Senior Information Security Analyst

The position supports the NEA’s strategic objective to focus the energy and resources of its 3 million members toward the promotion of public education by providing high level safety of Information Technology assets and to protect systems from intentional or inadvertent access, harm, or destruction.

Position Summary: The primary responsibilities include assisting in the development and implementation of security standards, procedures and guidelines for multiple platforms and diverse systems environment. The incumbent updates, maintains, and documents security controls. The incumbent works collaboratively with departmental teams to ensure that new and existing infrastructure, software, hardware, architecture, and/or applications are developed and deployed in a secure manner. In addition, the incumbent is responsible for assisting in the development and management of security for one or more IT functional areas across the enterprise; implementing and maintaining security technology solutions, which may include technology for encryption, firewalls, authorization, authentication, intrusion detection, and gateway security controls; developing, implementing, and ensuring documentation of security standards, procedures, processes, guideline and policies, such as user authentication rules, security breach resolution procedures, security auditing procedures, and use of firewalls and encryption routines; and ensuring requirements and deliverables are clearly defined. Other duties include: analyzing and preparing status reports on security matters; monitoring and recommending solutions for correcting issues related to security technology performance and capabilities. To carry out responsibilities, the incumbent uses a personal computer, associated software, and other office technology.

In compliance with the Americans with Disabilities Act (ADA), the following is provided: The position involves skill in using a personal computer; oral and written communication skills; skills in proofreading and editing; use of clear and articulate speech; interpersonal relations skills; reasoning and problem solving skills; ability to work in a fast-paced environment; ability to sit for long periods, stoop, bend, reach and carry light materials (up to 10 lbs.); and ability to travel by various methods of transportation, e.g., airplane, car.

MINIMUM EDUCATION: Bachelor degree in Computer Science or a related discipline or an equivalent combination of education and experience from which comparable knowledge and skills may be acquired. MINIMUM QUALIFICTIONS: Five years experience in the security aspects relating to multiple platforms, operating systems, software, communications and network protocols. Experience with networking and security technologies such as IPSEC (Internet Security Protocol), VPN (Virtual Private Network), routers, switches, firewalls, intrusion detection and prevention, data leakage, WAF (Web Application Firewall). OTHER REQUIREMENTS: Experience with some aspects of information security and compliance, such as PCI, SOX, and HIPAA requirements for information systems and industry best practices such as ISO17799/27011, NIST (National Institute of Standards and Technology). Some travel required (15-20 overnights per year).

SELECTION CRITERIA: TIER 1 (Essential): Extensive knowledge of business operations. Experience in identifying underlying principles, reasons, or facts of information or data into separate parts. .Demonstrated experience with information security and compliance, such as PCI, SOX, and HIPAA requirements for information systems and industry best practices such as ISO17799/27011, National Institute of Standards and Technology (NIST). Demonstrated experience with compiling, coding, categorizing, calculating, tabulating, auditing, or verifying information or data. Demonstrated experience in monitoring and reviewing information from materials, events, or the environment, to detect or assess problems. Broad knowledge of on-line systems, access methodologies, and security procedures. Successful references. TIER 2 (Significant): Knowledge of industry best practice standards pertaining to Information Security and data privacy. Significant experience in collaborating with others for purposes of identifying, defining and solving problems. Experience understanding the implications of new information for both current and future problem-solving and decision-making. Effective interpersonal and customer service skills to interact with all levels of staff. Ability to work independently and collaboratively with team members (internal and external to the organization. TIER 3 (Desirable): Familiarity with business objectives and strategies. Ability to analyze information using logic to address work-related issues and problems.

In compliance with the Americans with Disabilities Act (ADA), the following is provided:  The position involves skill in using a computer and/or laptop; oral and written communication skills; skills in proofreading and editing; use of clear and articulate speech; interpersonal relations skills; reasoning and problem-solving skills; ability to work in a fast-paced environment; ability to sit for long periods, stoop, bend, reach and carry light materials (up to 10 lbs.); and ability to travel by various methods of transportation, e.g., airplane, car.

NEA is an equal opportunity/affirmative action employer and encourages applications from all qualified candidates regardless of gender, race, ethnicity, age, sexual orientation, marital status, religion, or disability. Know Your Rights: Workplace Discrimination is Illegal. To apply for this position or to search for other openings, please go to our jobs page at Careers at NEA (myworkdayjobs.com)  

NEA Participates in E-Verify. Read more here E-Verify Participation & Right to Work.

NEA complies with the DC Wage Transparency Act of 2023.