IT Security and Systems Analyst

POSITION SUMMARY:

The IT Security and Systems Analyst serves as a liaison between business departments, Information Technology, and Information Security to help ensure technology solutions support business needs and organizational priorities. This position defines and documents business and system requirements, supports Guidewire Insurance Suite and other enterprise applications, and assists with cybersecurity governance, risk management, compliance, and audit activities.

ESSENTIAL FUNCTIONS: The following are the usual, basic and essential functions of the position. However, this job description does not preclude the performance of other duties by the incumbent. These functions are not to be construed as an exhaustive list of all responsibilities, duties, and skills required:

• Gathers, analyzes, and documents business and system requirements, user stories, process flows, and acceptance criteria.
• Facilitates requirements workshops, solution-design discussions, and process-improvement activities.
• Serves as a liaison between business stakeholders, application teams, technical teams, vendors, and Information Security.
• Supports Guidewire InsuranceSuite and other enterprise applications by evaluating system needs, enhancements, defects, and production issues.
• Supports user acceptance testing, defect triage, production releases, and post-implementation activities.
• Assists with prioritizing enhancement requests and maintaining technology-related backlogs.
• Analyzes application metrics and operational data to identify opportunities to improve efficiency and effectiveness.
• Supports the Information Security Officer in maintaining and improving the organization’s cybersecurity program.
• Assists with security risk assessments, control reviews, vulnerability management, and remediation tracking.
• Supports internal and external audits by gathering documentation, coordinating responses, and monitoring corrective actions.
• Develops and maintains security policies, standards, procedures, and supporting documentation.
• Assists with vendor security reviews, third-party risk assessments, and identity and access management reviews.
• Supports security awareness, regulatory compliance, and cybersecurity governance activities.
• Participates in incident response activities, documentation, and post-incident reviews.
• Monitors emerging cybersecurity risks and recommends improvements to security controls and processes.

REQUIRED EDUCATION AND EXPERIENCE:

• Bachelor’s degree in Business, Information Systems, Computer Science, Cybersecurity, or a related field.
• Five years of business or systems analysis experience supporting enterprise applications or business processes.