Position Details
Position Information Position IT Security Analyst Full Time / Part Time Full Time Job Type Regular Position Summary The IT Security Analyst will assist the Network Manager with ongoing security efforts, including but not limited to data loss prevention, incident response, system security configuration and management, identity protection, and more. Occasionally, this role will support broader IT tasks such as desktop, server, and network support, to include campus wide cybersecurity training. Duties and Responsibilities
- Install, maintain and manage cybersecurity software agents and related software
- Plan, document, and execute IT projects with a structured approach
- Handle confidential information with discretion
- Assist in the development and implementation of comprehensive security policies within Microsoft 365, including Data Loss Prevention (DLP) strategies, Microsoft Defender for Identity (MDI) configurations, and Cisco Security Cloud
- Provide support in tailoring security policies to meet the organization’s needs and compliance requirements and collaborate with the network manager, CISO, and Third-party security vendors in regular collaboration to address emerging threats
- Assist IT leadership during security incident investigations and response activities, including evidence gathering, data analysis, and coordination with various teams to mitigate security incidents
- Conduct ongoing research on the latest security best practices, providing insights and recommendations to enhance the organization’s security posture
- Assist in the development and implementation of IT security policies and procedures, ensuring they align with organizational objectives and compliance standards
- Manage, monitor, and defend against security threats, intrusion detection systems (IDS), antivirus software, and other security tools
- Perform regular security audits and risk assessments to identify vulnerabilities and recommend improvements
- Respond to and resolve security incidents, including data breaches, malware attacks, and phishing attempts
- Collaborate with other IT staff to maintain and update security software and hardware
- Provide training and guidance to campus community regarding security best practices, including password management, phishing awareness, and data protection
- Provide guidance and assistance in proper backup, disaster recovery, and business continuity planning for IT systems
- Collaborate with team members to make recommendations for improved internal processes, and improved customer service experience
- Receive cross-training in other areas of the department and provide support in covering those areas if there is a shortage of staff, or overflow in workload
- Maintain technically current and relevant through self-directed professional reading, developing and maintaining professional contacts, professional development, and training
- Develop training material and help guides for users and support staff
- Assist with training of new hires within the department
- Maintain regular attendance
- Assist in the development and implementation of comprehensive security policies within Microsoft 365, including Data Loss Prevention (DLP) strategies, Microsoft Defender for Identity (MDI) configurations, and Cisco Security Cloud
- Provide support in tailoring security policies to meet the organization’s needs and compliance requirements and collaborate with the network manager, CISO, and Third-party security vendors in regular collaboration to address emerging threats.
- Assist IT leadership during security incident investigations and response activities, including evidence gathering, data analysis, and coordination with various teams to mitigate security incidents.
- Conduct ongoing research on the latest security best practices, providing insights and recommendations to enhance the organization’s security posture.
- Assist in the development of IT security policies and procedures, ensuring they align with organizational objectives and compliance standards.
- Manage, monitor, and defend against security threats, implement firewall rules, intrusion detection systems (IDS), antivirus software, and other security tools.
- Perform regular security audits and risk assessments to identify vulnerabilities and recommend improvements
- Respond to and resolve security incidents, including data breaches, malware attacks, and phishing attempts
- Collaborate with other IT staff to maintain and update security software and hardware.
- Provide training and guidance to campus community regarding security best practices, including password management, phishing awareness, and data protection
- Provide guidance and assistance in proper backup, disaster recovery, and business continuity planning for IT systems
- Complies with University policies, procedures and administrative directives, as well as state, federal, and local laws, regulations, and ordinances.
- Performs other related duties as assigned.
Minimum Job Requirements EDUCATION : Bachelor’s degree in Computer Science with 2 years of demonstrated experience performing hands on technical cyber security support in a college or university environment or an equivalent combination of education and experience are acceptable. Ability to pass a pre-employment background check. Hands on experience with IPS and IDS systems. Preferred Qualifications Certifications such as CISSP, CompTIA Security+, or Certified Ethical Hacker (CEH) or other applicable certifications
Four (4) years’ experience providing hands on technical cyber security support in a college or university environment
ITIL Foundations Certification
Experience troubleshooting and supporting Apple OS and Microsoft Windows
Special Conditions for Eligibility
Required to maintain a valid NM driver’s license to operate University vehiclesMust be willing to work evenings, weekends and odd hours as requiredMust be willing to travelKnowledge, Skills, and Abilities
Skill and ability to work effectively with a wide range of constituenciesDemonstrated knowledge of security frameworks, risk management, and compliance requirements NIST, ITIL, CIS, etc.)Experience with exposure to areas such as threat detection and response, vulnerability management, network security, and endpoint protectionFamiliarity with cloud security platforms and SaaS applicationsAbility to work both independently and collaboratively as part of a teamAbility to maintain emotional control under stressWorking knowledge of Microsoft applications, operating systems, switches, firewalls, domain controllers, IDP systems, and remote user connectivityGood oral, written, and interpersonal communication skillsAdvanced knowledge and understanding of a wide range of computer, networking software, hardware systems, and related technologiesAbility to install, configure, and maintain personal computers, networks, and / or related hardware or softwareAbility to communicate technical information to non-technical audiencePhysical Demands Standing…………………………………………………………………………..FrequentlyWalking……………………………………………………………………………FrequentlyBending……………………………………………………………………………FrequentlySquatting………………………………………………………………….……..FrequentlyClimbing …………………………………………………………………….……FrequentlyKneeling ………………………………………………………………………….FrequentlyLifting up to 50 pounds…..………………………………..…………..…Frequently Working Environment Work is performed in a typical interior / office work environment;Work with frequent interruptions;No or very limited exposure to physical risk.Moderate physical effort. May require occasional lifting, handling, pushing, or moving objects up to 50 lbs. Pay Rate $57,000 Work Location / Campus Center Las Vegas, NM Campus EEO Statement New Mexico Highlands University is an affirmative action, equal opportunity employer, making decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability, or any other protected class. We are committed to the University values of diversity, accessibility, excellence, and responsiveness.