Security Analyst (Info Systems)

Security Analyst

Job Description

Exempt:  Yes

Department: Information Systems Department

Reports To: Information Systems Director

Location: City Hall

Safety Sensitive: This position is designated as safety/security sensitive and is subject to pre-employment, reasonable suspicion and random drug and alcohol screening.

GENERAL DESCRIPTION OF POSITION

This Safety Sensitive (SS) position is primarily responsible for protecting a company's network and systems from cyber-attacks. This involves researching upcoming IT trends, creating contingency plans, reviewing suspicious activities, reporting security breaches, and educating the rest of the company on security measures.

ESSENTIAL DUTIES AND RESPONSIBILITIES

1. Collaborates with users to discuss computer data access needs, to identify security threats and violations, and to identify and recommend needed programming or process changes.

2. Uses data encryption, firewalls, and other appropriate security tools and applications to conceal and protect transfers of confidential digital information.

3. Develops and implements plans to safeguard digital data from accidental or unauthorized modification, destruction, or disclosure; adheres to emergency data processing needs.

4. Reviews violations of security procedures; provides training to ensure violations do not recur.

5. Monitors and restricts access to sensitive, confidential, or other high-security data.

6. Modifies security files and applications as able and necessary to provide specialized access, allow new software to be installed or integrated, or correct errors.

7. Performs risk assessments, audits, and tests to ensure proper functioning of data processing activities and security measures.

8. Safeguards system security and improves overall server and network efficiency by training users and promoting security awareness.

9. Determines when to update virus protection systems by monitoring current reports of computer viruses; facilitates or performs needed updates.

10. Manages and support Antivirus.

11. Manage and push out software updates.

12. Operate a city vehicle as needed.

13. Perform any other related duties as required or assigned.

QUALIFICATIONS

To perform this job successfully, an individual must be able to perform each essential duty mentioned satisfactorily.  The requirements listed below are representative of the knowledge, skill, and/or ability required.

EDUCATION AND EXPERIENCE

Broad knowledge of such fields as accounting, marketing, business administration, finance, etc. Equivalent to a four year college degree, plus 3 years related experience and/or training, or equivalent combination of education and experience.

COMMUNICATION SKILLS

Ability to read, analyze, and understand general business/company related articles and professional journals; ability to speak effectively before groups of customers or employees.

MATHEMATICAL SKILLS

Ability to calculate figures and amounts such as discounts, interest, commissions, proportions, percentages, area, circumference, and volume. Ability to apply concepts such as fractions, ratios, and proportions to practical situations.

CRITICAL THINKING SKILLS

Ability to utilize common sense understanding in order to carry out written, oral or diagrammed instructions. Ability to deal with problems involving several known variables in situations of a routine nature.

REQUIRED CERTIFICATES, LICENSES, REGISTRATIONS

Valid drivers license

PREFERRED CERTIFICATES, LICENSES, REGISTRATIONS

A , Microsoft Certified Professional (MCP), Microsoft Certified Systems Engineer (MCSE)

SOFTWARE SKILLS REQUIRED

Intermediate: Presentation/PowerPoint, Spreadsheet, Word Processing/Typing

Basic: Accounting, Contact Management, Database, Human Resources Systems, Other, Payroll Systems

INITIATIVE AND INGENUITY

SUPERVISION RECEIVED

Under general supervision where standard practice enables the employee to proceed alone on routine work, referring all questionable cases to supervisor.

PLANNING

Considerable responsibility with regard to general assignments in planning time, method, manner, and/or sequence of performance of own work; may also occasionally assist in the planning of work assignments performed by others within a limited area of operation.

DECISION MAKING

Performs work operations which permit frequent opportunity for decision-making of minor importance and also frequent opportunity for decision-making of major importance; the latter of which would affect the work operations of other employees and/or clientele to a moderate degree.

MENTAL DEMAND

Close mental demand. Operations requiring close and continuous attention for control of operations. Operations requiring intermittent direct thinking to determine or select the most applicable way of handling situations regarding the organization's administration and operations; also to determine or select material and equipment where highly variable sequences are involved.

ANALYTICAL ABILITY / PROBLEM SOLVING

Moderately structured. Fairly broad activities using moderately structured procedures with only generally guided supervision. Interpolation of learned things in somewhat varied situations.

RESPONSIBILITY FOR WORK OF OTHERS

Responsibility for work of others: Not indicated.

RESPONSIBILITY FOR FUNDS, PROPERTY and EQUIPMENT

Occasionally responsible for organization's property where carelessness, error, or misappropriation would result in moderate damage or moderate monetary loss to the organization. The total value for the above would range from $5,000 to $150,000.

ACCURACY

Probable errors would not likely be detected until they reached another department, office or patron, and would then require considerable time and effort to correct the situation. Frequently, possibility of error that would affect the organization's prestige and relationship with the public to a limited extent, but where succeeding operations or supervision would normally preclude the possibility of a serious situation arising as a result of the error or decision.

ACCOUNTABILITY

FREEDOM TO ACT

Directed. Freedom to complete duties as defined by wide-ranging policies and precedents with mid to upper-level managerial oversight.

ANNUAL MONETARY IMPACT

The amount of annual dollars generated based on the job's essential duties / responsibilities. Examples would include direct dollar generation, departmental budget, proper handling of organization funds, expense control, savings from new techniques or reduction in manpower.

None. Job does not create any dollar monetary impact for the organization.

IMPACT ON END RESULTS

Modest impact. Job has some impact on the organizations end results, but still from an indirect level. Provides assistance and support services that facilitates decision making by others.

PUBLIC CONTACT

Occasional routine contacts with persons outside the organization. This would include contacts with suppliers, mail service, etc.

EMPLOYEE CONTACT

Contacts of considerable importance within the department or office, such as those required in coordination of effort, or frequent contacts with other departments or offices, generally in normal course of performing duties. Requires tact in discussing problems and presenting data and making recommendations, but responsibility for action and decision reverts to others.

USE OF MACHINES, EQUIPMENT AND/OR COMPUTERS

Computer software programming, level ii technician support, project management; system analyst and comprehensive computer software support/help and/or web site development and connectivity.

WORKING CONDITIONS

Periodically exposed to such elements as noise, intermittent standing, walking, pushing, carrying, or lifting; but none are present to the extent of being disagreeable.

ENVIRONMENTAL CONDITIONS

The following work environment characteristics described here are representative of those an employee encounters while performing essential functions of this job.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the functions of this job, the employee is occasionally exposed to risk of electrical shock. The noise level in the work environment is usually moderate.

PHYSICAL ACTIVITIES

The following physical activities described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions and expectations.

Moderate diversity, low physical. Work activities which allow for a moderate amount of diversity in the performance of tasks which are not as varied as those positions with high-level diversity and decision-making.

While performing the functions of this job, the employee is continuously required to talk or hear; regularly required to sit; frequently required to walk, use hands to finger, handle, or feel; and occasionally required to stand, reach with hands and arms, climb or balance, stoop, kneel, crouch, or crawl. The employee must occasionally lift and/or move up to 100 pounds; frequently lift and/or move up to 50 pounds; regularly lift and/or move up to 25 pounds; continuously lift and/or move up to 10 pounds. Specific vision abilities required by this job include close vision; distance vision; and color vision.

ADDITIONAL INFORMATION

Not indicated.