Senior Cybersecurity Analyst

Description Under the general supervision of the Chief Information Officer (CIO) and Deputy Director of Information Technology, the Senior Cybersecurity Analyst oversees and manages the organization’s information security, ensuring that all systems are secure, policies are enforced, and the organization remains compliant with applicable laws and regulations. The Senior Cybersecurity Analyst is responsible for developing, implementing, and maintaining a comprehensive cybersecurity program that protects sensitive data, critical infrastructure, and information systems from internal and external threats, while aligning security initiatives with organizational objectives and industry best practices. This role involves assessing and managing risk, monitoring and responding to security incidents, overseeing vulnerability management and security tools, and ensuring timely remediation of identified issues. The Senior Cybersecurity Analyst works closely with IT staff, leadership, and other stakeholders to integrate security across all technology operations, enforce security policies and standards, support audits and compliance efforts, and promote security awareness and training, while continuously evaluating emerging threats and technologies to strengthen the organization’s overall security posture. Description Under the general supervision of the Chief Information Officer (CIO) and Deputy Director of Information Technology, the Senior Cybersecurity Analyst oversees and manages the organization’s information security, ensuring that all systems are secure, policies are enforced, and the organization remains compliant with applicable laws and regulations. The Senior Cybersecurity Analyst is responsible for developing, implementing, and maintaining a comprehensive cybersecurity program that protects sensitive data, critical infrastructure, and information systems from internal and external threats, while aligning security initiatives with organizational objectives and industry best practices. This role involves assessing and managing risk, monitoring and responding to security incidents, overseeing vulnerability management and security tools, and ensuring timely remediation of identified issues. The Senior Cybersecurity Analyst works closely with IT staff, leadership, and other stakeholders to integrate security across all technology operations, enforce security policies and standards, support audits and compliance efforts, and promote security awareness and training, while continuously evaluating emerging threats and technologies to strengthen the organization’s overall security posture. Examples of Duties Leadership & Strategy Develop, implement, and manage the company’s cybersecurity strategy to align with business goals. Lead the cybersecurity team, providing guidance and expertise to ensure effective operation and collaboration across departments. Ensure organizational compliance with relevant laws, regulations, and standards, such as CJIS, GDPR, CCPA, ISO/IEC 27001, NIST, etc. Advise executive leadership on potential security risks and strategies for mitigation. Security Operations Monitor, evaluate, and update the organization’s cybersecurity framework. Oversee threat detection, incident response, and vulnerability management processes. Manage and respond to security incidents, including investigation, mitigation, and documentation. Implement and enforce data protection, access control, and risk management policies. Collaborate with IT teams to ensure secure configuration and deployment of IT systems and applications. Risk Management Conduct regular security risk assessments, audits, and penetration tests to identify vulnerabilities and gaps. Implement risk mitigation plans and ensure appropriate security measures are in place for all IT projects. Maintain up-to-date knowledge of cybersecurity trends, tools, and regulatory changes. Training & Awareness Create and deliver cybersecurity awareness training for employees. Develop security best practices and guidelines for internal teams to ensure data integrity and privacy. Promote a culture of security awareness across the organization. Additional Job Functions Office-based role with occasional travel for conferences, training, or vendor meetings. On-call availability for urgent security incidents or breaches. Performs related duties as required. Typical Qualifications

EDUCATION & EXPERIENCE

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. A master’s degree is a plus. 5 years of experience in cybersecurity. Experience with security management frameworks such as ISO/IEC 27001, NIST, CIS, or equivalent. Hands-on experience with security tools (firewalls, IDS/IPS, SIEM, encryption, etc.). Certifications (preferred) Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Certified Ethical Hacker (CEH) GIAC Security Essentials (GSEC) Skillset & Other Qualifications Strong leadership and team management skills. In-depth knowledge of cybersecurity principles, techniques, and protocols. Excellent problem-solving and analytical skills. Ability to handle high-pressure situations and make sound decisions quickly. Strong communication skills to interact effectively with technical teams, business leaders, and non-technical stakeholders. Must have a valid driver’s license, clean driving record, and be able to pass an FBI / CJIS fingerprint and background checks. Minimum Qualifications Or Standards Required

TO PERFORM ESSENTIAL JOB FUNCTIONS

Physical Requirements : Tasks require the ability to exert very moderate physical effort in light work. They typically involve some combination of stooping, kneeling, crouching, and crawling and can involve some lifting, carrying, pushing, and pulling of objects and materials of moderate weight (up to 20 pounds) and occasionally heavier weight (up to 40 pounds). Tasks may involve extended periods at a keyboard or workstation. Data Conception : Requires the ability to compare and judge the readily observable functional, structural, or compositional characteristics (similar to or divergent from apparent standards) of data, people, or things. Interpersonal Communications : Requires speaking and signaling people to convey or exchange information. Includes receiving direction and instruction from supervisor. Language Ability : Requires reading various policies and procedures, technical manuals, diagrams, etc. The ability to prepare technical reports, records, etc., with proper format, punctuation, spelling, and grammar, using all parts of speech, and to speak with and before others with poise, voice control, and confidence. Intelligence : Requires the ability to apply principles of logical thinking to define problems, collect data, establish facts, and draw valid conclusions; to deal with several abstract and concrete variables. Requires the ability to learn and understand relatively complex principles and techniques, make independent judgments without supervision, and acquire knowledge of topics related to primary occupation. Must have the ability to comprehend and interpret received information. Verbal Aptitude : Requires the ability to record and deliver information, explain procedures, and follow and give oral and written instructions to teach employees. Communicate effectively and efficiently in various technical and professional languages, including computer science and data processing. Numerical Aptitude : Requires the ability to add and subtract totals, multiply and divide, use mathematical formulas, determine percentages and decimals, and determine time. Form/Spatial Aptitude : Requires the ability to inspect items for proper length, width, and shape and visually read various information. Motor Coordination : Requires the ability to coordinate hands and eyes using office machinery. Manual Dexterity : Requires the ability to handle various items, including keyboards, office equipment, control knobs, buttons, switches, catches, tools, etc. Must have moderate levels of eye/hand/foot coordination. Color Discrimination and Visual Acuity : The ability to differentiate colors and shades of paint requires visual acuity to determine depth perception, peripheral vision, inspection of small parts, preparation and analysis of written or computer data, etc. Interpersonal Temperament : Requires the ability to deal with people beyond giving and receiving instructions. Must be adaptable to performing under stress when confronted with emergencies or tight deadlines. Physical Communications : Requires the ability to talk and hear (talking: expressing or exchanging ideas using spoken words; hearing: perceiving the nature of sounds by ear).

PERFORMANCE INDICATORS

Knowledge of the Job: Has a thorough understanding of the methods, procedures, and policies of the Information Technology Department as they pertain to the performance of duties of the Senior Cybersecurity Analyst. Knows the laws, ordinances, standards, and regulations related to the specific duties and responsibilities of the position—knowledge of computer technology and maintenance, information systems management, data processing, etc. Knowledge of varying business operations and can design/implement computer applications to meet business needs. Can effectively determine appropriate hardware and software requirements for various County operations. Can provide professional, efficient user support and assistance. Knows the standard tools, materials, and practices of the industry. Is skilled in the care and use of required tools and equipment. Can make minor adjustments and repairs to computer hardware as needed. Knows the occupational hazards and safety precautions of the industry. Can offer training and assistance to co-workers and employees of other departments as required. Can take the initiative to complete the position’s duties without direct supervision. Can plan, organize, and prioritize daily assignments and work activities. Has good organizational, technical, and human relations skills. Can learn and utilize new skills and information to improve job performance and efficiency. Knows proper English usage, punctuation, spelling, and grammar. Knows modern office practices and technology. Has the mathematical ability to handle required calculations. Can read and interpret technical materials about the job responsibilities. Can assemble and analyze information and make written reports and records concisely, clearly, and effectively. Has thorough knowledge of the terminology and various professional languages used within the department. Knows how to maintain effective relationships with personnel of other departments, professionals, and members of the public through contact and cooperation. Knows how to react calmly and quickly in emergencies. Quality of Work : Maintain high accuracy standards in exercising duties and responsibilities. Exerts immediate remedial action to correct any quality deficiencies in areas of responsibility. Maintains high-quality communication and interaction with internal and external entities with whom the position interacts. Quantity of Work : Performs described Essential Functions and related assignments efficiently and effectively to produce work that consistently meets established standards and expectations. Dependability : Assumes responsibility for completing assigned work. Completes assigned work within deadlines by directives, policy, standards, and prescribed procedures. Maintain accountability for assigned technical, human, and conceptual duties. Attendance : Attends and remains at work regularly and adheres to policies and procedures regarding absenteeism and tardiness. Provides adequate notice to higher management concerning vacation time and leave requests. Initiative and Enthusiasm : Maintains an enthusiastic, self-reliant, and self-starting approach to meet job responsibilities and accountabilities. Strives to anticipate work to be accomplished and initiates proper and acceptable action for completing work with minimum supervision and instruction. Judgment : Exercises analytical judgment in areas of responsibility. Identifies issues or situations as they occur and specifies decision objectives. Identifies or assists in identifying alternative solutions to problems or concerns. Implements decisions according to prescribed and effective policies and procedures with minimal errors. Seeks expert or experienced advice where appropriate and research issues, conditions, and alternatives before exercising judgment. Cooperation : Accepts supervisory instruction and direction and strives to meet the goals and objectives of same. Questions such as instruction and guidance when clarification of results or consequences are justified, i.e., poor communications, variance with established policies or procedures, etc. Offers suggestions and recommendations to encourage and improve cooperation intra- and inter-departmentally. Relationships with Others : Share knowledge with managers, supervisors, and co-workers for mutual benefit. Contributes to maintaining high morale among all employees. Develops and maintains cooperative and courteous relationships inter- and intra-departmentally and with external entities with whom the position interacts. Tactfully and effectively handles requests, suggestions, and complaints to establish and maintain goodwill. Emphasizes the importance of maintaining a positive image. Coordination of Work : Plans and organizes daily work routine. Establishes priorities for the completion of work by sound time-management methodology. Avoids duplication of effort. Estimates the expected completion time of work elements and shows a personal schedule accordingly. Attends required meetings, planning sessions, and discussions on time. Implements worked activity by priorities and estimated plans. Safety and Housekeeping : Adheres to all established safety and housekeeping standards. Ensures such measures are not violated. DISCLAIMER: This job description is not an employment agreement or contract. Management has the exclusive right to alter this job description at any time without notice. Equal Opportunity Employer #J-18808-Ljbffr Lancaster County Economic Development