Senior Information Security Analyst

Business Need & Goal

• Cloud first initiatives and new IT projects including O365, Egnyte, and AI result in a resource gap to meet NYS ITS Policy.
• Information Security is unable to keep up with our current workload while adding new IT projects like O365 and Egnyte. We need a senior IS position to ensure NYS ITS policy requirements and layered security is properly implemented and maintained as these systems are rolled out.

Required experience

• 8-10 years

Required Skills

• Proven knowledge of security certifications (e.g., CISSP, CISA, CISM, GPEN, GWAPT, GCIH, GIAC certifications, OSCP, CEH, Security+).

Special Skills

• Working knowledge of information security, risk management, security architecture, computer networks, incident response, and vulnerability management.

Education requirements

• Bachelor's degree in cyber security, information assurance, or information technology. 2-4 years of dedicated security experience.

IT Systems used

• Microsoft Suite

Tasks

• Manage security operations tasks related to identity and access management, including incident response recommended solutions.
• Lead the development and implementation of the IAM strategy aligned with business objectives and regulatory requirements in conjunction with security policy.
• Support, design, and documentation for IAM architecture, identity governance, and role-based access control.
• Manage security operations tasks related to identity and access management, including incident response recommended solutions.
• Identify and rectify gaps within current infrastructure as it relates to onboarding and offboarding personnel. Ensure IAM processes comply with industry standards (NIST, ISO, CIS, NYS ITS) and internal policies developed by the ISO.
• Conduct regular audits and assessments to identify vulnerabilities and ensure compliance.
• Assess current applications and architecture to ensure implementations align with identity-first security strategies, best practices, and approved standards.
• Define integration methodologies for IAM solutions with existing and onboarding applications, including cloud services, on-prem systems, and third‐party applications (Entra ID, Azure, on‐prem Active Directory, etc).
• Work closely with other teams within IT to ensure fluid cohesiveness.
• Other duties as assigned that contribute to the key outcomes of the Infromation Security team

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.