IT Security Analyst

REPORTS TO:

Vice President of IT

SCOPE OF POSITION:

The IT Security Analyst is responsible for the support of the information security processes and Security Management Incident Response Policy along with implementing processes to protect FireKeepers Casino Hotel (FKCH) data confidentiality, integrity, and availability, as well as maintain the technical mechanisms that enable these controls.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

The following is a list of the main duties and responsibilities. However, other duties may be assigned as deemed necessary by management. All duties must be performed in accordance with Tribal, Federal, and other applicable requirements, organizational specific policies, procedures and practices.

• Oversees Information Technology (IT) security as it relates to monitoring, investigating and reporting of security related events.
• Creates, updates and oversees execution of daily, weekly, monthly, quarterly and annual security assessments and analysis of systems.
• Ensures successful compliance of HIPAA, NIGC MICS, PCI among various other compliance standards throughout the Gaming industry.
• Evaluates the security of new applications and programs prior to installation or upgrades.
• Monitors and responds to any alerts within the FKCH information technology infrastructure.
• Monitors and ensures that end-users are adhering to Information Technology policies, standards and best practices.
• Ensures all servers and other IT related equipment is hardened for compliance and/or industry standards.
• Responsible for ensuring that FKCH meets all security standards for internal or external audits.
• Ensures that all information technology/service diagrams are up to date and documented appropriately.
• Recognizes and addresses computer vulnerabilities in internal servers, external servers and applications.
• Responsible for administration, documenting and monitoring inventory control for all network equipment.
• Responds to security incidents according to the Security Incident Management Response Policy.
• Provides guidance to Incident Response Team for handling information security incidents while coordinating efforts among multiple business units during response.
• Provides timely and relevant updates to Network Operations Manager in relation to Security Incidents and provides investigation findings to assist in improving information security posture.
• Validates and maintains incident response plan and processes to address potential threats.
• Compiles and analyzes data for proper reporting and metrics.
• Responsible for successfully scanning and patching of all applications when vulnerabilities may be present or released.
• Responsible for daily audits of Firewall(s), log management, intrusion detection systems and content filtering controls.
• Responsible for Incident Response Lead.
• Ensures training in security matters is provided to all levels of staff.
• Maintain current knowledge of industry best practices for strategy, design and operational support for information technology security.
• Maintains the highest level of confidentiality.
• Responsible for maintaining a consistent, regular attendance record as outlined in the FireKeepers Casino Hotel Attendance Policy.
• Outstanding example of and a credit to FireKeepers Casino Hotel.

MINIMUM REQUIRED QUALIFICATIONS:

An applicant’s education, training and experience must be sufficient to demonstrate that the applicant possesses the ability to successfully perform each of the essential duties and responsibilities satisfactorily. FireKeepers reserves the right to verify the sufficiency of a candidate’s education, training and competencies through the interview process, testing and methods.

The requirements listed below are generally representative of the education, experience, and skills and/or abilities required to enable one to successfully perform the essential duties and responsibilities:

Proficiency in both written and verbal English communication is required.

Must have five years of Information Technology experience. Must have three years of Network Security experience and be able to successfully pass a Network Engineering aptitude test. Must possess superior computer skills, and be proficient in software applications currently in use by the company. Must be able to communicate with all members of the IT team in a professional, cordial manner, in order to successfully accomplish departmental and company goals. Must be well organized.

GENERAL OR PREFERRED QUALIFICATIONS:

Bachelor’s degree in Computer Science, Information Sciences or Business Administration from a four-year college or university. Ability to effectively present information in one-on-one and small group situations. Ability to define problems, collect data, establish facts, and draw valid conclusions.

CISSP/GIAC/CISA/CISM/CCIE/CCNA or other specialized security certifications preferred.

PHYSICAL & ENVIRONMENTAL DEMANDS:

The physical demands described here are representative of those that must be met by a Team Member to successfully perform the essential functions of this job.

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this position, a Team Member is regularly required to talk or to hear. The Team Member is also regularly required to stand, walk, sit, and use hands to handle or feel objects, tools or controls. A Team Member is occasionally required to reach with hands and arms, and to sit; climb or balance; and stoop, kneel, crouch or crawl. Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception and the ability to adjust focus.

Work is performed throughout all areas of the facility where the noise level varies from quiet to loud depending upon business.

INDIAN PREFERENCE

Indian preference will be applied in the selection of qualified applicants in accordance with the NHBP Indian Preference in Employment Code, which affords employment preferences to NHBP Tribal citizens, parents or spouses of NHBP citizens and other Native Americans. For purposes of this preference, NHBP law defines "Native American" as: (a) an enrolled member of any other federally-recognized Indian tribes; (b) an enrolled member of a Canadian Indian tribe or First Nation; or (c) an enrolled member of the Grand River Band of Ottawa Indians or the Burt Lake Band of Ottawa/Chippewa Indians.

FireKeepers Casino Hotel reserves the right to make changes to the above job description as necessary.