IT Cybersecurity Analyst II

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Info Technology Evans, GA, US

Club Car boasts a 60+ year history of industry-leading innovation and design, initially focused on golf cars and then expanding to commercial utility vehicles and personal-use transportation.

The Cybersecurity Analyst II plays a critical role in protecting the organization’s information systems by maintaining, monitoring, and continuously improving cybersecurity operations and controls. This position is responsible for day-to-day security operations, including Identity and Access Management (IAM), Privileged Access Management (PAM), Endpoint Detection and Response (EDR), Security Operations Center (SOC) functions, IT General Controls (ITGC), vulnerability management, compliance support, and security monitoring activities.

The ideal candidate possesses a strong understanding of cybersecurity frameworks, security best practices, and hands-on experience with security technologies, and operates with a high degree of independence while partnering with IT teams, managed security service providers, and cybersecurity leadership to reduce organizational risk.

Identity and Access Management (IAM):

• Manage and support IAM tools and systems, ensuring secure authentication and authorization mechanisms are in place.
• Oversee the provisioning and de-provisioning of user accounts, ensuring appropriate access levels based on the principle of least privilege.
• Monitor and audit user access logs, ensuring compliance with security policies.
• Administer, support, and enforce Multi-Factor Authentication (MFA) and Single Sign-On (SSO) solutions.
• Collaborate with HR, IT, and other departments to ensure role-based access controls (RBAC) are in place and up to date.

2. Privileged Access Management (PAM):

• Administer, support, and continuously improve PAM solutions to ensure secure management of privileged accounts.
• Perform periodic reviews and audits of privileged accounts, ensuring access is limited and monitored.
• Manage and automate the rotation of privileged credentials, ensuring secure password management.
• Monitor privileged sessions in real-time and respond to potential security threats associated with misuse of privileged accounts.
• Maintain the inventory of all privileged accounts and provide continuous improvement recommendations.

3. Endpoint Detection and Response (EDR):

• Administer, configure, and maintain EDR solutions across corporate endpoints.
• Continuously monitor and analyze EDR alerts, logs, and endpoint activity; investigate security events to support threat detection, incident response activities, and root cause analysis.
• Develop, tune, and refine endpoint detection rules to improve visibility into suspicious or malicious activity.
• Collaborate with managed security providers and IT teams to ensure timely investigation and remediation of security events identified through EDR tools.
• Maintain EDR platform health, agent coverage and configuration compliance across enterprise endpoints.
• Support endpoint security initiatives, including hardening, patch validation, and control effectiveness reviews.

4. Security Operations Center (SOC) Tasks:

• Collaborate with the SOC to identify, investigate, and respond to cybersecurity threats and incidents.
• Monitor security alerts and events from SIEM and other monitoring tools.
• Conduct incident triage and escape potential incidents based on established procedures.
• Support incident investigations, containment, eradication, recovery, and post-incident reviews under the direction of cybersecurity leadership.
• Maintain up-to-date documentation of security incidents, threat intelligence, and mitigation efforts.

5. IT General Controls (ITGC) Implementation:

• Assist in the design, implementation, and continuous improvement of IT General Controls (ITGCs), ensuring alignment with industry best practices and compliance requirements (e.g., SOX, HIPAA, GDPR).
• Perform periodic reviews and testing of ITGCs to evaluate effectiveness and support audit…