Security Analyst

JOB DESCRIPTION SUMMARY:

The Security Analyst is an information security practitioner who contributes expertise and assistance during consulting engagements and delivers services to the firm’s clients under service agreements. The Security Analyst works under general supervision and is expected to have a good working knowledge of common information security regulations, frameworks, standards, and associated business best practices for assigned areas of specialization. As a representative of the firm, the Security Analyst is expected to maintain a high degree of professionalism and integrity.

PRIMARY RESPONSIBILITIES

· Review and write policies, processes and procedures relating to information security and information technology governance

· Design and test information security controls including aligning controls with regulatory requirements and recognized standards, and collecting evidence of control effectiveness

· Configure and administer information security systems and tools

· Create and maintain documentation, guidelines, procedures, and templates

· Create training content, CBT courses, and lead security awareness training sessions

· Create and run simulated phishing campaigns

· Perform user access and activity reviews

· Define and document SoD matrices and IGA/IAM requirements

· Maintain risk registers and risk documentation

· Perform vulnerability scans and write assessment reports and recommendations

· Respond to security incidents and assist with investigations and remediation activities

· Assist consultants with consulting engagement assignments as needed

· Execute other duties as assigned

EDUCATION AND EXPERINECE

· Associate’s degree in information systems, computer science, data analytics, business administration, or similar field, bachelor’s degree preferred.

· Four years of relevant experience or two years of relevant experience with a bachelor’s degree

· Experience assessing information technology risks and compliance with information technology regulations and frameworks

· Experience creating information security training content and leading training presentations

· Experience writing policies, processes, and procedures

· Experience designing and testing information security controls

· Experience responding to, and investigating, information security incidents

· Experience administering Jira Service Management is preferred

· Security , CISSP, or other information security certifications preferred

KNOWLEDGE, SKILLS, and ABILITIES

· A high degree of professionalism and integrity

· Strong interpersonal skills

· Strong written and verbal communication skills

· Strong ability to navigate changing situations and adapt to different environments and people

· Strong knowledge of information security concepts and practices

· Strong ability to work independently and be self-driven

· Strong desire and ability to learn new skills and concepts

· Good knowledge of risk management concepts and practices

· Good knowledge of information security regulations

· Good knowledge of information security frameworks and standards

· Good ability to analyze situations, process information, and communicate with stakeholders

· Good analytical and problem-solving skills

· Good knowledge of computer systems and networking

· Good knowledge of common information technology protocols and systems

· Good knowledge of vulnerability management

· Good knowledge of Identity and Access Management (IAM)

· Comfortable working alone and as part of a team, in person, over the phone, and on camera during virtual meetings

· Able to lift and carry up to 40 pounds of computer equipment and boxes

· Able to work after-hours when needed for emergencies or to meet deadlines

ADDITIONAL REQUIREMENTS

· Live in or around the Des Moines, IA metropolitan area

· A safe, secure, and private place to work at home (for remote work option)

· A reliable home internet connection (for remote work option)

· A personal smartphone for business use including use of an authenticator app and optional apps for accessing company and/or client systems as needed

· Able to pass a criminal background check

· Be in good financial standing with no pending or recent bankruptcies

· A professional wardrobe to support compliance with firm dress code

· A valid driver’s license and reliable transportation

Job Types: Full-time, Part-time

Pay: $20.00 - $30.00 per hour

Benefits:

• Paid time off

Schedule:

• Day shift

Application Question(s):

• Do you have at least two years of information security experience?

Education:

• Associate (Preferred)

Ability to Commute:

• Urbandale, IA 50322 (Required)

Ability to Relocate:

• Urbandale, IA 50322: Relocate before starting work (Required)

Work Location: In person

Salary : $20 - $30