Sr. Security Analyst

Overview

Pay range: $37.11 - 47.11

Plus Health, Dental, Vision, Short Term/Long Term Disability, and Group Life pending eligibility.

Responsible for analyzing the information security environment and assisting with the development of security measures to safeguard information against accidental or unauthorized modification, destruction, or disclosure. Work with management, development personnel, risk staff, auditors, facilities, and security department personnel to identify and implement security plans to ensure that all information assets are appropriately safeguarded, including software applications, hardware, telecommunications, and computer installations.

Determine methods of implementing and enforcing security policies. Maintain a high level of user trust and confidence in the group’s knowledge of and concern for security of systems while working on multiple network security projects.

• Lead development of information security technology tasks and projects.
• Communicate effectively with all levels of management.
• Generate, coordinate, and maintain project plans; develop cost analysis estimates for information security tasks and projects; keep project plans updated as required.
• Interact with customers as required by project objectives; understand business processes as they relate to information security.
• Define, redesign, and document security processes and procedures; coordinate the development and delivery of information security awareness.
• Work with resource owners to determine appropriate security policies for securable resources; consult with IT staff to evaluate, select, install, and configure hardware and software systems that provide security functions.
• Assist resource owners in understanding and responding to security failures/problems; assist in determining causes of security-related events and identifying potential events.
• Communicate normal and exception processing of security authorization requests and/or breaches to appropriate personnel.
• Assist with documentation of security policies; maintain resource classification; present on security status, project status, and security training to management and IT personnel as needed.
• Proactively protect the integrity, confidentiality, and availability of information in the custody of or processed by the company.
• Consult with business units to ensure realistic enforcement mechanisms; aid in reviewing security policies and auditing logs.
• Assist in developing and maintaining disaster recovery plans, processes, and procedures.
• Research, evaluate, design, test, recommend, and plan implementation of new or improved information security technology and related security measures.
• Train information owners in the implementation of necessary computer security controls.
• May perform other duties as assigned.

• Deep understanding of NIST 800-171 and NIST 800-53 controls and compliance requirements.
• Prior experience with U.S. Government IT compliance requirements, in particular Cybersecurity Maturity Model Certification (CMMC).
• Strong understanding of government information security regulations, control frameworks, and required compliance documentation; experience in developing and maintaining System Security Plans (SSPs).
• Strong written and verbal communication skills across multiple channels and organizational levels; ability to research and interpret regulatory requirements and provide concise summaries to business partners and senior leadership; skilled in drafting and interpreting policies and procedures.
• Practical audit and control testing experience with the ability to manage projects and drive actions across functional areas.

6+ years experience required. BS/BA degree with three (3) or more years of relevant experience in related field or any combination or equivalent education, experience, and formal training that allows the candidate to meet the requirements of the job. Ideal candidate will possess all of the above plus airline industry experience, broad range of exposure to business planning, systems analysis, and/or application development.

Experience in data administration and security methods, plus experience in various database…