Information Security Analyst 2

How you'll make an impact

Governance:

• Assist in the development and enforcement of security policies, standards, and procedures, considering the implications of AI in security.

• Ensure that resource owners/users are aware of security policies and standards.

• Participate in efforts to ensure security policies align with business objectives and address emerging technologies like AI.

Risk Management:

• Assist in protecting the integrity, availability, and confidentiality of network resources and data, including data processed by AI systems.

• Participate in network, system, and application vulnerability assessments, including those involving AI-driven systems, generate report findings, and oversee remediation activities.

• Perform or coordinate control testing, assessments, and monitoring to ensure that Information Technology processes and controls are effective, functioning as designed, and managed to the appropriate level of risk, with specific attention to AI-related risks.

• Participate throughout the system development life cycle and system acquisition and implementation initiatives, assessing the security implications of AI integration.

• Assist in maintaining a systematic process for managing information security risks and facilitate business unit risk assessments, including risks associated with AI.

Compliance:

• Ensure audit trails, system logs, and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements, including those from AI systems.

• Participate in the monitoring and periodic testing of IT compliance controls to ensure ongoing adherence to internal policies, standards, and industry frameworks for both cloud and on-premise solutions, including compliance of AI-driven security tools and processes.

• Coordinate IT self-assessment compliance reviews based on regulatory, industry standards, and internal policy requirements, considering AI governance and compliance.

• Perform necessary due diligence activities to determine third-party adherence with IT compliance requirements prior to establishing a business relationship, with consideration for their use of AI in security.

• Research and respond to internal and external audit findings, addressing AI-related security controls and data handling.

• Manage or coordinate periodic user access reviews with other departments and review the appropriateness of user activities, including access to and use of AI security tools.

Security Dashboarding:

• Develop and maintain security dashboards to provide real-time visibility into the organization's security posture, including metrics related to AI security and compliance.

• Present actionable insights from security data to relevant stakeholders, identifying trends and potential areas of risk.

Training and Awareness:

• Assist in providing guidance and support to resource owners/users regarding security policies and standards, including best practices for securely integrating and using AI.

Experience you'll bring

Education:

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Assurance, or a related field. A Master's degree is preferred.

Experience:

• 2-4+ years of experience in Cybersecurity, Information Security, Auditing, Risk Management, Information Assurance, and/or work supporting and maintaining a network or cloud environment, with an understanding of AI's role in security.

• Strong knowledge of security frameworks and standards such as ISO 27001, NIST, GDPR, and HIPAA

• Experience with security audit processes and responding to regulatory inquiries

Skills:

• Solid understanding of information security principles, practices, and technologies, including AI in cybersecurity.

• Ability to analyze and assess information security controls, including those integrated with or driven by AI.

• Strong problem-solving skills and attention to detail.

• Effective communication and interpersonal skills.

• Ability to work independently and collaboratively within a team.

Certifications (Preferred):

• Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or Certified Internal Auditor, with an interest in AI security.