Senior Cybersecurity Analyst

About the Role

Under the general supervision of the Chief Information Officer (CIO) and Deputy Director of Information Technology, the Senior Cybersecurity Analyst oversees and manages the organization’s information security, ensuring that all systems are secure, policies are enforced, and the organization remains compliant with applicable laws and regulations. This role involves developing, implementing, and maintaining a comprehensive cybersecurity program that protects sensitive data, critical infrastructure, and information systems from internal and external threats while aligning security initiatives with organizational objectives and industry best practices.

The Senior Cybersecurity Analyst assesses and manages risk, monitors and responds to security incidents, oversees vulnerability management and security tools, and ensures timely remediation of identified issues. The role works closely with IT staff, leadership, and other stakeholders to integrate security across all technology operations, enforce security policies and standards, support audits and compliance efforts, and promote security awareness and training.

Responsibilities

• Leadership & Strategy
  • Develop, implement, and manage the company’s cybersecurity strategy to align with business goals.
  • Lead the cybersecurity team, providing guidance and expertise to ensure effective operation and collaboration across departments.
  • Ensure organizational compliance with relevant laws, regulations, and standards, such as CJIS, GDPR, CCPA, ISO/IEC 27001, and NIST.
  • Advise executive leadership on potential security risks and strategies for mitigation.
• Security Operations
  • Monitor, evaluate, and update the organization’s cybersecurity framework.
  • Oversee threat detection, incident response, and vulnerability management processes.
  • Manage and respond to security incidents, including investigation, mitigation, and documentation.
  • Implement and enforce data protection, access control, and risk management policies.
  • Collaborate with IT teams to ensure secure configuration and deployment of IT systems and applications.
• Risk Management
  • Conduct regular security risk assessments, audits, and penetration tests to identify vulnerabilities and gaps.
  • Implement risk mitigation plans and ensure appropriate security measures are in place for all IT projects.
  • Maintain up-to-date knowledge of cybersecurity trends, tools, and regulatory changes.
• Training & Awareness
  • Create and deliver cybersecurity awareness training for employees.
  • Develop security best practices and guidelines for internal teams to ensure data integrity and privacy.
  • Promote a culture of security awareness across the organization.
• Additional Job Functions
  • Office-based role with occasional travel for conferences, training, or vendor meetings.
  • On-call availability for urgent security incidents or breaches.
  • Performs related duties as required.

Qualifications

• Education & Experience
  • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. A master’s degree is a plus.
  • 5+ years of experience in cybersecurity.
  • Experience with security management frameworks such as ISO/IEC 27001, NIST, CIS, or equivalent.
  • Hands-on experience with security tools (firewalls, IDS/IPS, SIEM, encryption, etc.).
• Certifications (Preferred)
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Security Manager (CISM)
  • Certified Ethical Hacker (CEH)
  • GIAC Security Essentials (GSEC)
• Other Requirements
  • Must have a valid driver’s license, clean driving record, and be able to pass an FBI/CJIS fingerprint and background check.

Skills

• Strong leadership and team management skills.
• In-depth knowledge of cybersecurity principles, techniques, and protocols.
• Excellent problem-solving and analytical skills.
• Ability to handle high-pressure situations and make sound decisions quickly.
• Strong communication skills to interact effectively with technical teams, business leaders, and non-technical stakeholders.

Physical Requirements

• Tasks require the ability to exert very moderate physical effort in light work, including some combination of stooping, kneeling, crouching, and crawling.
• May involve lifting, carrying, pushing, or pulling objects and materials of moderate weight (up to 20 pounds) and occasionally heavier weight (up to 40 pounds).
• Tasks may involve extended periods at a keyboard or workstation.

Requires the ability to:

• Compare and judge data, people, or things based on observable characteristics.
• Speak and signal people to convey or exchange information, including receiving direction and instruction from supervisors.
• Read policies, procedures, technical manuals, and diagrams, and prepare technical reports with proper format, punctuation, spelling, and grammar.
• Apply logical thinking to define problems, collect data, establish facts, and draw valid conclusions.
• Record and deliver information, explain procedures, and follow oral and written instructions.
• Perform mathematical calculations, including addition, subtraction, multiplication, division, percentages, and decimals.
• Inspect items for proper length, width, and shape, and visually read various information.
• Coordinate hands and eyes using office machinery and handle various items such as keyboards, office equipment, and tools.
• Differentiate colors and shades, and maintain visual acuity for depth perception, peripheral vision, and inspection of small parts.
• Deal with people beyond giving and receiving instructions, adapt to performing under stress, and handle emergencies or tight deadlines.
• Talk and hear (expressing ideas using spoken words and perceiving sounds by ear).

Performance Indicators

• Knowledge of the Job
  • Thorough understanding of methods, procedures, and policies of the Information Technology Department.
  • Knowledge of laws, ordinances, standards, and regulations related to cybersecurity.
  • Proficiency in computer technology, information systems management, and data processing.
  • Ability to design and implement computer applications to meet business needs.
  • Skill in the care and use of required tools and equipment, including minor adjustments and repairs to computer hardware.
  • Knowledge of occupational hazards and safety precautions.
• Quality of Work
  • Maintain high accuracy standards in all duties and responsibilities.
  • Take immediate remedial action to correct quality deficiencies.
  • Maintain high-quality communication and interaction with internal and external entities.
• Quantity of Work
  • Perform assigned duties efficiently and effectively to meet established standards.
• Dependability
  • Assume responsibility for completing assigned work within deadlines.
  • Maintain accountability for technical, human, and conceptual duties.
• Attendance
  • Attend work regularly and adhere to policies regarding absenteeism and tardiness.
  • Provide adequate notice for vacation time and leave requests.
• Initiative and Enthusiasm
  • Maintain a self-reliant and self-starting approach to meet job responsibilities.
  • Anticipate work to be accomplished and initiate proper action with minimal supervision.
• Judgment
  • Exercise analytical judgment in areas of responsibility.
  • Identify issues and specify decision objectives, seeking expert advice when appropriate.
• Cooperation
  • Accept supervisory instruction and direction, and strive to meet goals and objectives.
  • Offer suggestions to improve cooperation intra- and inter-departmentally.
• Relationships with Others
  • Share knowledge with managers, supervisors, and co-workers for mutual benefit.
  • Contribute to maintaining high morale among employees.
  • Develop and maintain cooperative and courteous relationships with internal and external entities.