine dramatic settings and landmark buildings with exceptional service to deliver unforgettable experiences. We are inspired by our guests, our environment, and each other. Headquartered in our beautiful new Greenwood Village, Colorado offices, we strive to create a collaborative experience and a transformational journey for our valued team members. We have a high commitment to sustainability, growth and are seeking driven, innovative individuals who value offerings in career development and professional advancement. Our Travel Collection includes lodging, food and beverage, Windstar Cruises, short-line railroad, and adventure travel companies. Please visit xanterra.com for more information on the company and its environmental initiatives.
Xanterra Travel Collection believes people are our most valuable resource. Our success depends upon highly motivated, committed, and skilled people who share our vision and work together to attain it, while our work environment encourages responsibility for personal growth and promotes pride in each employee. We foster a culture that promotes fairness and diversity, and provides equal opportunities throughout the organization.
We are seeking a detail-oriented and driven professional to join our team as an Information Security Analyst. This role is responsible for working with the Director of Information Security and members of the Xanterra IT departments to ensure that proper security requirements are implemented and to maintain Xanterra’s PCI compliance. Your efforts will be crucial in protecting Xanterra from evolving cyber threats and maintaining the integrity of our technology environment.
Responsibilities
• Perform monthly internal vulnerability scans, research and document remediation steps, disseminate to application/server owners in the field, and track to completion.• Perform quarterly external vulnerability scans, track remediation of failures to completion, and deliver passing scans to acquirers.• Perform daily alert reviews and research of all reported potential attempts to breach Xanterra network’s security and/or access confidential information.• Monitor and respond to alerts received from Information Security tools including but not limited to system and endpoint health, updates, etc.• Develop and maintain endpoint protection application control, device control, and data loss prevention policies.• React quickly to information security threats, such as computer viruses, hackers, analysis of application security prior to release, etc., to ensure applications meet defined goals.• Stay updated and informed about security tools and technologies and the ever-changing security landscape.• Assist with PCI assessments and work with local IT and external QSA (Qualified Security Assessor) to address any gaps. Assessments require travel to Xanterra properties throughout the year.• Perform scans against file systems to identify non-compliant storage of PCI data.• Recommend improvements related to IT security standards, policies, and procedures.• Promote and communicate Information Security awareness.• Support network and infrastructure teams related to Information Security best practices.• Serve in an on-call capacity for after-hours/non-business hours support when assigned or as needed to remediate Information Security incidents.• Assist IT operations staff, corporate IT employees, property-level IT employees, and the user community as a whole in resolving technical issues related to Information Security.• Perform other duties as assigned.
Qualifications
• Must possess 2 years of related IT experience in dealing with technology/data security.
• Bachelor’s degree in Information Technology or Business Administration with a concentration in Information Technology or Information Security.• Prior experience with Payment Card Industry compliance requirements or any other compliance framework such as NIST, ISO, HIPPA or SOC.• Significant work experience can substitute for formal education.• Strong understanding of security technologies, including firewalls, NGAV/EDR/MDR platforms, email security systems, SIEM tools, and Identity & Access Management solutions.• Strong foundation in basic IT principles around storage, networking, endpoints/servers, and Active Directory.• Experience writing security policies and procedures preferred but not required.
• Excellent communication skills both verbal and written.• Strong analytical skills including the ability to plan complex system-related projects and problem solve.• Knowledge of the basic principles of Information Security and Risk Management.• Proficiency in Microsoft Office suite of products.• Ability to multitask and prioritize work.
COMPENSATION: The salary range for this position is $80,000.00 - $90,000.00 based on experience.
BENEFITS: For full-time employees, Xanterra offers a comprehensive benefits package including: Medical, Dental & Vision; HSA & FSA; Life & Disability; Accident, Hospital & Critical Illness; Pet Insurance; PTO and paid Holidays; 401(k) with Company Match; Employee Assistance Plan; Education Assistance; RTD-Denver transit pass for in-office employees, and Employee Discounts & Travel Deals.
EEO: Xanterra is committed to a diverse and inclusive workplace. We are an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, pregnancy, genetic information, protected veteran status, or any other legally protected status.
Salary : $80,000 - $90,000
