Information Systems Analyst

Description

The Information Security Analyst plays a crucial role in safeguarding the organization's information assets by researching, recommending, and implementing robust security policies, practices, and architectures for both on-premise and public cloud infrastructure.

Key Responsibilities:

1. Security Research and Recommendations: Independently research and provide technical recommendations regarding information security policies, practices, system development, and architecture for both on-premise and public cloud infrastructure.

2. Security Tools and Resources Development: Work autonomously and collaboratively with team members to design, architect, develop, and continuously enhance information security tools and resources.

3. Security Requirements and Compliance: Collaborate with resource owners to determine and establish appropriate security requirements, policies, and practices; interpret and ensure compliance with existing policies and procedures.

4. Incident Investigation and Response: Investigate and respond appropriately to internal and/or external complaints (e.g., scanning, hacking, spamming, harassment, abuse, DMCA notices, and any other incidents that include a cyber element).

5. Forensic Analysis: Develop methodologies and perform forensic and other in-depth analyses of critical central systems for signs of unauthorized activity or abuse.

6. Threat Assessment and Action Planning: Exercise discretion and independent judgment to determine possible threats, assess potential severity, and develop appropriate action plans for addressing identified issues.

7. Staying Current on Security Trends: Stay up-to-date on the latest security techniques, tools, and evolving threats; contribute to periodic security briefings and updates for members of the campus community.

8. Other Duties: Perform other duties as assigned to support the organization's information security goals and objectives.

 

Qualifications

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent work experience.

- 3+ years of experience in information security, with a strong focus on security policy development, threat analysis, and incident response.

- In-depth knowledge of information security principles, best practices, and industry standards, such as NIST, ISO 27001, and CIS.

- Familiarity with both on-premise and public cloud security architectures, particularly in AWS or Azure.

- Experience with security tools and technologies, such as SIEM, IDS/IPS, firewalls, and vulnerability scanners.

- Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective mitigation strategies.

- Excellent communication and collaboration skills, with the ability to work effectively with cross-functional teams and stakeholders.

- Ability to work independently and exercise sound judgment in high-pressure situations.

- Passion for staying current with the latest developments in information security and a commitment to continuous learning and improvement.

 

Certifications such as CISSP, CISM, or CompTIA Security+ are highly desirable.

 

 

Application Instructions

Please submit a resume, cover letter, and names and contact information for three references.

Equal Employment Opportunity Statement

Lafayette College does not discriminate, or permit discrimination, on the basis of race, color, national or ethnic origin, disability, religion, age, military or veteran status, sex, sexual orientation, gender identity or expression, marital or familial status, pregnancy, genetic information, or any other characteristic protected by law in any educational programs and activities it operates, including admissions or employment, as required by Title IX of the Educational Amendments of 1972 (which requires that the College not discriminate on the basis of sex); the Americans with Disabilities Act of 1990 and Section 504 of the Rehabilitation Act of 1973 (which require that the College not discriminate on the basis of disability); Title VI of the Civil Rights Act of 1964 (which requires that the College not discriminate on the basis of race, color, or national origin); Title VII of the Civil Rights Act of 1964 (which requires that the College not discriminate in employment on the basis of race, color, religion, sex, or national origin); the Age Discrimination Act of 1975 (which requires that the College not discriminate on the basis of age); and other applicable laws and College policies.