IT SECURITY ANALYST

The primary function of this role is to oversee and enhance the organization's security posture by implementing and managing security frameworks, particularly focusing on the NIST Cybersecurity Framework (CSF). This role will also involve leadership in security programs, providing strategic direction, and guiding identity and access management (IAM) practices.

This position offers the unique opportunity to take charge of the implementation and leadership of critical security frameworks within a well-established organization. It allows for significant stakeholder interaction and the ability to make impactful decisions on security policies and strategies. The role is pivotal in shaping the security landscape of the organization, providing both professional growth and the ability to work with cutting-edge security technologies.

• Lead the implementation of the NIST Cybersecurity Framework and ensure its integration into the organization's security governance practices.
• Translate security frameworks into actionable and effective security controls, policies, and procedures.
• Drive security initiatives independently and provide strategic guidance and direction on security matters.
• Engage with stakeholders across the organization to influence governance decisions and foster the adoption of security best practices.
• Provide expert guidance on IAM concepts and recommend robust access control models and policies.
• Act as the primary security resource in advancing the organization's security programs.

• Strong expertise in security governance and frameworks, particularly with a solid understanding of the NIST Cybersecurity Framework.
• Proven experience in leading the implementation of security initiatives and frameworks.
• Ability to translate complex security frameworks into practical security controls and governance processes.
• In-depth knowledge of Identity and Access Management (IAM) and the ability to guide and implement effective access control models.
• Excellent stakeholder engagement and leadership skills, capable of driving security best practices within an organization.

• Experience with Microsoft security technologies like Microsoft Purview, Intune, and familiarity with their security and compliance reporting capabilities is preferred.
• Hands-on experience with Cisco XDR or exposure to similar XDR/SIEM platforms is highly desirable.
• Understanding or experience in AI Governance could be beneficial, although not mandatory.
• Experience in designing or implementing Conditional Access policies and RBAC governance is valuable.