Information Security Analyst

Overview

Join our dynamic team as an Information Security Analyst/Program Manager and lead the charge in safeguarding our organization's digital assets and infrastructure. This pivotal role involves developing, implementing, and maintaining comprehensive security strategies aligned with industry standards and regulatory requirements. You will oversee the security posture across diverse IT environments, including cloud infrastructure, on-premises networks, and enterprise systems. Your expertise will ensure our information security policies are robust, compliant, and adaptive to emerging threats, empowering us to operate confidently in a rapidly evolving digital landscape.

Duties

• Design, implement, and manage enterprise-wide information security programs based on frameworks such as NIST cybersecurity framework, ISO 27000 series, and FISMA.
• Develop and maintain system security plans, security policies, and procedures to ensure compliance with regulatory frameworks like PCI, FedRAMP, and government information & network security standards.
• Lead security risk assessments and vulnerability management initiatives across IT infrastructure including LAN, WAN, SAN, cloud platforms (AWS, Azure), and network protocols such as IPsec, TCP/IP, BGP, OSPF.
• Oversee the deployment and management of security tools such as SIEM systems (Splunk), IDS/IPS solutions, firewalls (Cisco ASA), Cisco ISE for identity & access management (IAM), and network monitoring software like SolarWinds or PRTG.
• Conduct incident response planning, incident recovery exercises, and threat detection & response activities to minimize impact from cyber threats.
• Manage security governance processes including IT security monitoring, audit programs, compliance management using GRC software, and security assessment procedures.
• Collaborate with cross-functional teams on system hardening efforts using tools like Ansible or Terraform; ensure secure configurations for operating s