Information Security Analyst

Information Security Analyst

• Examine alert entries provided by security providers (Firewall, SIEM, Cloud Services, Endpoint protection tool)
• Install, make functional, define processes for the SIEM. Work with the vendor to have it operational
• Report any unusual activity depending on their severity
• Finetune all sensors from monitoring devices
• Update operation security procedures
• Follow up on every open security incident with the assigned technical team/person
• Create automated report based on defined metrics to perform gap analysis
• Help enforce new and updated policies and report all non-compliant issues found
• Monitor Administrator access to systems and make recommendations to limit risk exposure
• Read all messages in the departmental mailbox. Alert and triage any incidents
• Read all REN-ISAC feeds for alerts any incidents that may affect YU. Learning from other schools experiences
• Analyze every intake form to insert new systems into the environment
• Provide guidance as needed to IT and Business partners to ensure secure implementation of processes, systems and services
• General Counsel liaison with ITS
• Organize and conduct training for all employees regarding University security and information safeguarding
• Work with third party vendors on information security incidents
• Assist on all departmental duties and responsibilities

• Bachelor's Degree in Computer Science or related area
• 4+ years data security experience as analyst or higher
• 4+ years IT security compliance experience

REQUIRED

• Solid understanding of all Security Services and how to enable them
• Solid understanding and hands-on experience of networking systems and firewalls
• Solid understanding of VPN, IDS/IPS, Endpoint protection, Vulnerability Scan, Encryption algorithms and standards
• Knowledge and understanding of one of the major Information Security Frameworks (NIST, ISO2700x, SANS)
• Proficient in Microsoft Office Suite (Word, Excel, PowerPoint)
• Hands-on experience of Windows and Unix operating system fundamentals
• Excellent written/verbal communication skills
• Strong interpersonal, analytical, problem-solving, prioritization, organizational skills and attention to detail
• Being able to work with a multi-departmental team
• Ability to handle confidential information responsibly

PREFERRED

• Information Security certification a plus: CISSP, CISM, SANS, etc.
• Knowledge of law and regulations surrounding the educational sector (FERPA and GLBA) is a plus
• Knowledge of Business Continuity and Disaster Recovery is a plus
• Programming experience is a plus
• Strong analytical skills to determine the key pieces of information required to make informed decisions. The ability to utilize data analysis tools such as MS Excel (e.g. pivot tables, etc.)
• Project management experience/knowledge, with ability to drive projects to successful completion
• Knowledge of Active Directory