Information Security Analyst

POSITION TITLE: Information Security Analyst

REPORTING RELATIONSHIP: IT Manager

PAY STRUCTURE: Salary

PURPOSE OF THIS POSITION:            The Information Security Analyst supports the security and integrity of the company's information systems and data. This position monitors and investigates security events, supports vulnerability and access management, assists with data loss prevention and compliance activities, and helps administer security controls associated with enterprise systems and approved AI technologies. The position also supports employee security awareness and the development and maintenance of information security and AI governance practices.

.

BACKGROUND PREFERRED:

• Bachelor's degree in Cybersecurity, Information Systems, or related field, or equivalent experience.
• 2+ years in security operations, IT administration, or a related analyst role.
• Familiarity with SIEM/EDR tools and Microsoft 365 security and compliance tools, including Purview and Entra ID.
• Experience with, or a demonstrated interest in, generative AI tools and their associated data-governance risks.
• Industry-recognized certifications are preferred, such as CompTIA Security+, CySA+, or relevant Microsoft Security or AI certifications.

DUTIES AND RESPONSIBILITIES:

• Monitor SIEM, EDR, IDS, and other security-related events; triage, investigate, document, and escalate incidents.
• Run phishing simulations and security awareness training for employees.
• Review user access events, including privileged account access and security logs on a regular schedule.
• Administer enterprise AI platforms, including approved generative AI tools; review licensing, settings, connectors, token usage, and permissions; configure and monitor AI tools to restrict access to authorized information.
• Monitor and assist in DLP design and implementation, including the assessment of sensitivity labels and access controls.
• Assist in the drafting and maintenance of the AI acceptable-use policy and review requests for new AI tools and vendors.
• Assist with vulnerability remediation, audits, and collection of compliance evidence.