Information Security Analyst

Title:                             Information Security Analyst

Reports to:                 Director, Information Technology

Job Summary:            The Information Security Analyst collaborates with the Information Technology department to improve overall security by implementing policies, procedures, and practices to audit, assess, and mitigate risk within Heritage IT systems. Under the direction of the Information Security Engineer, the Analyst supports the operational goals of the Heritage Information Security team. 

Job Duties:

• Network Security: Collaborate in creating and deploying network and perimeter security.
• Vulnerability Management: Manage the entire vulnerability lifecycle including discovery, triage, remediation, and validation.
• Access Control: Manage and execute access controls and reviews.
• Identity Management: Manage solutions that control access to information systems.
• SIEM Management: Maintain, configure and monitor the SIEM platform.
• Vendor Risk Management: Execute vendor risk assessment procedures.
• Inventory Management: Maintain hardware and software inventories and control installation and updates.
• Incident Response: Execute incident response plans for security incidents.
• Compliance: Assist in complying with regulatory requirements and industry standards.
• Management Reporting: Provide updates to management on security metrics, team activities, project status and incident response.
• Security Training: Develop and deliver security awareness training and simulations. Maintain individual awareness of industry best practices.
• Security Consulting: Advise internal staff and external partners on information security topics.
• Technical Support: Troubleshoot and resolve information technology and information security-related issues.

Qualifications:

Education:                  BS in Computer Science, Systems Engineering, Cybersecurity, Information Technology, or equivalent experience including industry recognized security certificates strongly preferred

Experience:                 3+ years of experience in an information technology role, at least 2 of which should be in an information security role.

Communication:         Strong verbal and written communication skills

Technology:                Industry leading detection and response suites (XDR/EDR), SIEM platforms, and cloud platforms

Other Requirements:           

• Understand and support the Heritage mission and vision for America, and the department’s goals and objectives.
• Strong time management, prioritizing tasks and delivering measurable results.
• Ability to adapt with quickly evolving technologies and programs.
• Strong troubleshooting, technical, and analytical skills.
• Ability to maintain strict confidentiality.
• Detail-oriented with a keen sense of follow-through.
• Ability to support on-call responsibilities as assigned including occasional after-hours work.

Benefits and Salary:

The Heritage Foundation offers a highly competitive benefits package that includes, but is not limited to, best-in-class health care, vision, and dental insurance, employer-sponsored retirement funding, “take what you need” PTO and sick leave, 14 weeks of paid leave for new moms and 6 weeks of paid leave for new dads, among other programs.

The salary range for this role is $85,000 - $100,000 annually. This range is a good faith estimate, and the final salary offered to a selected candidate depends on a variety of factors including, but not limited to, the candidate’s experience, education, and other qualifications; internal and external market pay for comparable jobs; and level of hire based on aforementioned qualifications.