Information Security Analyst

Job Summary

Information security analysts support CalPERS information security management programs. These analysts perform a variety of tasks using Information Technology (IT) to assist management and staff to protect CalPERS information assets. These tasks span the following areas:

• Security and Risk Management (security, risk, compliance, law, regulations, and business continuity)
• Asset Security (protecting security of assets)
• Security Engineering (engineering and management of security)
• Communication and Network Security (designing and protecting network security)
• Identity and Access Management (controlling access and managing identity)
• Software Development Security (understanding, applying, and enforcing software security)
• Security Operations (foundational concepts, investigations, and incident management)
• Security Assessment and Testing (designing, performing, and analyzing security testing)
• Security Operations (foundational concepts, investigations, incident management, and disaster recovery)

Division/Unit

Information Security Office

• Information Security Management Section

Necessary Qualifications/Skills

• 2+ years of IT experience in performing analysis of complex information systems
• 2+ years of experience performing security analysis of information systems and business processes
• Demonstrated communications capabilities that include preparing reports and making presentations
• Ability to thrive in a fast-paced and collaborative environment

Desirable Qualifications/Skills

• 1+ years of experience managing security events, data breaches, and incidents
• 1+ years of experience performing security and risk management (security, risk, compliance, law, and regulations) functions
• Knowledge of both California and federal laws, regulations, and policies related to information security
• Good analytical and problem solving skills

State Classifications

• Associate Information Systems Analyst (Specialist)
• Staff Information Systems Analyst (Specialist)
• Senior Information Systems Analyst (Specialist)

Comparable Private Sector Job Titles

• Information Security Analyst
• Information Security Architect
• Information Security Auditor
• Information Security Specialist
• Information Assurance Engineer

Related Majors/Degrees

• Security and Risk Analysis Information and Cyber Security
• Business Administration in Information Security and Assurance
• Cyber Security and Information Assurance
• Cyber Forensics & Information Security
• Information Systems Security
• Information Technology

Related Certifications

• GIAC Security Essentials (GSEC)
• Certified Information Security Manager (CISM)
• Systems Security Certified Practitioner (SSCP)
• Certified Information Systems Security Professional (CISSP)