Sr. Information Security Analyst (SA190)

We are seeking an experienced Senior Information Security Analyst to support enterprise information security initiatives, with a focus on Identity and Access Management (IAM), cloud security, and regulatory compliance.

This position will play a key role in supporting cloud-first technology initiatives, ensuring that appropriate security controls, policies, and procedures are implemented and maintained as new systems and applications are introduced.

The ideal candidate will have a strong background in information security, IAM, Microsoft 365, and cloud-based security controls, along with experience implementing security frameworks and supporting enterprise technology deployments., * Support the implementation and ongoing management of Identity and Access Management (IAM) security controls.

• Ensure new cloud applications and IT initiatives align with established information security policies and regulatory requirements.
• Assess security risks associated with enterprise cloud platforms, including Microsoft 365, Egnyte, and AI-enabled technologies.
• Develop, implement, and maintain layered security controls to protect enterprise systems and sensitive information.
• Collaborate with IT, infrastructure, and application teams to integrate security requirements into new technology deployments.
• Conduct security assessments and identify vulnerabilities, access control gaps, and potential compliance risks.
• Support the development and enforcement of information security policies, standards, and procedures.
• Monitor and evaluate IAM processes, user access permissions, and security configurations.
• Provide security guidance and recommendations to technical teams and business stakeholders.
• Assist with security audits, compliance reviews, and remediation efforts.
• Support ongoing security operations and continuous improvement initiatives.

Information/Data Security (InfoSec), Security Analysis, Security Analysis, Information/Data Security (InfoSec), Identity Data Management, Cloud Computing, Regulatory Compliance, Enterprise Protection, Systems Maintenance, Procedure Implementation, * Demonstrated experience in a senior-level information security, cybersecurity, or IAM role.

• Strong knowledge of Identity and Access Management principles, including authentication, authorization, and access controls.
• Experience supporting enterprise cloud environments and cloud-based applications.
• Familiarity with Microsoft 365 security and identity management capabilities.
• Understanding of information security frameworks, regulatory requirements, and security best practices.
• Experience implementing and maintaining layered security controls.
• Ability to assess security risks and recommend appropriate mitigation strategies.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication skills and experience collaborating with cross-functional technical teams.

Preferred Qualifications

• Experience with Microsoft Entra ID (Azure Active Directory).
• Familiarity with Egnyte or similar enterprise content management platforms.
• Experience supporting security requirements for AI-enabled applications.
• Knowledge of New York State Information Technology Services (NYS ITS) security policies.
• Experience with role-based access control (RBAC), multifactor authentication (MFA), and privileged access management (PAM).
• Familiarity with NIST cybersecurity frameworks and security compliance standards.
• Relevant certifications such as CISSP, CISM, Security+, or equivalent.