Analyst II - Information Security

## Analyst II - Information Security Apply locations:
Memphis, TNtime type:
Full time posted on:
Posted Yesterday job requisition :
R0011077#
**** At ALSAC you do more than make a living; you make a difference.****##
*** We like people who are different...because we’re different, too. As one of the world’s most iconic and respected nonprofits, we know what it’s like to stand out. That’s why we’re looking r background, perspective, and desire to make an impact set you apart. As we work to help St. Jude cure childhood cancer, we're calling on the game-changers, innovators and visionaries to join our family.

Not just for the kids of St. Jude, but also for you. Because at ALSAC, we develop and celebrate our employees. So, bring your whole, authentic self and become part of our shared mission:
Finding cures. Saving children.***##

Job Description The Information Security Analyst is responsible for supporting the development, implementation, and continuous improvement of the enterprise information security program. This role partners across Information Technology and business teams to protect organizational systems, applications, networks, and data from evolving cybersecurity threats.

The analyst contributes to key cybersecurity functions including security operations, vulnerability management, security governance, incident response, identity and access management, risk assessment, and application security. This position provides technical analysis, consultation, reporting, and recommendations to strengthen the organization's security posture while supporting strategic business objectives.

This role offers broad exposure to multiple cybersecurity domains and provides opportunities to work with a diverse set of security technologies, enterprise initiatives, and cross-functional stakeholders.### What You'll Do
* Partner with Information Security, Infrastructure, and Application Development teams to strengthen enterprise security controls and capabilities.
* Participate in security operations activities, including monitoring, investigation, and response to potential security incidents.
* Conduct vulnerability assessments, analyze findings, and support remediation efforts across technology environments.
* Assist in the development, implementation, and maintenance of security policies, standards, procedures, and response plans.
* Perform information security risk assessments and provide recommendations to reduce organizational risk.
* Support identity and access management processes, access reviews, and privilege management initiatives.
* Validate application security testing results and collaborate with development teams to promote secure coding practices.
* Evaluate emerging cybersecurity threats, vulnerabilities, and industry trends to recommend appropriate safeguards and mitigation strategies.
* Provide security consultation and guidance to systems administrators, technology teams, and business stakeholders.
* Develop meaningful security metrics, dashboards, and reports to communicate risk and program effectiveness to leadership.
* Participate in enterprise security projects, audits, compliance initiatives, and continuous improvement efforts.
* Help educate and train employees on cybersecurity awareness and security best practices.### Why This Role is Unique
* Work across nearly every area of Information Security, gaining exposure to multiple cybersecurity disciplines.
* Collaborate with infrastructure, cloud, networking, identity, and application development teams.
* Contribute to enterprise-wide security initiatives that directly impact organizational risk and resilience.
* Gain hands-on experience with security technologies, investigations, risk management, and governance activities.
* Join a team that values continuous learning, innovation, and professional development.## Essential Job Functions
* Monitor, analyze, and investigate security events, alerts, and suspicious activity across enterprise systems and networks.
* Support incident response activities, including triage, investigation, containment, documentation, and post-incident analysis.
* Assist in developing, maintaining, and improving enterprise information…