Information Security Analyst

Position Summary

This position is responsible for maintaining the security and integrity of all data at Revecore. The primary functions within the position is to keep an ongoing analysis of current security measures, determine their effectiveness, as well as, suggest and implement improvements to mitigate risk. The information security analyst will be responsible for implementation of security measures for systems within the Revecore environment.

Reporting to the Director of Enterprise Technology Services, the Security Analyst will work closely with teams across all threads where security applies within the organization.

Key Responsibilities

· Ensure that Revecore assets and electronic data are adequately protected

· Work closely with Compliance Officer, Privacy Officer, Security Officer and CIO to understand Revecore security and privacy goals

· Proactively develop, obtain approval, and implement information security projects that further protect Revecore’s sensitive information

· Perform information security audits as assigned and document results.

· Ensure all audits are performed per the schedule, review results and escalate issues / exceptions as needed

· Fulfill any IT security/risk training initiatives to employees throughout the organization.

· Provide assistance with information security questionnaires (received from our clients) and send to Compliance Committee for final review

· Participate on client calls on information security topics

· Investigate, assess, document and remediate any type of security breach or cyber security incident.

· Work with Systems Administrators to uncover undiscovered internal/external vulnerabilities

· Fix discovered vulnerabilities to maintain high security standard.

· Expand and enforce company-wide best practices for IT security.

· Research security enhancements and make recommendations to management team.

· Implement and maintain robust SEIM architecture.

· Keep up to date with IT trends and security standards.

· Serve as project manager/lead within IT security projects.

· Work closely with Systems Administration team to complete department projects, goals and objectives

This document is not an exhaustive list of all responsibilities, skills, duties, requirements, or working conditions associated with the job. Employees may be required to perform other job-related duties as required by their supervisor, subject to reasonable accommodation.

Education/Licensing/Certifications

· Bachelor’s degree in computer science, cyber security or a related discipline.

· Industry certifications a plus (CISSP), (CISM), (CISA) (GIAC) Certified in Risk and Information Systems Control, Certified Ethical Hacker

Work Experience & Skills

· Microsoft 365 Security (Microsoft identity and access management (IAM), Microsoft threat protection, Microsoft Information Protection (MIP), Microsoft 365 security and risk management, etc.)

· IDS/IPS systems, SIEM tools and network scanners

· Access control methodologies (RBAC)

· Identity and access management

· Penetration testing of applications and infrastructure

· Social engineering

· Vulnerability and risk assessment

· Security assessments of network infrastructure, virtual infrastructure and applications

· Information Forensics

· Troubleshooting

· DLP, AV and anti-malware

· TCP/IP, computer networking, routing and switching

· Cloud computing

· Windows, UNIX and Linux operating systems

· Excellent report writing and communication

· The ability to work well independently or with a team

· Available to travel

· Capable of meeting deadlines and budgets

Work at Home requirements

• A quiet, distraction-free environment to work from in your home.
• A secure internet connection is required.
• Home internet with speeds >20 Mbps for downloads and >10 Mbps for uploads.
• The workspace area accommodates all workstation equipment and related materials and provides adequate surface area to be productive.

Employment is contingent upon eligibility to work in the United States, verification of employment history, and successful completion of a background check.