Posting Text
The SD Board of Regents Information Systems, Sioux Falls, SD is currently seeking a Cybersecurity Analyst to join our team! This position will work in conjunction with the Cybersecurity Engineer to support the growing security responsibilities and related risks affecting the Board of Regents information technology environment. The primary responsibilities and emphasis of this position will be in the areas of security operations, governance, risk management, and compliance to enhance the organization’s cybersecurity posture.

Key Responsibilities
Develop and maintain cybersecurity policies, standards, and guidelines to align with frameworks such as NIST, CIS, GLBA, PCI, and FERPA
Conduct security risk assessments, audits, and vendor risk evaluations to ensure compliance and mitigate threats
Assist the Cybersecurity Engineer with monitoring security events, investigating incidents, and managing security tools such as SIEM, EDR, vulnerability scanners, and firewalls
Analyze security alerts, identify trends, and recommend mitigation strategies
Help develop security awareness initiatives, ensuring staff and stakeholders understand cybersecurity best practices
Work closely with IT teams and external vendors to implement security controls and strengthen the organization’s cybersecurity defenses


Knowledge, Skills & Abilities:
Knowledge of:
Cybersecurity fundamentals, including threat detection, incident response, vulnerability management, and risk assessment
Compliance frameworks and security regulations (NIST, CIS, GLBA, PCI, FERPA)
Security tools and technologies (SIEM, EDR, vulnerability scanners, firewalls, IAM, PAM)
Security event logging, monitoring, and forensic analysis
Network security concepts, including firewalls, IDS/IPS, VPNs, and access controls
Identity and access management (MFA, privileged access management (PAM))
Vendor risk assessment processes and third-party security best practices

Skill & Ability to:
Develop and implement cybersecurity policies, standards, and best practices
Conduct risk assessments, security audits, and vulnerability scans
Monitor and analyze security events, identifying and responding to potential threats
Research emerging cybersecurity threats and mitigation strategies
Communicate complex technical security concepts to both technical and non-technical audiences
Provide end-user security training and awareness programs
Work independently with strong self-management skills, while also collaborating within a team environment

Preferred Qualifications:
Bachelor’s degree required; equivalency considered
Two years experience in information technology or security experience; required
Must have excellent verbal, written and interpersonal skills;
Must have strong organizational and problem solving skills;
Experience within a higher education environment;
Experience using security tools (vulnerability scanners, intrusion prevention systems, firewalls, VPN’s, data loss prevention, etc.);
Security + or similar certification;