Senior Cybersecurity Analyst

Under the general supervision of the Chief Information Officer (CIO) and Deputy Director of Information Technology, the Senior Cybersecurity Analyst oversees and manages the organization’s information security, ensuring that all systems are secure, policies are enforced, and the organization remains compliant with applicable laws and regulations. The Senior Cybersecurity Analyst is responsible for developing, implementing, and maintaining a comprehensive cybersecurity program that protects sensitive data, critical infrastructure, and information systems from internal and external threats, while aligning security initiatives with organizational objectives and industry best practices.

This role involves assessing and managing risk, monitoring and responding to security incidents, overseeing vulnerability management and security tools, and ensuring timely remediation of identified issues. The Senior Cybersecurity Analyst works closely with IT staff, leadership, and other stakeholders to integrate security across all technology operations, enforce security policies and standards, support audits and compliance efforts, and promote security awareness and training, while continuously evaluating emerging threats and technologies to strengthen the organization’s overall security posture.

Develop, implement, and manage the company’s cybersecurity strategy to align with business goals.

Lead the cybersecurity team, providing guidance and expertise to ensure effective operation and collaboration across departments.

Ensure organizational compliance with relevant laws, regulations, and standards, such as CJIS, GDPR, CCPA, ISO/IEC 27001, NIST, etc.

Advise executive leadership on potential security risks and strategies for mitigation.

Monitor, evaluate, and update the organization’s cybersecurity framework.

Oversee threat detection, incident response, and vulnerability management processes.

Manage and respond to security incidents, including investigation, mitigation, and documentation.

Implement and enforce data protection, access control, and risk management policies.

Collaborate with IT teams to ensure secure configuration and deployment of IT systems and applications.

Conduct regular security risk assessments, audits, and penetration tests to identify vulnerabilities and gaps.

Implement risk mitigation plans and ensure appropriate security measures are in place for all IT projects.

Maintain up-to-date knowledge of cybersecurity trends, tools, and regulatory changes.

Create and deliver cybersecurity awareness training for employees.

Develop security best practices and guidelines for internal teams to ensure data integrity and privacy.

Promote a culture of security awareness across the organization.

Office-based role with occasional travel for conferences, training, or vendor meetings.

On-call availability for urgent security incidents or breaches.

Performs related duties as required.

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. A master’s degree is a plus.

5 years of experience in cybersecurity.

Experience with security management frameworks such as ISO/IEC 27001, NIST, CIS, or equivalent.

Hands-on experience with security tools (firewalls, IDS/IPS, SIEM, encryption, etc.).

Certified Information Systems Security Professional (CISSP)

Certified Information Security Manager (CISM)

Certified Ethical Hacker (CEH)

GIAC Security Essentials (GSEC)

Strong leadership and team management skills.

In-depth knowledge of cybersecurity principles, techniques, and protocols.

Excellent problem-solving and…