Information Security Analyst

Information Security Analyst - I

Charter Schools USA (CSUSA) is one of the largest and highest-performing education management companies in the United States, proudly serving over 82,000 students in over 150 schools in four states. Founded by Jonathan Hage in 1997, CSUSA's mission is a Relentless Commitment to Student Greatness in School and in Life™. CSUSA provides an academically rigorous education to students equipping them with real world readiness, prepared for college or career after graduation. With an unwavering dedication to the success of students from every background, CSUSA is closing the gaps in achievement and opportunity, keeping our promise of Strong Minds, Good Hearts™.

As an Information Security Analyst - I, you will support all functions of the RAE (Risk, Audit, and Education) framework by working with emerging technologies to solve challenging cybersecurity problems in a fast-paced and continuously evolving environment. This position embodies Cyber Network Defense, and a successful Information Security Analyst - I will be able to quickly analyze threats, understand the risk they may pose, deploy effective countermeasures, and ensure the organization's security posture remains aligned with industry frameworks and compliance requirements.

Essential Duties And Responsibilities:

• Support all functions of the RAE framework by providing cybersecurity expertise, advisory guidance, and operational security support across teams and departments.
• Lead or participate in information security related projects or in managing strategy.
• Lead and manage the Cybersecurity Awareness Training and Education program.
• Make business-critical incident response decisions and work as part of a team of individuals dedicated to protecting CSUSA's digital assets and data.
• Perform Incident Handling duties for minor or major security incidents within the defined Computer Security Incident Response (CSIR) process.
• Maintain situational awareness for cyber threats across CSUSA's multi-state school environment and act where necessary.
• Conduct forensic investigations in support of HR, Legal, or incident response related activities.
• Co-Manage and monitor managed device security infrastructure stack with the Desktop Experience team, including policy and system configuration, alert triage, and platform maintenance.
• Co-manage and monitor cloud security infrastructure stack with the CloudOps team, including policy and system configuration, quarantine management, alert triage, and platform maintenance.
• Assess alerts and notifications of event activity and intrusion detection systems; respond accordingly to identified threats.
• Provide security advisory guidance on system configurations, platform hardening, and security best practices across all enterprise systems.
• Conduct penetration testing activities to identify vulnerabilities across CSUSA's infrastructure, systems, and network environments; document findings and recommend remediation actions.
• Ensure CSUSA's cybersecurity practices and controls remain in alignment with applicable NIST guidelines, including NIST CSF 2.0 and NIST SP 800-53, and support gap analysis and remediation efforts.
• Support alignment with cybersecurity insurance policy requirements, including maintaining documentation, evidence of controls, and participation in carrier assessments or questionnaires.
• Provide reports and documentation as requested by leadership.
• Provide management with critical decision-making information by analyzing data, forecasting, and developing systems or processes to monitor data and trends.
• Participate successfully in training programs offered to increase individual skill and proficiency related to assigned responsibilities.
• Review current developments, literature, and technical sources of information related to job responsibilities.
• Ensure adherence to good safety procedures.
• Follow federal and state laws, as well as company policies.

Skills And Knowledge:

• Demonstrates enthusiasm and commitment toward the job and the mission of CSUSA; supports company goals and strategic priorities.
• Works and interacts with staff at all levels of the organization; sensitive to corporate needs, employee goodwill, and public image.
• Demonstrates ability to lead people and get results through others.
• Establishes excellent interpersonal skills between all constituents: courteous, professional, and helpful; demonstrates high level of interpersonal skills to handle sensitive and confidential situations. Position continually requires demonstrated poise, tact, and diplomacy.
• Demonstrates excellent oral (including presentations), written, and interpersonal (active listening) skills; ability in negotiating and influencing; great phone etiquette.
• Thinks ahead and plans over a 1--2 year time span.
• Ability to organize and manage multiple priorities.
• Ability to consistently be at work, arrive on time, follow instructions, respond to management direction, and solicit feedback to improve performance.
• Problem analysis and resolution at both a strategic and functional level.
• Working knowledge of NIST cybersecurity frameworks (CSF 2.0, SP 800-53) and the ability to apply them to operational security activities.
• Familiarity with cybersecurity insurance requirements and the controls and documentation necessary to support policy compliance and carrier assessments.
• Looks for ways to improve and promote quality; demonstrates accuracy and thoroughness; strives to research, evaluate, and implement best practices.
• Strong customer orientation.
• Strong track record for analyzing complex problems and issues, identifying patterns, and recommending creative solutions.
• Proactive and takes initiative; thinks creatively; drives projects to completion; insists on highest level of quality.

Job Requirements:

• B.S. in Computer Science, Computer Engineering, MIS, Cybersecurity, or a related degree, and a minimum of two (2) to four (4) years of related experience in Information Technology, or an equivalent combination of education, training, or experience.
• Experience should include hands-on work with incident response methodologies, threat monitoring, and at least one of the following: malware analysis, penetration testing, scripting, or digital forensics.
• Demonstrated experience or familiarity with NIST cybersecurity frameworks and the ability to apply framework controls to real-world security operations.
• Experience supporting or contributing to cybersecurity insurance compliance, including control documentation and carrier assessment support.
• Experience with enterprise email security platforms such as Proofpoint is preferred.
• Experience with enterprise device content filtering platforms such as Lightspeed is preferred.
• Systems administrator experience in Linux, Unix, Windows, or macOS operating systems is desirable.
• Demonstrated ability to create scripts, develop tools, or automate processes in PowerShell, Python, or Bash.
• Security certification such as CISA, CISM, SSCP, CISSP, CCNA, CompTIA Security+, GIAC(s), CEH, or OSCP will be extremely advantageous.
• Knowledge of networking and common network protocols.
• Commitment to company values.
• Such alternatives to the above requirements as CSUSA may find appropriate and acceptable.

Work Environment:

• Usual office working conditions.
• Some travel to CSUSA school sites in Florida, Louisiana, North Carolina, and South Carolina may be required.

Physical Demands:

• No physical exertion required.
• Travel within or outside of state.
• Light work: Exerting up to 20 pounds of force occasionally, and/or up to 10 pounds of force as frequently as needed to move objects.

FLSA Overtime Category:

Job is exempt from the minimum wage and overtime provisions of the Fair Labor Standards Act.