Job Detail: IT Security Analyst

Description:

• Assess and Mitigate Security Risks: Evaluate and coordinate IT-related security risks, working closely with senior management to develop strategies and technology solutions for mitigating these risks.
• Intrusion Detection and Response: Identify and respond to potential, successful, and unsuccessful intrusion attempts and compromises, maintaining the integrity of IT environment.
• Security Audits: Conduct regular audits, potentially with third-party assistance, to verify secure system operations and compliance with security policies and procedures.
• Security Solution Recommendations: Propose and recommend security tools and budgets necessary to fortify our organization's IT security.
• Vulnerability Assessments: Conduct vulnerability assessments and report on IT security risk levels to management for informed decision-making.
• Cross-Platform Expertise: Lead IT security efforts across various environments, including Corporate, SCADA, mobile, and cloud, ensuring comprehensive protection.
• Endpoint Security: Review security profiles for all endpoints, including servers, clients, mobile devices, and cloud resources.
• Third-Party Coordination: Act as the primary contact for third-party security operations center partners and assess the risk of third-party technologies.
• Security Training and Awareness: Facilitate the Company's security training program and provide education on remedial security processes for staff.
• Policy Management: Document and manage IT Security Policies, keeping them accurate, effective, and up to date.
• Regulatory Compliance: Promote awareness of applicable regulatory standards, risks, and industry best practices, ensuring compliance with guidelines.
• Project Leadership: Lead security-related projects, from solution validation to implementation.

• Bachelor's Degree in Information Systems, Computer Science, or Information Security (or equivalent experience).
• 5 years of IT security or information security experience, with a demonstrated ability to engage with senior management and regulators.
• 3+ years of experience conducting IT compliance assessments (Sarbanes-Oxley, NIST, etc.).
• 3+ years of experience administering IT security controls in an organization.
• Proficiency in technical infrastructure, networks, databases, and IT security technologies.
• Certification: Certified Information Systems Security Professional (CISSP) or equivalent.
• Experience with IPS/IDS, SIEM, IAM, and Single Sign-On systems.
• Experience in managing virtual environments.
• Previous experience in a publicly traded organization.
• Strong communication and time management skills.
• Quick learner with the ability to work independently or in a team.

• Upstream Oil and Gas business knowledge.
• Knowledge of SOX.
• Project management skills.
• Proficiency in Windows workstation and server administration.
• Experience performing security reviews and risk assessments.
• Familiarity with IOT and SCADA systems.