Security & Privacy Analyst

Diversified Communications is growing and we need a skilled Security and Privacy Analyst to add to our IT team! The Security and Privacy Analyst's responsibilities include securing online, cloud and on-premises infrastructures, filtering out suspicious activity, and finding and mitigating security risks before any breaches can occur. In addition, this position will have responsibility for performing privacy related tasks such as contract review and privacy request monitoring working inter-departmentally to identify and correct any flaws in our security and privacy systems.

To be a successful in this role, you should have a sound working knowledge of cybersecurity, including intrusion prevention, incidence response, and ethical hacking. You should have working knowledge of GDPR, CCPA and other privacy regulations. You should be detail oriented with strong analytical skills and have good written and verbal communication, interpersonal, and leadership skills.

Essential Functions:

• Leading efforts to counter security breaches and anticipating and reducing the likelihood of future security alerts, incidents, and disasters.
• Defining, planning, implementing, maintaining, and upgrading security measures, policies, and controls.
• Writing reports and providing insights on the efficacy of the current security policies, incident responses, disaster recovery plans, and other security-related information.
• Assisting with the creation of updates and training programs to secure the network and train the employees.
• Keeping the security systems up to date.
• Monitoring security access and maintaining the relevant data.
• Conducting vulnerability testing and risk analyses to assess security and performing internal and external security audits.
• Key member of in house incident response team, interfacing with third party security vendor and other key team members
• Analyzing security breaches to identify the cause and to update incidence responses and disaster recovery plans.
• Verifying and coordinating security plans with outside vendors.
• Creating procedures for IT employees and training them in security and privacy awareness.
• Develops privacy controls, policies, standards, guidelines, and operating procedures.
• Evaluates third-party contracts, and makes recommendations regarding privacy practices and controls, as appropriate.
• Researches and responds to privacy-related inquiries from internal and external customers.
• Remain current on the latest technology and best practices in information security and privacy.

Skills & Qualifications:

Knowledge: Bachelor's degree in computer science, programming, or related field preferred. 3-5 years' experience in the field, such as security administration preferred. Advanced training certifications may be advantageous.

Skills & Technical Qualifications include:

• Intermediate Microsoft O365 Application knowledge
• Intermediate Microsoft Azure Infrastructure knowledge
• Intermediate Microsoft Active Directory knowledge
• Expert anti-virus and virus/malware removal techniques
• Expert network principles and operation.
• Intermediate Windows Server knowledge
• Expert computer proficiency
• Intermediate knowledge of security and privacy legislation.
• Strong oral and written communication skills with ability to teach and transfer knowledge in an appropriate manner.
• Excellent and proven telephone and customer service etiquette
• Strong troubleshooting, problem solving and organizational skills.
• Strong attention to detail

Abilities:

• Ability to work unsupervised and to be self-motivated.
• Ability to handle sensitive issues and maintain confidentiality in a high-volume environment.
• Good anticipation, analytical, and problem-solving skills.

Other: Occasional evening and weekend work may be required to meet deadlines and to respond to security events