IT Security Analyst

IT Cyber SecurityPurpose of Class: Performs a variety of Information Technology security duties relating to the monitoring, configuration, incident response and maintenance of Information Systems and security devices.Primary Function: The IT Cyber Security Engineer's principal function is to work with the latest technologies to detect, analyze, and limit intrusions and security events. In addition, the IT Security Engineer will participate with the installation, monitoring, configuration, maintenance, support and optimization of all Information Systems and security devices.The individual will also establish and develop the Incident Response procedure and security training for district staff. The work is performed under the general supervision of the Technology Coordinator but considerable latitude is granted for the exercise of independent judgment and initiative.Essential Duties and Responsibilities:Develop and maintain Incident Response procedureDevelop and maintain IT based security education and awareness programs for district staffDevelop and ensure security policies, standards and guidelinesOrganize, implement and monitor security audit logs and access control practices to ensure adherence to policies and proceduresProvide guidance on information security topics, advising and collaborating on security processes, business continuity and disaster recovery plansPerform security monitoring and incident responseEnsure that system and application security design is in accordance with School District policy; consults with IT teams to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and softwareLead investigations of any actual or potential information security violations and manage escalation of security events; assist with related legal matters associated with such events as needed and make recommendations to correct or prevent future incidentsMonitor external threat environment for emerging threats and advise relevant stakeholders on appropriate actionProvide regular reporting on current state of information security program to the Technology Coordinator and other senior managementEstablish metrics and reporting framework to measure the efficiency, effectiveness and maturity of level of the programLiaise with relevant internal departments and external agencies as needed to ensure the School District maintains a strong security postureWork with Network Engineer and Application Specialists to audit, monitor and validate their environments security, including conducting gap analysis and other comprehensive internal assessments of existing systems to improve the security infrastructure and mitigate risksProvide oversight to the architecture and engineering of new security systems; including the evaluation of technical designsCompetency RequirementsKnowledge of:Customer service skills and techniquesStrong knowledge of common security management frameworks, such as ISO/IEC 27001, NIST and CSA.Strong knowledge of Family Education Rights and Privacy Act (FERPA), Health Insurance Portability and Accountability Act of 1996 (HIPAA), Children's Online Privacy Act (COPPA), Payment Card Industry Data Security Standard (PCI DSS) and Personally Identifiable Information (PII)Designing and managing new and existing security systemsContract and vendor negotiationsAbility to:Manage multiple, simultaneous security initiatives and responsesPerform a high degree of initiative, dependabilityAdvise district staff in securing their respective environmentsExhibit strong written and verbal communications skills, interpersonal and collaborative skillsStrong ability to convey security information to non-technical end-users in a way that inspires adoption and adherence to all IT and Board security policies and programsEstablish priorities and work within time constraints and deadlinesAudit security implementation access and violations against policies, procedures and regulationsPerform diagnostics for complex multi-tasking security problemsCommunicate effectively and establish working relationships with users, other employees, administrators, and the publicPerform multiple tasks simultaneously, including handling interruptions, and return to and complete tasks in a timely mannerWork independently, with minimal supervision, and make appropriate decisions in the absence of a supervisorAcceptable Experience and Training:Associates Degree or Bachelors Degree in computer repair or related fieldSecurity certifications preferredAny equivalent combination of experience and training which provides the knowledge and abilities necessary to perform the work.Essential Physical Abilities:Sufficient clarity of speech and hearing or other communication capabilities, with or without reasonable accommodation, which permits the employee to discern verbal instructions and to communicate effectively in person and by telephone;Sufficient visual acuity, with or without reasonable accommodation, which permits the employee to comprehend written work instructions, comprehend technical manuals and diagrams, prepare written technical reports, troubleshoot and install and repair computer systems and equipment and organize documents and materials;Sufficient manual dexterity, with or without reasonable accommodation, which permits the employee to operate, install, maintain and make adjustments to computers and related equipment;Job tasks may require, with or without reasonable accommodation, sitting, standing, climbing, stooping, kneeling, crouching, reaching, standing, walking, lifting, grasping and repetitive motions.