Cybersecurity Analyst

A leading role in shaping and delivering the organization’s cybersecurity program, combining security governance, risk and compliance with hands-on technical implementation. Turn business and security requirements into effective controls, drive improvements from design through deployment, and coordinate incident readiness and response. Work across internal teams and external partners to resolve security gaps and embed security into technology and business operations., * Develop and implement information security policies, standards, procedures and controls aligned with business needs, industry standards and applicable regulations.

• Conduct risk assessments, define treatment plans, drive remediation and manage security exceptions through the appropriate approval process.
• Coordinate compliance activities, including scope management, control implementation, assessment preparation, evidence collection and resolution of findings.
• Manage third-party security assurance throughout the supplier lifecycle, establishing security obligations, clarifying responsibilities and driving corrective actions.
• Develop and operationalize incident response plans, playbooks and escalation procedures; coordinate containment, remediation, recovery and lessons learned.
• Establish security monitoring and detection requirements, coordinate system onboarding and address gaps in logging, alerting and response readiness.
• Drive vulnerability management activities, prioritize findings and work with technical teams to implement and validate remediation.
• Implement and strengthen identity, access, network, cloud and application security controls, including privileged access, segmentation, secure configuration and encryption.
• Embed security into system design, development and deployment through secure engineering practices and effective change and release controls.
• Design, configure, integrate and troubleshoot security and connectivity solutions supporting inflight services and passenger and crew environments.
• Develop automation, technical documentation and operational procedures; conduct testing to validate security, performance, reliability and recovery.
• Deliver security guidance, awareness initiatives and management reporting, translating technical exposure into clear business decisions and accountable actions.

• Experience implementing security governance, risk management, compliance and operational security practices.
• Strong understanding of incident response, supplier security, vulnerability management and secure technology delivery.
• Practical capability across cloud, network, application and identity security, supported by hands-on implementation and troubleshooting experience.
• Ability to manage initiatives from requirements and design through implementation, validation and ongoing improvement.
• Strong communication and stakeholder coordination skills, with the ability to drive action across internal teams and external providers.

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance