Cyber Security

This Cyber Security Analyst position will be located onsite in Dowagiac, MI. A hybrid schedule could be considered after 3-6 months of employment.

Commitment to Citizen Service

Service encompasses all aspects of the Pokagon Band of Potawatomi Indian’s governmental operations. Every employee shares responsibility for providing exemplary service, dignity, and respect to all Tribal Citizens, the Tribal Council, and staff members. To this end, all employees have an obligation to identify and report any service problems, issues, or concerns and, through designated channels, initiate, recommend, and actively participate in solutions.

Position Summary

To lead the organization’s information-security governance, risk, and compliance functions and keep the Band’s proprietary and sensitive information secure. Works inter-departmentally to identify and correct flaws in the organization’s security systems, policies, and programs and recommends specific measures to improve the overall security posture. Responsible for ensuring that the Band’s digital assets are protected from unauthorized access through strong governance, risk management, and compliance practices. This includes assessing security posture across both online and on-site infrastructures, analyzing security monitoring logs and SIEM data for incident investigation and root-cause analysis, and identifying and mitigating risks before breaches occur. If a breach does occur, this role leads incident-response coordination and post-incident review. This is a governance, risk, and compliance (GRC) role focused on assessment, audit, policy, and oversight across the organization; it is distinct from the hands-on, day-to-day network-security operations performed by the Network Operations & Security Analyst, with whom this role coordinates closely.

Tier Definitions & Essential Functions

The Cyber Security Analyst is a tiered position. The core mission—leading the Agency’s information-security governance, risk, and compliance (GRC) functions to protect its digital assets—remains the same at every tier. What distinguishes the tiers is the level of complexity, independence, scope of impact, and leadership the analyst brings to that mission. Each tier is defined below, followed by the essential functions performed at each tier.

Tier I – Assess & Report. Reliable execution of security assessment and reporting under guidance. Conducts risk assessments and vulnerability and risk analysis, performs internal audits, analyzes security logs and breaches for root cause, and generates compliance and policy-efficacy reports; supports HIPAA, CJIS, and NIST compliance; works under close to moderate supervision and is responsible for assigned assessment and reporting tasks

Tier II – Audit & Advise. Independent ownership of audits, vendor risk, and the risk register. Owns internal, external, and compliance audits; manages third-party and vendor security risk; maintains the security risk register and tracks remediation; commissions offensive security testing; develops and delivers security training; advises departments on security posture; works independently with minimal supervision and may guide Tier I analysts.

Tier III – Govern & Lead. Organization-wide security governance, policy authority, and program leadership. Develops, maintains, and enforces security policies, standards, and strategy; owns the incident-response and disaster-recovery program; sets the compliance framework and represents security governance across the organization; operates with full autonomy, leads major GRC initiatives, and mentors Tier I and II analysts.

Tier Coverage & Flexibility

The tiers are cumulative. Each tier encompasses and remains responsible for all functions of the tiers below it; a specialist at a higher tier can and does perform lower-tier work as operational needs require. Functional coverage of the lower tiers therefore does not require a separate employee at each tier—a single analyst at any tier provides coverage for that tier and all tiers beneath it.

Coverage is also flexible upward

an analyst at a lower tier may be assigned appropriate higher-tier supporting tasks—such as conducting research or assisting with audits and assessments—with manager approval, as both a development opportunity and a means of distributing workload across the team.

The tiers describe how an individual advances over time and how the team provides coverage across the full range of functions; they are not a requirement to staff one full-time employee per tier. The Agency may provide complete functional coverage with fewer employees than there are tiers.

Essential Functions by Tier

Tier I – Assess & Report

• Accessing and analyzing security monitoring logs and SIEM data for incident investigation, root-cause analysis, and program oversight.
• Conducting and overseeing security risk assessments, including vulnerability and risk analysis, and tracking remediation across the organization.
• Analyzing security breaches to identify the root cause.
• Assist with security compliance audits.
• Generate reports to evaluate the efficacy of security policies in place.
• Support regulatory and framework compliance, including HIPAA, CJIS, and applicable NIST standards.

Tier II – Audit & Advise (will also include):

• Performing both internal and external security audits.
• Verifying the security of third-party vendors and collaborating with them to meet security requirements.
• Maintaining a security risk register and tracking risk treatment and remediation across the organization.
• Conduct and commission offensive security testing—including penetration testing, exploit validation, and external reconnaissance—to identify and validate the organization’s exposure, coordinating execution with the network-security operations team.
• Create training programs to educate employees on proper security protocols.

Tier III – Govern & Lead (will also include):

• Develop, maintain, and enforce information-security policies, standards, and procedures.
• Continuously update the company’s incident response and disaster recovery plans.
• Perform other related tasks as required.

Non-Essential Functions

• Function as an on-call support resource as needed.
• Perform other related functions as assigned.

Position Requirements

This section defines the qualifications for each tier—education, experience, certification, and demonstrated competencies. The same criteria serve both as the requirements to hold a tier and as the gates to advance into it. A candidate may be hired directly into any tier whose education, experience, and certification requirements they meet; the demonstrated-competency items then apply to advancement from that tier. Tier advancement must be verified and approved in writing by the IT Director and Government Manager, and each demonstrated competency must be observed and documented by the employee’s supervisor.

Tier I – Assess & Report (PB-10)

Education

Bachelor’s degree in Information Technology, Computer Science, or a related field from an accredited institution recognized by the Council for Higher Education Accreditation or the U.S. Department of Education.

Experience

Two (2) years of experience in a cyber security role, or a combination of education and experience that corresponds with the requirements of the position.

Certification

CompTIA Security+ or GSEC.

Skills & knowledge

Familiarity with security technologies—including firewalls, intrusion detection and prevention systems (IDS/IPS), security information and event management (SIEM), endpoint protection, and compliance management—sufficient to assess, audit, and govern their use; strong written and oral communication, project-management, and service skills; ability to communicate information to staff and users clearly and concisely; knowledge, intellect, temperament, and flexibility to work effectively in a fast-paced environment.

Other

Ability to work evenings and occasional weekends.

Tier II – Audit & Advise (PB-12)

Experience

Minimum four (4) years total experience in a cyber security or GRC role.

Certification

CISA or CRISC.

Demonstrated competencies

Independently conducted risk assessments, internal audits, and breach root-cause analysis for at least six (6) consecutive months; produced accurate compliance and policy-efficacy reports; demonstrated working knowledge of HIPAA, CJIS, and NIST requirements.

Tier III – Govern & Lead (PBB-1)

Experience

Minimum six (6) years total experience in a cyber security or GRC role.

Certification

CISSP.

Demonstrated competencies

Owned internal, external, and compliance audits; managed vendor security risk and the risk register; commissioned offensive security testing; developed and delivered security training; led or co-led at least one GRC initiative; provided documented guidance or mentoring to a Tier I analyst.

Ongoing senior responsibilities

Develops, maintains, and enforces security policies, standards, and strategy; owns the incident-response and disaster-recovery program; sets the compliance framework; represents security governance organization-wide; mentors Tier I and Tier II analysts.

Indian Preference

• Pokagon Band Preference Code applies.

Physical Requirements

• Work is generally sedentary in nature and will frequently require sitting; however, standing, walking, and light lifting will be necessary.
• Frequently required to use hands and fingers to operate equipment and reach with hands and arms.
• Frequently required to talk and hear.
• Occasionally required to stoop, kneel, crouch, bend, and crawl.
• Occasionally required to lift and/or move up to 30 pounds.

Work Environment

• General office environment. Lighting and temperature are adequate, and there are no hazardous or unpleasant conditions caused by noise, dust, etc.
• Local travel is necessary, so the ability to travel as needed is required.

Competencies

• Continuous Learning
• Analytical Thinking
• Problem Solving
• Project Management
• Quality Focus
• Achievement Orientation