MANIILAQ ASSOCIATION

10/22

Title:  IT Security Analyst I/II/III                                                                                                          Range: 15/16/17

Program:  Information Technology                                                                                                        Status: Non-Exempt

Housing Priority: None                                                                                                                      Covered: Yes

POSITION SUMMARY

The IT Security Analyst’s role is to ensure the secure operation of the Maniilaq Association’s computer systems, servers, and network connections.  This includes checking server and firewall logs, scrutinizing network traffic, establishing and updating virus scans, and troubleshooting.  This person will also analyze and resolve security breaches and vulnerability issues in a timely and accurate fashion, and conduct user activity audits where required. Report potential security breaches to IT Director, CIO & President/CEO.

PRINCIPAL DUTIES AND RESPONSIBILITIES

1.  Deploy, manage and maintain all security systems and their corresponding or associated software, including firewalls, intrusion detection systems, cryptography systems, and anti-virus software.

2.  Develop, implement, maintain, and oversee enforcement of policies, user system access based on industry-standard best practices & End user Training.

3.  Design and implement disaster recovery plan for operating systems, databases, networks, servers, and software Applications..

4.  Manage connection security for local area networks, Maniilaq’ s Web site, Maniilaq intranet, Multifactor Authentication MFA, Sophos, Proof point, Data Encryption and e-mail communications.
5.  Manage and ensure the security of databases and data transferred both internally and externally.
6.  Design, perform, and/or oversee penetration testing of all systems in order to identify system vulnerabilities.
7.  Design, implement, and report on security system and end user activity audits.
8.  Monitor server logs, firewall logs, intrusion detection logs, and network traffic for unusual or suspicious activity. Interpret activity and make recommendations for resolution.

9.  Recommend, schedule (where appropriate), and apply fixes, security patches, disaster recovery procedures, and any other measures required in the event of a security breach.

10.  Assess need for any security reconfigurations (minor or significant) and execute them if required.
11.  Recommend, schedule, and perform security improvements, upgrades, and/or purchases.
12.  Provide on-call security support to end-users.

MINIMUM REQUIREMENTS

IT Security Analyst I:

College diploma or university degree in the field of computer science or three years equivalent work experience.  Certifications in Microsoft, Network +, and A+ preferred.  Broad hands-on knowledge of firewalls, intrusion detection systems, anti-virus software, data encryption, and other industry-standard techniques and practices preferred.  In-depth technical knowledge of network, PC, and platform operating systems.  Strong knowledge of TCP/IP and network administration/protocols.  Hands-on experience with devices such as hubs, switches, and routers.  Knowledge of HIPPA laws relating to data privacy and protection.  Ability to conduct research into security issues and products as required.  Ability to effectively prioritize and execute tasks in a high-pressure environment.  Experience working in a team-oriented, collaborative environment.

IT Security Analyst II:

All requirements of IT Security Analyst I.  College diploma or university degree in the field of computer science or four years equivalent work experience.  Certifications in Cisco security.

IT Security Analyst III:

All requirements of IT Security Analyst II.  Certifications in MCSE and Security +.

DISCLAIMER

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job.  They are not intended to be considered an exhaustive list of all responsibilities, duties and skills required of personnel in this job, and the employer reserves the right to revise or change this description.  This description does not constitute a written or implied contract of employment.  To perform this job successfully, an individual must be able to satisfactorily perform each of the above essential duties and meet physical demands.  Reasonable accommodations may be made to enable individuals with disabilities to meet those conditions.