Security Analyst

DescriptionOPPORTUNITYThe Security Analyst role is a part of the LBMC Enterprise Department which helps service the firm company wide. This individual will be responsible for ensuring that security operational and project activities are maintained as well as recommending appropriate remediation measures to minimize cybersecurity risks. The position will work closely with the Information Security Officer, IS leadership, and team members to implement and maintain security and compliance across LBMC. The Security Analyst will also work to continually monitor compliance aspects, assisting in risk assessments, monitoring, and security projects to support effective implementation and support. You will be joining a progressive office in Nashville and receiving mentorship and support from seasoned industry professionals in the market. SCOPE OF WORKThe Security Analyst will work with IT and non-IT teams to make certain procedural security controls are established and maintained within the organization and complies with a variety of security requirements as well as industry best practicesThe individual will use security software to obtain important data for reporting capabilitiesAssist with the investigation and response to security alertsAnalyze security problems, design, and assist in implementing effective solutionsReview security logs and assist technical analysts in interpreting these logsWork directly with ISO to facilitate cybersecurity risk management processes and activities by reporting on inherent risks and arriving at acceptable levels of residual riskAssist in the Vulnerability Management Program and work with the IT team to continually review the results of vulnerability scans, patching updates, and penetration tests to provide an ‘as is’ cybersecurity risk assessment of IT assetsConduct risk reviews for new applications, developed code, and other related areas prior to implementation and production to ensure minimal risks or exposureResponsible for phish campaign monitoringReport possible threats or software issuesResearch weaknesses and determine ways to counter themAssist fellow employees with cybersecurity, software, hardware, or IT needsCarry out and support information security plans and policiesRespond to, investigate, and assist in recovery efforts related to a security breachAssist in Security Awareness training development and supportEnsure the organization's data and infrastructure are protected by enabling and/or recommending appropriate security controlsParticipate and follow the change management processDaily administrative tasks, reporting, and communication within Information Security as well as relevant departments within the organization, as needed, or directedAssist in testing new software and firmware, as needed, or directedIDEAL CANDIDATE PROFILEBachelor’s degree in Information Systems, Computer Science, Information Security or related fieldMinimum of 1-3 years progressive experience in IT risk, Cybersecurity risk management, IT Audit, or information security risk management, with an emphasis on cybersecurity technology implementation projects or related technology implementationsStrong knowledge of core IT and Security infrastructures including Active Directory, Azure AD, Microsoft Windows security controls, SIEM, AV/EDR, IDS/IPS, PIM, PAM, IAM, Certificate Management, vulnerability scanners, etc.Strong understanding of each phase of the (S)SDLC and project delivery under Agile methodologiesCloud computing security in Azure/Windows environments, risk assessments, security controls definition, control procedure appropriateness, security capabilities identificationWorking knowledge of a broad range of standards and frameworks: International Standards Organization (ISO) 27001, IT Infrastructure Library and ISO 20000, Capability Maturity Model Integration, laws and standards (e.g., NIST, GDPR, Sarbanes-Oxley)Understanding of SOC 2, Type II auditsStrong knowledge of all aspects of information security within the Analyze, Prevent, Detect, and Respond domainsMust be highly analytical and detail-oriented, with organizational skills to manage assigned work to completionRequirements