Information Technology Security Analyst

o Assist in the development, enhancement, and enforcement of IT security policies, procedures, and guidelines aligned with industry standards (NIST SP 800-53, ISO/IEC 27001).

o Implement and manage security configurations for on-premise (Linux and Windows) and cloud infrastructures (AWS, Azure, Google Cloud) ensuring alignment with compliance requirements.

o Conduct regular IT security risk assessments to identify, assess, and prioritize vulnerabilities, threats, and weaknesses across the organizations IT systems, networks, and cloud environments.

o Collaborate with teams to remediate security vulnerabilities and track the progress of corrective actions.

o Assist in managing security configurations and controls for cloud platforms, ensuring adherence to best practices (CIS benchmarks, NIST standards) and security policies.

o Evaluate and improve user access control mechanisms, including Role-Based Access Control (RBAC) and Privileged Access Management (PAM), to enhance security posture.

o Provide expertise in managing incident response processes, including root cause analysis, documentation, and implementation of corrective measures.

o Support data protection efforts through encryption, backup, and disaster recovery strategies, ensuring the security and availability of critical data.

o Assist in maintaining compliance with data security regulations and standards through governance, risk, and compliance (GRC) processes.

o Participate in internal and external audits, ensure documentation is up-to-date, and help address audit findings related to IT security.

o Support the design and execution of patch management processes, monitoring security agent performance to ensure consistent security across the environment.

o Assist in the development and delivery of security awareness programs, conducting training sessions to educate employees on IT security controls and emerging threats.

o Promote security best practices and ensure company-wide understanding of security risks and mitigation strategies.

o Assist in overseeing business continuity and disaster recovery planning processes, ensuring systems and procedures are in place to minimize the impact of security incidents on business operations.

o Prepare detailed reports and summaries of security assessments, audit results, and risk mitigation plans for internal stakeholders and senior management.

o Work closely with cross-functional teams, including IT, legal, and compliance, to address security issues and integrate security practices across all business units.

o Provide guidance and recommendations to technical teams for the remediation of identified risks and vulnerabilities.

18746