Information Security Analyst

Information Security Analyst

Position Title:

Information Security Analyst

Job Type: Full time

Department:
Information Security Office, Division:
Information Technology

Classification:
Exempt, Union:
Non-Union

Reports to:

Senior Director Information Security

Placement:
Professional staff, S11

Hiring Range: $70,689 – $79,526

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

The student population at the college is diverse in ethnicity, gender, language, age and background. Joliet Junior College is an AA/EO employer and strongly encourages applications from candidates who would enhance the diversity of its staff.

Position Summary

The Information Security Analyst is responsible for protecting the college’s information systems and data by monitoring, analyzing, and responding to security incidents and threats. This role supports compliance with regulatory requirements (e.g., CIRCIA, HIPAA, GLBA), enhances operational efficiency, and contributes to the continual improvement of security processes and documentation. The analyst will also detect opportunities to develop and maintain security documentation, including knowledge‑base articles, and manage security‑related tickets from stakeholders.

Essential Job Duties And Key Responsibilities

• Incident Management:
  Monitor, triage, and respond to cybersecurity threats and incidents across network, application, identity, and cloud layers.
• Vulnerability Management:
  Participate in vulnerability assessments and penetration testing to identify and remediate security weaknesses.
• Security Operations:
  Manage and maintain security tools (e.g., SIEM, IDS/IPS, vulnerability scanners), ensuring daily monitoring and compliance.
• Facilitate the integration of SOC/Managed Security Services activities with the broader Information Security team, ensuring consistent application of ITIL processes such as Incident Management, Problem Management, and Event Management.
• Identity Management:
  Support Office 365 email account management tasks, including user permissions, credential hand‑offs, mailbox access provisioning, and coordination with identity and access management processes.
• Compliance &
  
  Risk Management:
  
  Assist in legal and regulatory compliance efforts; conduct risk assessments and support audit activities.
• Service Request Management:
  Handle, triage, and manage tier 2 level and up security‑related tickets and requests from stakeholders, ensuring timely resolution and escalation as needed.
• Knowledge Management:
  Detect opportunities to develop, improve, and maintain security documentation, including knowledge‑base articles and process guides.
• Process Improvement:
  Assist with the development and continual improvement of security‑related processes, automation initiatives, and reporting tools.
• Cloud Support:
  Support secure cloud infrastructure through systems auditing and account lifecycle management.
• Collaboration & Training:
  Collaborate with IT and academic departments to ensure secure deployment of new technologies; provide security awareness training to staff and students.
• Reporting:
  Prepare and present reports on security incidents, vulnerabilities, compliance status, and process improvements to leadership.
• Professional Development:
  Stay current with emerging security threats, trends, best practices, and ITIL service management principles.
• Perform related duties as assigned.

Minimum Qualifications

• Bachelor’s degree in Computer Science or a closely related field, OR an Associate’s degree combined with 2 or more years of experience in information security or IT operations.
• Understanding of cybersecurity principles, tools, and compliance frameworks.
• Experience with Microsoft Azure, Active Directory, and security monitoring tools.
• Experience in information security and/or IT risk management with a focus on security performance and reliability.
• Familiarity with multiple risk management concepts, frameworks, and standards (CSC, NIST, ISO, COBIT).
• Excellent analytical, communication, documentation, and collaboration skills.
• Possesses relevant industry certifications such as CEH, CISA, CCET, Network+, Security+, CySa+, or Microsoft SC-900,…