Information Security Analyst

Analyst position involving monitoring and management of IT controls at the application, database, operating system and process levels. Working with business partners to ensure accurate process documentation, maintain and update the IT Controls master list.

PRIMARY DUTIES AND RESPONSIBILITIES:

- Coordinate with control owners to ensure that active management/monitoring of the controls occurs throughout the year
- Participate in the review process for application, database, operating system, and operational process changes/modifications to ensure that controls remain valid and/or to coordinate the creation of new controls.
- Provide coordination with internal and external auditors to support audit activity within IT
- Monitor compliance of controls across IT (CPNI, SOX, PCI)
- Work with IT organizations to remediate non-compliance conditions.
- Work with internal SOX, CPNI & PCI teams to update/maintain/validate the accuracy of the IT Controls list.
- Maintain ongoing, Real Time reporting.

SECONDARY DUTIES AND RESPONSIBILITIES:

- Attend staff meetings and or any other required meetings.
- Provide progress reports to direct line of management.

SKILLS:

FUNCTIONAL/TECHNICAL SKILLS:

- Solid current SOX systems auditing background is the MOST important skill
- Need to have basic understanding of operating systems and databases in order to discuss them intelligently.
- Should understand IT controls.
- Remedy experience a plus.
- Telecom industry background a plus but not really necessary.
- Strong written and verbal communication skills
- Ability to work independently, and take ownership of issues and work products
- Basic operating system (HP/UX and Windows) knowledge
- Basic relational database (Oracle and SQL Server) knowledge
- Understanding of multi-tier application architecture
- Understanding of networking technology
- Competence with Microsoft products - Office (Word, Excel), Visio, Project

EXPERIENCE:

- 3-5 years experience in an IT organization
- Working in a cross-organizational environment, with an overview of multiple functional areas
- Creating and maintaining monitoring plans and schedules.
- Providing clear, concise information to support the creation of senior management reports
- Reviewing technical documentation (functional specifications, design documents, etc.).
- Exposure to standard business practice/IT audits and controls
- Familiarity with IT system security role definition and concepts

EDUCATION/VOCATIONAL TRAINING:

- Bachelor degree in MIS or equivalent field