Security Analyst

1st day will be in the office for Equipment pickup and training. Position onwards will be remote. May be required to come into the office for special needs. In the past 2 years, staff has only been in office 1 time.

Description:

The client is looking for a Security Analyst II.

Project Details :
The Security Analyst 2 Contractor provides operational support for Identity and Access Management (IAM) services by processing security requests, resolving incidents, and ensuring compliance with established security policies and procedures. Responsibilities include creating, modifying, and disabling user accounts; provisioning and removing application access; performing basic Microsoft 365 and Exchange administration, including creating and managing distribution groups, shared mailboxes, and mail-enabled security groups; troubleshooting authentication and email-related issues; documenting work performed; and assisting with security projects, audits, and other duties as assigned. The analyst works collaboratively with customers and IT teams to deliver secure, timely, and accurate access management services while meeting established service level expectations.

POSITION SUMMARY

Security Analyst II

Under general supervision of the Security & Accounts Management Manager, this position works as a part of the Security & Accounts Management team and is responsible for provisioning and de-provisioning access to the client networks, resources and applications. This position maintains a high level of security by following all the client and enterprise security policies and procedures. This position requires strong interpersonal skills, multi-tasking skills, time management, and the ability to execute projects and solve complex problems. Technical support responsibilities require expertise of multiple platforms, operating systems and various security software systems.
This position shall comply with the client's administrative rules and the client's policies and procedures including those related to the client's overall Reentry philosophy of using evidence-based strategies, practices and programs which target an offender's individual criminogenic needs and risk level.

TIME% GOALS AND WORKER ACTIVITIES

50% A. Coordination of the account provisioning, de-provisioning, projects and maintenance for the client platforms and applications.
A1. Utilize security rules to grant / revoke access to applications, servers, group folders, etc.
A2. Coordinate activities within the account management staff to provide timely response to customer requests.
A3. Create and maintain security rules, ensuring that they enforce security standards and policies.
A4. Coordinate and handles projects relating to or involving account management functions.
A5. Create Email accounts, distribution lists and group mailboxes.
A6. Inform all customers of security procedures for applications, requests and services offered by account management.
A7. Identify customer problem areas where additional education / training is needed.
A8. Coordinate account management activities as needed across other client.
A9. Recommend and provide updates to procedural documentation.
A10. Provide timely resolution for customer access issues and formal requests.
A11. Participate in system / application integration planning, testing and troubleshooting of access issues.
A12. Work closely with project teams to determine application, server, folder, group and individual user access to systems.

15% B. Assist in the adherence and implementation of policies, standards and procedures for all areas of IT Security.
B1. Implement the standards and training requirements for IT Security administration.
B2. Coordinate the implementation of department-wide policies, procedures and standards for applications and platforms and ensure agency-wide standardization.
B3. Supports the implementation of department-wide Security Awareness training program. - Support functions.
B4. Act as liaison to resolve security-related issues with other client in a timely manner.
B5. Assess and recommend updates to security policies, procedures and standards.
B6. Supply information required in LAB and client audits as required.
B7. Recommend automation techniques to eliminate manual procedures.
B8. Provides support of Cybersecurity activities - Creates, improves, and maintains policies, procedures and standards.

15% C. Monitoring, auditing and analysis of security systems.
C1. Provide advice to management on implementing and monitoring Security systems.
C2. Provide advice to the client in the design and implementation of policies and procedures to provide an acceptable level of Security systems.
C3. Identify threats or serious issues regarding user access that may be caused by added new software and systems.
C4. Perform audits of security on access.
C5. Security Risk mitigation - Identify potential security risks to the organization and provides recommendations to management.
C6. Working with management to reduce and mitigate risk to the organization.

10% D. Performance of other job-related activities and special assignments.
D1. Identify areas that need improvement and work with sections supervisor to lay down the ground work to implement these improvements.
D2. Audit access to numerous applications used by the client to ensure users are not over provisioned.
D3. Update staff development plans as changes occur and work with management on career objectives.
D4. Attend presentations, conferences and seminars as directed.
D5. Identify training needs and request approval to attend.
D6. Perform other duties as assigned.

10% E. Assist IS Technical Services Consultant/Admins and/or Specialist with their responsibilities.
E1. Coordinate Security for internal systems i.e. (WICS, DEVSECOPS, Email systems)
E2. Perform Audits on EMR access as well as adding security rights through back EMR systems.
E4. Perform other duties as assigned.

Job Knowledge, Skills & Abilities
1. Knowledge of current client hardware and software architectures.
2. Knowledge of network concepts.
3. Knowledge of Windows network environments.
4. Advanced knowledge of Active Directory and group privileges.
5. Knowledge of all client security standards, policies and procedures.
6. Experience working with security issues in a distributed computing environment.
7. Knowledge of network operating system security issues.
8. Knowledge and demonstrated work experience with internet / intranet application security issues (e.g. LDAP).
9. Advanced problem-solving skills and the ability to make independent judgment decisions or contact appropriate parties to assist.
10. Effective oral and written communication skills.
11. Knowledge of effective people communication skills.
12. Knowledge of project planning.
13. Knowledge of products and applications, in order to create effective security roles.
14. Ability to multi-task.
15. Ability to expedite issues in a timely manner.
16. Customer focused, yet firm enough to ensure strict compliance to client security policies and procedures.
17. Knowledge and demonstrated work experience with security techniques, tools and security infrastructure.
18. Ability to communicate clearly and effectively to both technical peers and less technical customers in person and via written media such as e-mail, reports and project charters.

Additional details :

A well-qualified candidate will have experience with the following :
- Coordinate and handles projects relating to or involving account management functions and IAM.
- Create Email accounts, distribution lists and group mailboxes.
- Inform all customers of security procedures for applications, requests and services offered by account management.
- Identify customer problem areas where additional education / training is needed.
- Coordinate account management activities as needed across other client .
- Recommend and provide updates to procedural documentation.
- Provide timely resolution for customer access issues and formal requests.
- Participate in system / application integration planning, testing and troubleshooting of access issues.

Experience with these skills is a bonus :
- Perform audits of security on access.
- Security Risk mitigation - Identify potential security risks to the organization and provides recommendations to management.
- Working with management to reduce and mitigate risk to the organization.

Preferred Skills and Experience : 4-7 years of experience in the following :
- Coordination of the account provisioning, de-provisioning, projects and maintenance for client platforms and applications.
- Utilize security rules to grant / revoke access to applications, servers, group folders, etc.
- Coordinate activities within the account management staff to provide timely response to customer requests.
- Create and maintain security rules, ensuring that they enforce security standards and policies.

Nice to have Skills :
- Monitoring, auditing and analysis of security systems.
- Provide advice to management on implementing and monitoring Security systems.
- Provide advice to the client in the design and implementation of policies and procedures to provide an acceptable level of Security systems.
- Identify threats or serious issues regarding user access that may be caused by added new software and systems.

Intangible Must Haves :
- Attention to detail
- Curious and Questioning mindset
- Works well on a team with high priorities
- Customer Service Experience

Notes :
1st day will be in the office for Equipment pickup and training. Position onwards will be remote. May be required to come into the office for special needs. In the past 2 years, staff has only been in office 1 time.

VIVA is an equal opportunity employer. All qualified applicants have an equal opportunity for placement, and all employees have an equal opportunity to develop on the job. This means that VIVA will not discriminate against any employee or qualified applicant on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status