Cyber Security Analyst

• Implement information security and compliance programs for Information Technology (IT) Systems
• and Operational Technology (OT) systems.
• Conduct written risk assessments for existing systems/solutions, new systems/solutions, and services in use or to be used by the business.
• Assist with management and resolution of security risks and or threats to business information and ‘Operational systems.
• Serve as information security analyst and evaluate systems and contracts for alignment with Business and State information security policies and standards as well as other laws, regulations, and industry best practices, as applicable.
• Monitor and remain aware of information security industry trends, tools, and techniques.
• Perform additional duties as required.

Job Qualifications:

• 5 years of experience evaluating information security and compliance for Information Technology systems and or Operational Technology systems.
• 5 years of experience conducting written risk and/or security assessments using industry standards such as NIST, CIS Critical Controls, ISO 27001, etc.
• 4 years of experience triaging and determining mitigation plans (with and without Vendor) to resolve security risks and/or threats to business information systems and operational technology systems.
• 4 years of experience evaluating business systems (Commercial Off the Shelf and Custom Developed) for alignment with Information Technology and/or Operational Technology security policies, ‘Standards, laws, regulations, and industry best practice.
• 3 years of experience in evaluating security controls for cloud environments
• 3 years of experience working with cross-functional teams to mitigate or remediate system and, application vulnerabilities.
• Bachelor's Degree in one or more of the following: Information Security, Information Assurance, Cybersecurity, Computer Science, Information Science, Information System Management, Digital Forensics, Compliance, and Risk Management
• One or more of the following certifications: GICSP, GSEC, CISSP, CSP, CCSK, CompTIA Cloud+,