Cyber Security Analyst

Cyber Security Analyst

SUPERVISOR: IT Director EXEMPT (Y/N): Yes

CLASSIFICATION: Key Employee

POSITION SUMMARY:

The Cyber Security Analyst is a critical role within the IT Security department. This individual will play a pivotal role in upholding our commitment to cybersecurity, regulatory compliance, and operational continuity. Under the general direction of the IT Director, the Cyber Security Analyst will be responsible for identifying and mitigating security threats, safeguarding customer data, and maintaining the highest standards of security practices within our organization. He or she provides the highest level of support and monitoring of the Casino's key Security systems to include software update/patch requirements, incoming threats, outgoing traffic monitoring for possible threat vectors, Antivirus and Malware software, intrusion detection and prevention,

Maintains the confidentiality of all privileged information.

ESENTIAL DUTIES AND RESPONSIBILITIES:

• Security and Compliance: Ensure compliance with industry-specific regulations, such as PCI DSS (Payment Card Industry Data Security Standard), and other gaming commission requirements. Develop and implement robust cybersecurity measures to protect customer data and sensitive information.

• Incident Response and Threat Management: Proactively monitor and respond to security threats and incidents. Rapidly assess, isolate, and mitigate security vulnerabilities and breaches.

• Technology Advancements: Stay updated on emerging cybersecurity threats and trends. Implement advanced security technologies to protect our digital infrastructure.

• Data Protection: Ensure the security and integrity of customer data and financial transactions. Conduct regular audits to identify and address data security gaps.

• Operational Continuity: Develop and test disaster recovery and business continuity plans to ensure the uninterrupted operation of IT systems.

• Vendor and Supplier Relationships: Collaborate with IT vendors and suppliers to ensure timely support and maintenance. Evaluate vendor performance and negotiate contracts as needed.

• Train new IT staff on the casino's software and systems related to their job title - continuously makes sure new employees follow proper procedures and policies while learning the casino environment, collaborate with other IT personnel, serving as a technical lead in the evaluation of possible Security threats, and Security impacts of new technologies, policies, and procedures.

• Research available Security technologies, determine impacts to current systems, review CISA Security updates and new releases for possible impact to the Casino's systems, and determine secure integration strategies with other systems. Make recommendations to the Director of IT for best means to secure implementation practices.

• Updates Antivirus and Malware Protection software, intrusion detection and prevention firmware, server hardware, operating systems, and software on IT systems to provide highest levels security, availability, and functionality of mission-critical services.

• Provides the Director of IT with new threat vectors for the Jena Choctaw Pines Casino Cyber Training class.

• Train new IT staff on the casino's Security software and systems related to their job title - continuously makes sure new employees follow proper procedures and policies while learning the casino environment, collaborate with other IT personnel, serving as a technical lead in the evaluation and use of new, secure technologies, policies, and procedures.

• Maintains and supports the security of the organization's various systems for day-to-day operations.

• Perform daily Security system monitoring, verifying the integrity and availability of all hardware, server resources, systems and key processes.

• Provide technical knowledge by conducting research and occasionally attend meetings regarding potential new products or equipment the casino is considering implementing.

• Assists with secure implementation of new equipment, application deployment, and infrastructure upgrades with new and existing agencies - report project status updates to the IT Director - this duty entails collaborating, communicating, and problem solving with colleagues beyond the IT Team.

• Monitors Cisco Secure Cloud's spam filter and releases inaccurate detections of unsolicited, unwanted, and virus-infected email.

• Manages security solutions by proactively monitoring and correcting security issues and vulnerabilities, ensuring network resources have the proper defenses; provides continuous maintenance and upkeep of the casino's systems, ensuring internal systems are secure and protected from breaches and viruses.

• Creates new antivirus group policies as required to accommodate changes made to the network.

• Analyzes and assesses network vulnerabilities, compromises, failed quarantines, and false positives; submits post-incident reports for affected system(s) when necessary to the appropriate leadership.

• Attend and occasionally perform weekly security meetings with the General Manager or CFO - includes preparing security and backup reports when the IT Director is absent.

• Documents and maintains records for all vendor remote access requests for auditing, ensure vendors follow correct remote access requests procedures defined by the standards.

• Ensure the organization's computer systems on multiple networks are well maintained and reliable, including tasks such as applying weekly security updates.

• Train and educate employees on proper procedures and policies concerning acceptable computer usage and best computer practices.

• Provide integrated hardware and software technical support to employees, helping diagnose and resolve common computing problems - when necessary, escalate issues by initiating contact with agencies and submitting tickets on behalf of the casino to remediate problems - applying solutions to problems as recommended.

• Comply with all gaming statutory obligations and company policy.

• Willing to work odd and irregular hours including nights, weekends, and holidays.

• Performs other duties as required.

This list of duties and responsibilities is illustrative only of the tasks performed by this position and is not all-inclusive.

MINIMUM QUALIFICATIONS:

• Must have and maintain CompTIA Security+ certification

• Must have and maintain CompTIA A+ certification

• Possess at least an Associate's Degree in a related field, providing a strong educational foundation for the role.

• At least 2 years of experience in the field of Gaming Information Technology, with a deep understanding of gaming industry security requirements and regulations is a plus.

• Experience configuring VMWare Technology, VDI infrastructure, Windows Server, Microsoft Exchange, Active Directory, Cisco AMP, Cisco Meraki Technology, Cisco Umbrella.

• Valid driver's license and clean driving record.

• No felony, theft or stealing convictions.

• Must be able to successfully pass a pre-employment drug/alcohol screen, background investigation, obtain and maintain gaming license.

• Tribal preference.

TRIBAL PREFERENCE POLICY:

Members of the Jena Band of Choctaw Tribe shall be given absolute preference with respect to hiring, promotions, training, contracting, and separation from employment. For persons who meet the minimum qualifications, preferential treatment shall be based on the following criteria and shall be given in the following order:

• Enrolled members of the Jena Band of Choctaw tribe who satisfy the minimum job qualifications

• Spouses of enrolled members of the Jena Band of Choctaw who satisfy the minimum job qualifications

• Enrolled members of other recognized tribes who satisfy the minimum job qualifications

• Military Veterans

• All others who satisfy the minimum job qualifications

KNOWLEDGE, SKILLS AND ABILITIES:

• Knowledge of information systems technologies, applications principles and capabilities to include: data networking and processing, IS security processes and methodologies, computer operations, hardware platforms, and enterprise software applications.

• Skill in planning, organizing and coordinating information technologies and prioritizing work activities in accordance with established goals and objectives.

• Skill in analyzing problems, projecting consequences, identifying solutions, and implementing recommendations.

• Skill in preparing, reviewing, and analyzing operational and technical reports.

• Ability to introduce and implement new methods and procedures to keep pace with rapid growth in the information services industry.

• Ability to manage projects according to established goals and objectives.

• Ability to provide user training and access as demonstrated by formal education and/or job experience

• Ability to cope with stressful conditions and situations.

• Ability to identify systems, operation, technical or applications problems and to initiate and recommend appropriate corrective actions.

• Ability to communicate efficiently and effectively both verbally and in writing.

• Ability to exercise independent judgment.

• Ability to handle multiple tasks and meet deadlines.

• Ability to be persuasive and tactful in controversial situations.

• Ability to interact and maintain good working relationships with individuals of varying social and cultural backgrounds.

• Ability to maintain confidentiality.

PHYSICAL DEMANDS:

• While performing the duties of this job, the employee regularly is required to sit; use hands to finger, handle, or feel; reach with hands and arms; and talk or hear.

• The employee frequently is required to walk.

• The employee occasionally is required to stand; and stoop, kneel, crouch, or crawl.

• The employee must occasionally lift and/or move up to 25 pounds.

WORK ENVIRONMENT:

• Work is generally performed in an office setting with a moderate noise level.

• Occasional work is performed in a Casino setting with exposure to second-hand smoke and a moderate noise level.

• Extended hours and irregular shifts may be required.

• Tight time constraints and multiple demands are common.