OVERALL DESCRIPTION

The Security Analyst will plan, implement, upgrade, and monitor security protocols for the protection of the organization’s computer networks and information. The Security Analyst will also handle matters that are particularly complex, often time-sensitive and confidential, supporting the SEPTA’s Legal, Audit and Investigative units, being responsive to demand priorities while managing risk and protecting data integrity.

The role utilizes extensive knowledge of data protection standards, industry best practices, professional experience, collaboration, to assist business partners by deep diving into existing processes to integrate processes with improved security controls. The individual will be responsible for reviewing business processes to identify gaps leading to potential data exposure, integrating existing data protection methods into existing processes, gathering business requirements for data protection needs that are not met by existing data protection tools, and serve as a subject matter expert in Data Protection capabilities.

SPECIFIC RESPONSIBILITIES

1. Collaborates with users to discuss computer data access needs, to identify security threats and violations, and to identify and recommend needed programming or process changes.
2. Uses data encryption, firewalls, and other appropriate security tools and applications to conceal and protect transfers of confidential digital information.
3. Develops and implements plans to safeguard digital data from accidental or unauthorized modification, destruction, or disclosure; adheres to emergency data processing needs.
4. Reviews violations of security procedures; provides training to ensure violations do not recur.
5. Monitors and restricts access to sensitive, confidential, or other high-security data.
6. Modifies security files and applications as able and necessary to provide specialized access, allow new software to be installed or integrated, or correct errors.
7. Performs risk assessments, audits, and tests to ensure proper functioning of data processing activities and security measures.
8. Safeguards system security and improves overall server and network efficiency by training users and promoting security awareness.
9. Responds to requests for data logs, data discovery and other legal requests for SEPTA information.
10. Manages the legal hold and retention schedule for paper and virtual documents.
11. Performs other related duties as assigned.

QUALIFICATIONS AND EXPERIENCE

• Bachelor’s degree in Information Technology, Computer Science, or Records Management and a minimum of 3 years of related experience required. 
• An equivalent combination of experience and education, i.e., two (2) years of related experience, equating to one (1) year of formal post-high school education, may be considered in lieu of the above requirements.
• Must be proficient with applicable enterprise application software, e.g., Microsoft Office Defender, Discovery, required.
• Organized with attention to detail required. 
• Internal SAM employees are eligible to apply for open positions (transfer/promotion) after six (6) months from the date of assignment for their current position. A review of the previous one (1) year performance appraisal (to ensure minimum standard of “Meets Expectations” for overall rating) will be conducted. A review of Discipline record, to ensure no discipline actions occurred during previous 1 year of employment will also be conducted.