Information Security Analyst

Position Summary:

The Information Security Analyst plays a critical role in protecting the association's member data, proprietary research, and digital platforms. This position monitors and responds to security threats, ensures compliance with data protection regulations, and supports secure operations for membership systems, event platforms, and advocacy tools.


Essential Duties and Responsibilities:

• Threat Monitoring & Incident Response

o Monitor association systems (AMS, CRM, event platforms) for security alerts and anomalies.

o Investigate and respond to incidents impacting member data or online services.

o Document incidents and assist in remediation efforts.

• Vulnerability Management

o Perform regular vulnerability scans on association websites, portals, and third-party integrations.

o Collaborate with vendors and IT teams to remediate findings.

• Policy & Compliance

o Assist in maintaining security policies for staff, volunteers, and vendors.

o Support compliance with privacy regulations (e.g., GDPR for international members, U.S. data protection laws).

• Risk Assessment

o Conduct risk assessments for new member engagement tools, advocacy platforms, and event technologies.

o Recommend security controls to mitigate identified risks.

• Security Awareness

o Help deliver cybersecurity training for staff and member-facing teams.

o Provide guidance on secure practices for virtual events and advocacy campaigns.

• Technology Support

o Maintain and optimize security tools (SIEM, endpoint protection, firewalls).

o Assist in evaluating secure integrations for association management systems.

o Conduct manual vulnerability remediation not covered by patching systems.

o Conduct security software troubleshooting, remediation of data protection issues, and other related IT security tasks as required.


Educational Requirements:

• Bachelor's degree in Cybersecurity, Information Technology, or related field from an accredited college/university.

• Industry Security Credential such CompTIA Security+, Microsoft SC200 or equivalent.


Relevant Experience:

Two to four years in information security or IT security roles.


Knowledge/Skills/Abilities:

• Familiarity with public cloud AZURE, endpoint management systems.

• Familiarity with association management systems and member data protection.

• Knowledge of security frameworks (NIST, ISO 27001).

• Strong analytical and communication skills.


Competencies:

• Initiative: self-sufficient with ability to work independently to achieve clear goals.

• Decision Making: demonstrates good judgement and accountability.

• Communication: ability to effectively converse and listen to others regarding organizational matters; able to communicate in writing clearly and concisely; able to effectively communicate with others using the spoken word; able to communicate with a diverse audience.

• Build Collaborative Relationships: ability to develop, maintain, and strengthen partnerships with others inside and outside the organization.

• Teamwork: ability to share responsibility and work with others toward a shared goal and contribute to the capability of the team.

• Customer Relations/Member Services: ability to demonstrate customer care with members and maintain professional rapport in the day-to-day business environment.

. Organization: ability to plan, prioritize, and focus on multiple projects simultaneously.

. Detail Oriented: ability to pay attention to the minute details of a project or task.