The Senior Security Analyst is responsible for monitoring computer networks for security issues and risks, investigating security breaches and other cyber security incidents, installing security measures, operating software to protect systems and information infrastructure, including firewalls, data encryption, and best practice authentication/access control measures.
Essential Functions
Provide strategic direction for security operations and initiatives
Lead security architecture design and implementation
Mentor and coach junior security analysts
Collaborate on critical IT projects to ensure security issues are addressed throughout the project life cycle
Lead incident response efforts and conduct investigations
Define and implement controls
Includes all the Security Analyst responsibilities as needed
Required Education and Experience
Bachelor's degree in Information Systems, or commensurate work experience required
10 years IT or network experience required
5 years Information Security experience required
Senior-level certifications such as CISSP, CISSP-ISSAP (Information Systems Security Architecture Professional), CCSP (Certified Cloud Security Professional), or equivalent required
Financial industry experience preferred
Experience in developing, documenting, and maintaining security policies, processes, procedures, and standards
Audit, compliance, or governance experience is preferred
Knowledge of payment card industry data standard and associated compliance requirements
In-depth knowledge and understanding of information risk concepts and principles, as a means of relating business needs to security controls
Expertise in security operations and incident response methodologies
Knowledge of the fundamentals of project management, and experience with creating and managing project plans, including budgeting and resource allocation
In-depth knowledge of risk assessment methods and technologies
Excellent technical knowledge of mainstream operating systems including Microsoft Windows, Linux, and a wide range of security technologies including network security appliances, identity and access management (IAM) systems, anti-malware solutions, automated policy compliance tools, and desktop security tools
Knowledge of industry leading guidance e.g., NIST CSF, ISO or COBIT is preferred
Experience in designing and implementing security controls and architectures
Attention to detail and accuracy required
Excellent verbal and written communication skills required
Ability to thrive in a fast paced work environment
Physical Demands
While performing the duties of this job, the employee is frequently required to sit, stand, walk, visualize, talk, hear, and handle or touch objects or controls. The employee may occasionally lift, push, or pull up to 20 pounds.
This position is an office-based position where you must be able to sit for long periods of time. The employee will be working on a computer 90% of the time.