Security Analyst

Security Analyst

  Not Disclosed

  Madison, WI (100% Remote)

  7 Months

  Not Disclosed

  Not Disclosed

  Government - State

  $-4/hour - $1/hour

Job Description

Position onwards will be remote. May be required to come into the office for special needs. In the past 2 years, staff has only been in office 1 time.

Description:


POSITION SUMMARY

Security Analyst II

Under general supervision of the Security & Accounts Management Manager, this position works as a part of the Security & Accounts Management team and is responsible for provisioning and de-provisioning access to client networks, resources and applications. This position maintains a high level of security by following all client and enterprise security policies and procedures. This position requires strong interpersonal skills, multi-tasking skills, time management, and the ability to execute projects and solve complex problems. Technical support responsibilities require expertise of multiple platforms, operating systems and various security software systems.
This position shall comply with the client’s administrative rules and the client’s policies and procedures including those related to the client's overall Reentry philosophy of using evidence-based strategies, practices and programs which target an offender’s individual criminogenic needs and risk level.

TIME% GOALS AND WORKER ACTIVITIES

50% A. Coordination of the account provisioning, de-provisioning, projects and maintenance for client platforms and applications.
A1. Utilize security rules to grant / revoke access to applications, servers, group folders, etc.
A2. Coordinate activities within the account management staff to provide timely response to customer requests.
A3. Create and maintain security rules, ensuring that they enforce security standards and policies.
A4. Coordinate and handles projects relating to or involving account management functions.
A5. Create Email accounts, distribution lists and group mailboxes.
A6. Inform all customers of security procedures for applications, requests and services offered by account management.
A7. Identify customer problem areas where additional education / training is needed.
A8. Coordinate account management activities as needed across other agencies.
A9. Recommend and provide updates to procedural documentation.
A10. Provide timely resolution for customer access issues and formal requests.
A11. Participate in system / application integration planning, testing and troubleshooting of access issues.
A12. Work closely with project teams to determine application, server, folder, group and individual user access to systems.

15% B. Assist in the adherence and implementation of policies, standards and procedures for all areas of IT Security.
B1. Implement the standards and training requirements for IT Security administration.
B2. Coordinate the implementation of department-wide policies, procedures and standards for applications and platforms and ensure client-wide standardization.
B3. Supports the implementation of department-wide Security Awareness training program. - Support functions.
B4. Act as liaison to resolve security-related issues with other client in a timely manner.
B5. Assess and recommend updates to security policies, procedures and standards.
B6. Supply information required in LAB and client audits as required.
B7. Recommend automation techniques to eliminate manual procedures.
B8. Provides support of Cybersecurity activities – Creates, improves, and maintains policies, procedures and standards.

15% C. Monitoring, auditing and analysis of security systems.
C1. Provide advice to management on implementing and monitoring Security systems.
C2. Provide advice to client in the design and implementation of policies and procedures to provide an acceptable level of Security systems.
C3. Identify threats or serious issues regarding user access that may be caused by added new software and systems.
C4. Perform audits of security on access.
C5. Security Risk mitigation – Identify potential security risks to the organization and provides recommendations to management.
C6. Working with management to reduce and mitigate risk to the organization.

10% D. Performance of other job-related activities and special assignments.
D1. Identify areas that need improvement and work with sections supervisor to lay down the ground work to implement these improvements.
D2. Audit access to numerous applications used by the client to ensure users are not over provisioned.
D3. Update staff development plans as changes occur and work with management on career objectives.
D4. Attend presentations, conferences and seminars as directed.
D5. Identify training needs and request approval to attend.
D6. Perform other duties as assigned.

10% E. Assist IS Technical Services Consultant/Admins and/or Specialist with their responsibilities.
E1. Coordinate Security for internal systems i.e. (WICS, DEVSECOPS, Email systems)
E2. Perform Audits on EMR access as well as adding security rights through back EMR systems.
E4. Perform other duties as assigned.

Job Knowledge, Skills & Abilities

1. Knowledge of current client hardware and software architectures.
2. Knowledge of network concepts.
3. Knowledge of Windows network environments.
4. Advanced knowledge of Active Directory and group privileges.
5. Knowledge of all client security standards, policies and procedures.
6. Experience working with security issues in a distributed computing environment.
7. Knowledge of network operating system security issues.
8. Knowledge and demonstrated work experience with internet / intranet application security issues (e.g. LDAP).
9. Advanced problem-solving skills and the ability to make independent judgment decisions or contact appropriate parties to assist.
10. Effective oral and written communication skills.
11. Knowledge of effective people communication skills.
12. Knowledge of project planning.
13. Knowledge of products and applications, in order to create effective security roles.
14. Ability to multi-task.
15. Ability to expedite issues in a timely manner.
16. Customer focused, yet firm enough to ensure strict compliance to client security policies and procedures.
17. Knowledge and demonstrated work experience with security techniques, tools and security infrastructure.
18. Ability to communicate clearly and effectively to both technical peers and less technical customers in person and via written media such as e-mail, reports and project charters.



Experience with these skills is a bonus:

Perform audits of security on access.
Security Risk mitigation – Identify potential security risks to the organization and provides recommendations to management.



Notes:


1st Day in the office will be in the office for Equipment pickup. Position onwards will be remote. May be required to come into the office for special needs. In the past 2 years, staff has only been in office 1 time.