Information Security Analyst

Compensation:
$68,495.00-$87,298.00
Compensation Type:
Salary
Employment Type:
Regular
Grade:
E09
Position Summary
The Information Security Analyst provides technical security risk monitoring and risk analysis, and incident investigations of security incidents to protect Central New Mexico Community College's (CNM) sensitive information and infrastructure from the full spectrum of cyber threats, attacks, and threat actors. The Information Security Analyst will closely consult and collaborate with cross-functional teams and leadership to formalize processes and methodologies to build and enhance the security function. The position fosters an environment to provide for the security measures, conduct risk assessments, and ensure compliance with all regulatory requirements. This role heightens security awareness across the entire CNM Community including, but not limited to, staff, faculty, vendors, contractors, students, and the public through ongoing training and education using all available communication channels.
Duties & Responsibilities

• Monitor and configure security systems, including firewalls, IDS/IPS, SIEM, and antivirus solutions to detect security threats and unauthorized access protecting confidentiality of information.
• Monitors and configures security systems including firewalls, IDS/IPS, SIEM, and endpoint antivirus solutions to detect security threats and ensure confidentiality, integrity, and availability.
• Analyzes security logs, event data, and network traffic to identify and investigate potential security incidents, role discovery, and segregation of duties.
• Conducts vulnerability assessments and penetration testing to identify and remediate security vulnerabilities.
• Maintains a secure and audit-ready environment with minimal security breaches and audit findings.
• Develops and adheres to security policies, procedures, and standards, ensuring role-based security and compliance with regulations.
• Collaborates with cross-functional IT teams to implement and maintain security controls, access management, configurations, and patches.
• Engages with business users to understand application data needs and provide recommendations and solutions.
• Participates in incident response activities, including triage, containment, remediation, eradication, and recovery efforts.
• Provides security awareness training and guidance to the CNM user community on data protection and cybersecurity hygiene.
• Stays updated on the latest cybersecurity threats, incidents, vulnerabilities, best practices, and industry trends.
• Supports security audits, assessments, and compliance initiatives to ensure regulatory adherence.
• Participates in the emergency on-call rotation, executing daily monitoring of critical infrastructure.
• Reviews measurement statistics and takes action to prevent and improve security posture.
• Conducts periodic scanning for vulnerabilities, develops action plans, and tracks completion.
• Configures and monitors Next Generation Firewalls, IPS/IDS, CASB, and other advanced security systems.
• Oversees technology management of CNM's environment, managing remote, data, and physical access.
• Perform other related duties as assigned.

• Associate degree

• Three (3) years of related experience
• Certification in a Cybersecurity Related Discipline, a CompTIA Security+ is preferred

• This position requires basic knowledge of network security principles, firewalls, and intrusion detection/prevention systems (IDS/IPS)
• A combination of education and experience may be substituted for requirements of the position