Senior Information Security Analyst

Position Name: Senior Information Security

Duration: 12 Months with strong possibility of extension

Location: Remote - (EST time zone)

Remote EST

Cloud first initiatives and new IT projects including O365, Egnyte, and AI result in a resource gap to meet NYS ITS Policy.

Proven knowledge of security certifications (e.g., CISSP, CISA, CISM, GPEN, GWAPT, GCIH, GIAC certifications).

Are there any specialized skills that must be present for the position to be successful?

Working knowledge of information security, risk management, security architecture, computer networks, incident response, and vulnerability management.
Experience in migration of Active Directory to Azure

Education, Certifications, Degree requirements:

Bachelor’s degree in cyber security, information assurance, or information technology. 2-4 years of dedicated security experience.

Tasks:

• Manage security operations tasks related to identity and access management, including incident response recommended solutions.
• Lead the development and implementation of the IAM strategy aligned with business objectives and regulatory requirements in conjunction with security policy.
• Support, design, and documentation for IAM architecture, identity governance, and role-based access control.
• Manage security operations tasks related to identity and access management, including incident response recommended solutions.
• Identify and rectify gaps within current infrastructure as it relates to onboarding and offboarding personnel.
• Ensure IAM processes comply with industry standards (NIST, ISO, CIS, NYS ITS) and internal policies developed by the ISO.
• Conduct regular audits and assessments to identify vulnerabilities and ensure compliance.
• Assess current applications and architecture to ensure implementations align with identity-first security strategies, best practices, and approved standards.
• Define integration methodologies for IAM solutions with existing and onboarding applications, including cloud services, on-prem systems, and third‑party applications (Entra ID, Azure, on‑prem Active Directory, etc).
• Work closely with other teams within IT to ensure fluid cohesiveness.
• Other duties as assigned that contribute to the key outcomes of the Infromation Security team