IT Security Analyst at GVA Partners

Job description

• Act as the primary liaison between the organization and external PCI DSS and ISO27001 assessors and auditors.
• Develop and deliver security awareness training programs on a quarterly, annual, and on-demand basis.
• Create and distribute security awareness materials, such as presentations, posters, and email alerts.
• Measure the effectiveness of security awareness programs through surveys, tests, and other metrics.
• Define and enforce security requirements for applications in development.
• Collaborate with development teams to integrate security best practices into the software development lifecycle.
• Monitor and ensure compliance with security requirements throughout the development process.
• Participate in the delivery of cybersecurity operations through vulnerability and threat identification, incident detection and response, forensic investigations, Patch and Vulnerability Management. Engage with infrastructure and applications teams in mitigation and remediation efforts.
• Maintain key metrics that are indicative of the security posture of the infrastructure.
• Keep abreast of threat intelligence feeds to stay abreast of industry reports and emerging threat that may affect.
• Produce Executive Dashboard Security reporting showing actionable insights from IT Security monitoring tools
• Engage with other IT units, where applicable, to establish and enforce security best practices, protection objectives, and process improvements.