Information Security Analyst

JOB SUMMARY: The Information Security Analyst plays a key supporting role in the college’s cybersecurity operations. Under the guidance of the Technical Manager, Information Security & Infrastructure, this position monitors IT systems for potential threats, assists with policy compliance tasks, 3rd party vendor reviews and assessments, and contributes to user education and awareness initiatives. The Information Security Analyst is responsible for and administers the college’s Security Awareness Training program, EDR/MDR platform, email filtering rules, and the institutional risk register. This role also works closely with the Endpoint Management Coordinator to support the vulnerability and patch management program. Additionally, as a crucial part of the College's incident response team, the Information Security Analyst supports the efficacy and readiness of technology disaster recovery plans. ESSENTIAL JOB FUNCTIONS: Monitor system alerts, logs, and endpoint protection tools to identify potential security events and action upon them with direction from senior staff as appropriate. Support the Technical Manager, Information Security & Infrastructure, vCISO, and Information Security Team during incident response by gathering data, documenting findings, and performing preliminary triage. Assist with compliance activities by preparing audit documentation, tracking remediation efforts, and maintaining access control records. Contribute to information security awareness and training programs by updating materials and coordinating outreach efforts. Working closely with the Endpoint Management Coordinator, perform basic vulnerability scans and assist in tracking remediation plans provided by the engineering or infrastructure teams. Help maintain identity and access management controls by reviewing user permissions and supporting periodic access reviews. Participate in regular risk assessments, vendor reviews, business impact analysis, and implement controls to mitigate potential threats and vulnerabilities, as directed. Stay current with emerging cybersecurity threats, tools, and best practices; participate in professional development opportunities. Maintain documentation of security procedures, tools, and workflows for future reference and audit readiness. Collaborate with IT staff to support secure configuration and deployment of systems. Provide guidance on best practices for data protection and cybersecurity. Serve on College committees and/or external committees as directed by the supervisor and/or Chief Information Officer. Perform other duties as assigned. MINIMUM REQUIREMENTS TO PERFORM WORK: Associate degree; Bachelor degree preferred. Entry-level certifications such as CompTIA Security+, Microsoft SC-900, or equivalent. Experience with help desk ticketing systems or logging tools (e.g., Team Dynamix, Splunk, Azure Monitor, etc.). Basic understanding of cybersecurity principles, networking fundamentals, and common operating systems. Familiarity with tools such as antivirus, multi-factor authentication, and enterprise endpoint security. Ability to handle sensitive information with discretion and follow written procedures. Strong analytical and problem‑solving skills. Effective written and verbal communication skills. Demonstrated interest in pursuing a career in information security. KNOWLEDGE, SKILLS AND ABILITIES: To be successful in this position, candidates will need the following: Knowledge of risk management processes (e.g., methods for assessing and mitigating risk). Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy (e.g., GLBA, FERPA, GDPR, HIPAA, PCI, etc.) Knowledge of cybersecurity and privacy principles used to manage risks related to the use, processing, storage, and transmission of information or data. Working knowledge and experience with Microsoft 365 (SharePoint, MS Teams, Purview, security, DLP, etc.), SentinelOne, and Abnormal Security is highly desirable. Skill in verbal and written communication, facilitation, and interpersonal skills. Knowledge of industry security frameworks (e.g., NIST 800-171, CIS, etc.) Knowledge of ITSM frameworks (ITIL, etc.) and service delivery models. Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non‑repudiation). Ability to translate sophisticated concepts into simple, clear and concise messages that technical and non‑technical audiences can quickly comprehend. Ability to establish, maintain and cultivate positive and effective working relationships with those contacted in the course of work. Ability to multitask and work well individually, as well as cooperatively with others in support of team effort. Ability and interest to continually learn and grow professionally. Ability to build and follow work plans. Ability to work across departments and business units to implement the college’s data privacy policies and programs. SCHEDULING REQUIREMENTS: Ability to work a varied schedule during critical periods including evenings, Saturdays, and Sundays. Due to the need of interaction with students, employees and the college community this position requires in‑person presence. This position is eligible for telework of one day per week. PHYSICAL DEMANDS: Ability to lift and move up to a maximum of 50 lbs. The physical activity of this position includes, but is not limited to: climbing, walking, stooping, kneeling, crouching, reaching, standing, pulling, lifting, grasping, twisting and sitting. WORK ENVIRONMENT: Work environment involves everyday risks or discomforts which require normal safety precautions typical of such places as office or meeting and training rooms, e.g., use of safe workplace practices with office equipment, avoidance of trips and falls, and observance of fire and building safety regulations, and traffic signals when driving. This position supports information technology at Cecil College’s main campus in North East, MD, its additional location in Elkton, MD and all additional instructional sites. Travel between these locations is required. General Benefits: Cecil College offers full‑time employees a comprehensive benefit package offering medical, dental and vision coverage for employee and eligible dependents; generous annual, sick and personal leave; 19 paid holidays; tuition assistance and tuition waiver based on eligibility guidelines; opportunity to enroll in retirement accounts (403B or Maryland State Retirement System based on eligibility guidelines); voluntary retirement account with TIAA or Fidelity, employee paid short‑term disability, employer provided basic life insurance and accidental death insurance, and employee paid voluntary life insurance, access to Fitness Center, and library. For more information Employee Benefits | Cecil College Salary: This is an exempt position (not overtime eligible); Grade 114 (pay scale:$54,066-$86,505). Based on the budget, the salary for the position will be $60,000-$62,000. Applicants' initial salary placement is based on internal and external equity. Based upon the budgeted hours of a position, contribution to the Maryland State Retirement Pension System may be required. *We are committed to ensuring equal opportunity and non‑discrimination in all hiring and employment practices. Cecil College will not discriminate against any individual by reason of race, color, national origin, ancestry, age, religion, disability, sex, sexual orientation, gender identity and expression, genetic status, genetic information, veteran status or any other status protected by federal, state or local laws. #J-18808-Ljbffr