Information Security Analyst (Remote)

PRIMARY OBJECTIVE

Reporting to the Exec Dir-Information Security, the Information Security Analyst maintains and utilizes Information Security systems and tools to protect data from unauthorized access and identifies and reports security violations. This person will perform information security duties throughout the organization, including monitoring and reporting of vulnerabilities and suspicious network activity, resolving antivirus and malware issues, as well as providing or analyzing and interpreting various security logs and reports. Performs related remote duties as required.

ESSENTIAL DUTIES

• Remotely monitors and protects on-site and off-site data confidentiality, integrity and availability.
• Supports IT teams and end users in resolution of information security and antivirus issues.
• Detects attacks, investigates incidents and account compromise indicators, and reports violations to protect data, systems, and accounts.
• Collects, monitors, and interprets information from various systems, logs and monitoring solutions.
• Helps with phishing simulation campaigns and training victims of simulated and real scam attacks.
• Proactively contributes to Information Security policies, procedures, and guidelines.
• Assists with internal and external Information Security audits of variable scope.
• Remotely assists with vulnerability scanning and penetration testing.
• Performs other related remote duties as assigned.

REPORTING RELATIONSHIPS

Reports To Executive Director-Information Security

Direct Supervision None

QUALIFICATIONS

• Associate’s degree in a technical field from an accredited college or university. Bachelor’s degree preferred.
• Broad IT background and expertise
• Employees working remote are responsible for providing a stable internet environment with a connection speed of at least 300 megabytes per second (Mbps).
• Strong verbal and written communication, interpersonal, and analytic skills
• 4 years of experience in Information Technology including 2 years of network and/or system and desktop administration experience outside of information security focus
• 1 year of experience in information security, or in computer networking and security
• Understanding of basics of networking and communication and encryption protocols, antivirus, patch management and file systems
• Experience with network discovery, vulnerability scanning, and penetration testing tools and techniques preferred but not required
• Demonstrated experience with Microsoft Active Directory, Office 365, Azure and Windows environment, macOS, Android and iOS
• Ability to identify, analyze, and neutralize IT security threats and to prioritize security issues
• Ability to follow and update documentation

• Must be self-directed and able to prioritize work. Must be able to meet deadlines in a timely manner. Familiarity with NIST cybersecurity framework preferred but not required
• Cybersecurity and IT network certifications preferred but not required
• Must be able to work some varied hours including late afternoons, nights, weekends or holidays during scheduled maintenance windows or emergencies
• Must be a resident of Chicago within 6 months of being hired

Approved by Compensation Design & Strategy Date: March 28, 2023

The intent of this job description is to provide a general description of the duties and responsibilities of this position. It is not intended to be an exhaustive set of the duties and responsibilities, nor all of the necessary qualifications to perform the work.