Cybersecurity Analyst

The Cybersecurity Analyst is responsible for developing and maintaining the technology/cyber security capabilities necessary for safeguarding UNCF's information systems and applications; assisting in designing, planning, testing, and implementation phases of cybersecurity technology projects.

Primary Responsibilities and Duties

The following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below.

Specific activities may change from time to time. The scope for this role covers a broad spectrum of cybersecurity domains, including security and risk management, asset security, security engineering, identity and access management, security assessment, security operations, and software development security.

Develop and maintain technology/cyber capabilities including threat modeling of application designs, static application security testing (SAST), software composition analysis (SCA), dynamic application security testing (DAST), and penetration testing.

Participate in efforts related to designing, planning, enhancing, and testing all cybersecurity technologies used throughout the organization, including baselining current systems, trend analysis, and capacity planning as required for future systems requirements and new technologies.

Participate in the implementation of new information security technologies or integration of existing technologies, including initial configuration, installation, change management, and operational handoff.

Assess and mitigate cybersecurity risks by identifying vulnerabilities, evaluating threats, and implementing appropriate security controls.

Interpret noncompliance patterns to assess their impact on risk levels.

Participate in security assessments of vendors as part of due diligence to determine risk and alignment with the organization's minimum-security standards.

Contribute to the pipeline of written information security policy reviews and status tracking.

Lead small cybersecurity projects with manageable risks and resource requirements; plays significant roles in larger, more complex initiatives.

Support the information security training and awareness program, ensuring that campaigns and content align with organizational threats, industry best practices, and compliance requirements.

Perform incident response and handling methodologies, including the supervision of protective or corrective measures when cybersecurity incidents or vulnerabilities are discovered.

Provide system-related input on cybersecurity requirements to be integrated into statements of work and procurement documents.

SUPERVISORY RESPONSIBILITIES

No supervisory responsibilities.

Qualifications

EDUCATION AND EXPERIENCE

Bachelor's Degree from a four-year College or University in Information Technology, Cybersecurity, or a related field required, with a minimum of 5 years of experience as a senior analyst or lead of security/networks/systems operations, and direct involvement in operations management, policy development, system procurement activities, leadership, mentorship, and information assurance management.

In-depth knowledge of computer networking concepts, protocols, risk management processes, cybersecurity and privacy principles, cyber threats, and vulnerabilities a must.

CERTIFICATIONS AND LICENSES

Certifications such as COMPTIA Security +, Network +, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Manager (CISA) are highly desirable.

OTHER SKILLS AND ABILITIES

Strong understanding of security architecture, risk assessment, and security controls.

Proficiency in incident response, penetration testing, and security assessment methodologies.

Familiarity with PCI DSS, HIPAA, COPPA, GLBA, and state/local privacy regulations.

Familiarity of cybersecurity principles, frameworks, and industry standards such as CIS, NIST Cybersecurity Frameworks.

Excellent project management skills, including the ability to prioritize tasks, manage resources, and adapt to changing priorities.

Exceptional communication and interpersonal skills, with the ability to influence and engage stakeholders at all levels of the organization.

Project Management skills.

About UNCF

The United Negro College Fund (UNCF), the nation's largest and most effective minority education organization, has been an engine of minority educational achievement for more than 70 years. UNCF's mission is to build a robust and nationally recognized pipeline of black students who, because of UNCF support, become highly qualified college graduates. UNCF is committed to closing the educational attainment gap between African Americans and other populations by increasing postsecondary access and success for students from underrepresented groups, particularly low-income and first-generation students.

Compensation and Benefits

Benefits include:

Medical, Dental & Vision

Vacation, Sick & Personal Leave

Life Insurance (Basic & Optional)

Flex Spending Accounts

403(b) Retirement Account

Holiday Savings Plan

Salary Range: $85,000.00 - $100,00.00 Salary is commensurate with experience, and for the Headquarters location in Washington DC. Salary will vary and may be lower in other geographical areas.

UNCF is EOE M/F/D/V