Senior Information Security Analyst

As a Senior Information Security Analyst, you’ll have the opportunity to make a meaningful impact by fostering a security first mindset across the organization. If you’re passionate about cybersecurity, we’d love to hear from you! We are seeking a dedicated and engaging Senior Information Security Analyst to monitor, analyze, and respond to security threats and vulnerabilities within the organization. This role involves conducting risk assessments, investigating security incidents, ensuring compliance with industry standards and best practices, and leading employee security awareness initiatives and training programs. This role will play a crucial part in onboarding new employees, developing phishing awareness campaigns, facilitating one-on-one training, and collaborating with internal teams to promote a security-conscious culture. The ideal candidate will have a strong background in cybersecurity, excellent communication skills, and the ability to translate complex security topics into engaging and understandable content.

Supervisory Responsibility:

This position is not supervisory in nature.

Essential Functions/ Major Responsibilities:

• Monitor security alerts and logs using organization’s cybersecurity tools.
• Investigate and respond to security incidents, breaches, and vulnerabilities.
• Perform root cause analysis and recommend corrective actions.
• Conduct vendor security risk assessments and prepare formal reports.
• Analyze security risks and provide recommendations for mitigation.
• Lead security audits, compliance audits, risk assessments, and penetration testing efforts.
• Assist with third-party risk assessments and vendor due diligence.
• Support the development and maintenance of security policies, standards, and procedures.
• Ensure compliance with regulatory requirements and security frameworks.

Knowledge, Skills, and Abilities:

• Conduct information cybersecurity training sessions for new employees as part of the onboarding process.
• Develop engaging and informative cybersecurity training materials tailored to different employee roles.
• Provide ongoing cybersecurity awareness education through various training methods (e-learning, webinars, in-person sessions).
• Facilitate personalized training sessions for employees who require additional cybersecurity training.
• Act as a cybersecurity awareness resource, addressing employee inquiries and concerns related to cybersecurity.
• Create and manage phishing simulation campaigns to assess employee awareness and response.
• Track, analyze, and report on phishing campaign results to identify trends and areas for improvement.
• Ensure compliance with security policies by monitoring and reporting on repeated phishing failures.
• Review reported phish emails and follow up with submitter.
• Support compliance audits by ensuring complete and accurate documentation.
• Coordinate with key stakeholders to update and maintain the business continuity and disaster recovery plan.
• Update and maintain the incident response plan.
• Serve as the primary liaison with the University of Arizona’s Information Security Office, ensuring compliance with its cybersecurity policies

• Bachelor’s degree in computer, cybersecurity, or a related field (or equivalent experience).
• 3+ years of experience in cybersecurity work experience required.
• Strong understanding of information security principles, phishing threats, and social engineering tactics.
• Experience with phishing simulation tools and security awareness platforms.
• Excellent communication, presentation, and superb customer service.
• Excellent problem-solving, analytical, and organizational skills.
• High attention to detail and commitment to confidentiality and integrity.
• Ability to work collaboratively with teams across the organization.
• Knowledge of security compliance frameworks (e.g., NIST, ISO 27001, SOC 2) is a plus.

Preferred Qualifications:

• Security + certificate.
• Experience with threat protection, detection, and response tools for endpoints, email, identity, and cloud environments.
• Ability to communicate effectively with technical IT staff.
• Knowledge of IT architecture and operations.