Cyber Security Specialist

Cyber Security Specialist

Department: MIS Department Job Status: Full Time

FLSA Status: Salaried Exempt Reports to: IT Manager

Work Schedule: Monday-Friday 8:00 A.M. - 5:00 P.M. Positions Supervised: n/a

Schedule may pass scheduled times due to demands and volume

POSITION SUMMARY:

The Cyber Security Specialist will be responsible for the internal and external security of the organization’s information systems. Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses. The Cyber Security Specialist will plan and design security solutions along with the IT Manager and capabilities that enable the organization to identify, protect, detect, respond, and recover from cyber threats and vulnerabilities. Defines and develops security requirements using risk assessments, threat modeling, testing, and analysis of existing systems. Develops security integration plans to protect existing infrastructure and to incorporate future solutions. Assists in the creation of action plans for policy creation and governance, system hardening, monitoring, incident response, disaster recovery, and emerging cybersecurity threats. Utilizes security information and event management (SEIM), data loss prevention (DLP), intrusion prevention systems (IPS), and other tools in action plan designs. Reviews current modules and systems to ensure consistency and compliance with the organization's guidelines, policies, and standards. Keeps abreast of the latest cyber threat information.

ESSENTIAL FUNCTIONS:

• Provides support to the IT Manager with the organization security incident response procedures
• Facilitates and manages the development, modification, and operation of security protocols including intrusion detection and prevention systems to protect the organization’s information from breach or loss.
• Conducts periodic audits and due diligence checks of security protocols, evaluating systems for vulnerabilities.
• Recommends modifications to security protocols as required.
• Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
• Develops and/or provides training and guidance on acceptable use, risk management, incident response, and security protocols to employees.
• Periodically provides IT Manager and/or Department Head briefs status of security system and protocols.
• Reviews reports of, and evaluates response to, any security incidents.
• Monitor current reports of computer viruses to determine when to update virus protection systems.
• Ensures that monitoring operations comply with all applicable government regulations and standards.
• Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
• Maintains current knowledge of emerging security threats, technical challenges, and developments in system protection and IT security standards.
• Performs other related duties as assigned.
• Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
• Modify computer security files to incorporate new software, correct errors, or change individual access status.
• Access Security Providers, make recommendation of outsourcing security

KNOWLEDGE, SKILLS, & ABILITIES:

Disaster Recovery Planning| Cybersecurity| Data Loss Prevention| Encryption| Incident Management Information Security Governance| Network Security | Requirements Analysis | Security Architecture and Models| Threat Modeling | Vulnerability Assessment |Technical Project Management Risk Identification Model| Data Security Software| Firewall and other Security Hardware| Security Information and Event Management (SIEM) Software| Web Security Software

• To convey in leading and guiding a team.
• Demonstrated problem-solving and analytical skills.
• Excellent verbal and written communication skills.
• Proficient, or able to gain proficiency with, a broad array of security software applications and tools.
• Proficient with Microsoft Office Suite or related software needed to maintain reports and records.
• Organized with attention to detail.
• Develop computer or information security policies or procedures.
• Update knowledge about emerging industry or technology trends
• implement security measures for computer or information systems.
• Collaborate with others to resolve information technology issues.
• Test computer system operations to ensure proper functioning.
• Critical Thinking — Using logic and reasoning to identify the strengths and weaknesses of alternative solutions, conclusions, or approaches to problems.
• Computers and Electronics — Knowledge of circuit boards, processors, chips, electronic equipment, and computer hardware and software, including applications and programming.
• Engineering and/or Technology — Knowledge of the practical application of engineering science and/or technology. This includes applying principles, techniques, procedures, and equipment to the design and production of various goods and services.
• Deductive Reasoning — The ability to apply general rules to specific problems to produce answers that make sense.
• Inductive Reasoning — The ability to combine pieces of information to form general rules or conclusions (includes finding a relationship among seemingly unrelated events).
• Problem Sensitivity — The ability to tell when something is wrong or is likely to go wrong. It does not involve solving the problem, only recognizing that there is a problem.
• Attention to Detail — Job requires being careful about detail and thorough in completing work tasks.
• Dependability — Job requires being reliable, responsible, and dependable, and fulfilling obligations.
• Integrity — Job requires being honest and ethical.
• Analytical Thinking — Job requires analyzing information and using logic to address work-related issues and problems.
• Cooperation — Job requires being pleasant with others on the job and displaying a good-natured, cooperative attitude.

Education and Experience: Bachelor’s degree in computer science, Information Management, engineering or equivalent required; master’s degree preferred. Minimum of 7 years of overall experience in computer systems specializing in computer security, protection, software security, safeguarding, cyber threats and recovery. Certified Information Security Manager (CISM) | Certified Information Systems Security Professional (CISSP) is a plus. English & Spanish languages required.

PHYSICAL DEMANDS:

• Prolonged periods sitting at a desk and working on a computer.
• Must be able to lift up to 15 pounds at times.

WORK ENVIRONMENT

• Working conditions are good. Physical demand is normal and that of regular office conditions such as sitting, standing and walking.

• Sedentary work. Exerting up to 50 pounds of force occasionally and/or negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects.

• VISUAL ACUITY

• The worker is required to have close visual acuity to perform an activity such as: preparing and analyzing data and figures; transcribing; viewing a computer terminal; and extensive reading.

Department Head: _________________________ Date: _________________________

Department Manager: _________________________ Date: _________________________

Approval Signature: ______________________________ Date: ____________________________________

Director of Human Resources

The company has reviewed this job description to ensure that essential functions and basic duties have been included. It is not intended to be construed as an exhaustive list of all functions, responsibilities, skills and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate.

I acknowledge receipt of the job description. It has been reviewed with me by my supervisor I understand should I have any questions regarding my duties, I will consult with my supervisor and/or the Human Resources Department.

Employee: ___________________________________ Date: ____________________________________

(Print Name)

Employee: ___________________________________

(Signature)