Information System Security Analyst

Information System Security Analyst

TLA is seeking a detail-oriented and proactive Information System Security Analyst to join our IT department. This critical role involves safeguarding our organization's sensitive data and computer systems from evolving cyber threats. The analyst will be responsible for monitoring network activity, identifying vulnerabilities, responding to incidents, and ensuring compliance with security standards and regulations. The ideal candidate will have strong analytical skills and a passion for staying current with the latest IT security trends and technologies.

Key Responsibilities:

• Monitoring and Detection: Monitor the organization's networks and systems for security breaches and suspicious activity using Security Information and Event Management (SIEM) tools.
• Vulnerability Management: Conduct regular vulnerability assessments and penetration tests to identify potential weaknesses in computer systems and applications.
• Incident Response: Respond promptly to security incidents and breaches, investigate their root cause, contain the damage, and coordinate remediation efforts.
• Policy and Compliance: Develop, implement, and maintain security policies, standards, and procedures to ensure compliance with relevant industry standards and regulations (e.g., NIST, ISO 27001, HIPAA, GDPR, PCI-DSS).
• Security Measures: Install, configure, and maintain security software and tools, such as firewalls, data encryption programs, and antivirus systems.
• Risk Assessment: Perform risk analyses of systems and applications to determine security requirements and recommend enhancements to management and senior IT staff.
• Training and Awareness: Provide security awareness training and guidance to employees on best practices and new security procedures.
• Documentation and Reporting: Prepare detailed reports of security assessments, incidents, and general security metrics for technical and non-technical audiences.