Security Analyst with expertise in technologies

Requirements

Must have:

– Over 5 years of practical experience in information security – Proven ability to complete a comprehensive audit cycle – Familiarity with CIS Controls, NIST, ISO 27001, or comparable frameworks – Strong preference for knowledge of NYDFS Cybersecurity Regulation 500 (23 NYCRR 500) – Excellent documentation and communication abilities, suitable for both technical and leadership audiences – Bachelors degree preferred – Preferred experience: Microsoft Intune (3 years), SIEM platforms (3 years), NIST, ISO 27001 or CIS Controls (3 years)

Responsibilities:

• Implement and oversee a structured monthly security program focusing on monitoring, vulnerability management, and remediation tracking – Supervise networks and endpoints using SIEM and EDR tools; investigate and address security incidents – Handle vendor vulnerability disclosures and follow up on their resolution – Manage NYDFS 500 audit processes and ensure ongoing compliance – Carry out penetration tests, phishing simulations, and social engineering activities; oversee follow-up training – Formulate and enforce security policies and generate reports suitable for executive review

• ---

Company:

We are a reputable industry leader located in Western New York, seeking a skilled Information Security Analyst to join our IT team. This role offers the opportunity to engage in a well-established security program where you can take ownership and execute established protocols. We provide a hybrid work schedule after onboarding and prioritize candidates residing in the Western New York area. Compensation ranges from $80,000 to $115,000 per year, reflecting your experience and qualifications.