I.T. Security Analyst - Erlanger, KY

Job Description

I.T. Security Analyst – Decatur, IL; Erlanger, KY
This is an exempt level position. 

Position Summary:
The Information Technology Analyst is a member of the Security Engineering team and be responsible for ensuring the security of information systems assets, to protect systems from intentional or inadvertent access or destruction.

Job Responsibilities:

• With minimum supervision review firewall and proxy requests and evaluate for adoption to ensure that they conform to current security best practices and current security policy with a focus on layer 3 and 4 of the TCP/IP framework.
• Ability to assess business and technical requests and evaluate the risk to ensure effective and pragmatic security mitigations are in place or work with requestor to provide remediation requirements to meet the business objectives.
• Represent the Global Information and Cyber Security (GICS) function in change and incident processes, evaluate for adoption to ensure that they conform to current security best practices and current security policy.
• Involve senior security analyst and engineer peers in circumstances where there is uncertainty in the approach or decision evaluating Service Now tickets, particularly Incident and Change requests.
• Clear understanding of the GICS policies and procedures maintained on the GICS Policies and Standards web site.
• Establish and continually evolve the ongoing processes and procedures for Global firewall and proxy change requests.
• Use ticketing system for documenting and processing requests and incidents in which GICS is involved.
• Use existing tools and procedures to verify IT infrastructure and applications are compliant to IT Policy; apply network & server administration skills and knowledge to guide system level administrators in IT Policy compliance
• Articulate impact and requirements of IT assets as it relates to requests and involve more senior level team members at appropriate times for recommendations on approval decisions.
• Support the Vulnerability Remediation program
  • Conduct and interface with Attack Surface Management team on assessments and administrative audits on computer systems and network devices as part of request and approval process.
  • Schedule, coordinate, and track the remediation of open vulnerabilities for assets owned by GICS.
  • Coordinate the assignment of vulnerabilities for assets owned by GICS applications and tools to the respective teams for resolution.
  • Monitoring of metrics and performance indicators for the vulnerability remediation program, including reports to the appropriate management and team members.
• Assist overall Global Information and Cyber Security (GICS) functions as directed.
• Must display enthusiasm and interest in IT Security

Other Specific Job Tasks
ITSM – Service and Incident Request tasks

• Vulnerability Item reviews
• New software request – software sandboxing
• Network Security – New and Change
  • Firewall
  • Proxy

Other Global Information and Cyber Security Tasks

• Participate, review, and evaluate risk, and provide security recommendations in the Change Review process for requests sent to GICS
• Perform Application vetting (Business and OT)
• Assist with the update of operational and technical documentation

• Job Requirements:
• Two-year degree in an IT related field or equivalent IT work experience
• 2+ years’ experience in Information Security
• 2+ years’ experience in Information Technology
• Both strong oral and written communications skills
• Ability to communicate and collaborate effectively with other team members in a geographic and culturally diverse workforce  
• Ability to translate technical information to business language
• Functional experience in ITIL processes
• Functional experience in Service Desk platforms (Service Now, SOC Module)
• Maintain to exceed Service Level Objective and Service Level Agreements with customers, partners, and stakeholders.
• Expected to work occasional nights, weekends, holidays, and overtime
• Expected to perform on-call duties
• Ability to respond to critical incidents 24/7
• Strong sense of professionalism and ethics

Before applying for an exempt, non-exempt or hourly job opportunity, you are expected to initiate a discussion and share your intentions with your supervisor.  * If you’ve been in your current position for more than 18 months, supervisor approval is not required.  * If you’ve been in your current position for less than 18 months, verbal supervisor approval is required.   ​
Hiring Manager- David Fry