IT Security Analyst

IT Security Analyst 2

Contract 12 Months

Remote

Responsibilities

• Assist in the preparation and implementation of the NIST readiness project, ensuring alignment with NIST frameworks and guidelines to improve the organizations security posture.
• Collaborate in developing and executing a comprehensive strategy to prepare the university for security audits and regulatory requirements, with a particular focus on the Cybersecurity Maturity Model Certification (CMMC).
• Support the assessment and implementation of security controls in accordance with NIST standards, assisting in identifying gaps and recommending corrective actions.
• Develop and deliver an awareness and training program aligned with NIST to educate the organization.
• Collaborate in the review and update of security policies and procedures to ensure they meet NIST requirements and reflect best practices in cybersecurity.
• Support the monitoring of security controls and risk management practices, regularly evaluating the eectiveness of existing security measures.
• Help prepare and maintain documentation related to security policies, procedures, and compliance eorts, including risk assessments and operational reports.
• Collaborate with cross-functional teams, including IT, Finance, Human Resources, and Legal, to integrate information security into the organization's overall risk management program.
• Keep abreast of industry trends, emerging threats, and evolving regulatory requirements to inform security practices and compliance strategies.
• Perform any other related duties assigned to support the organization's information security program.

Qualications

• Experience in information security, risk management, and compliance.
• Knowledge of industry standards and regulations, particularly NIST & HIPAA.
• Strong analytical and problem-solving skills, with the ability to identify and assess security risks.
• Exposure to security audits, risk assessments, or vulnerability assessments.
• Knowledge of security technologies such as encryption, firewalls, intrusion detection systems, and SIEMs.
• Experience with working as part of a team in cybersecurity, information security, assurance or related fields.
• Ability to express complicated, highly technical information using accessible language, proficiently in English, to a wide variety of audiences with varying degrees of technical savviness.
• Ability to stay up-to-date with the latest security threats, technologies, and industry regulations.

Nice to Have

• Knowledge of ISO 27001 and PCI DSS.
• Security+ or other professional cybersecurity certifications.
• Proficiency in setting up and managing a learning management system (LMS), including course creation and configuration
• Prior work in a highly-regulated industry or higher education.