financial analyst

data & ai analyst

business & strategy analyst Jobs in Houston

business & strategy analyst

data analyst intern

end user support analyst

cybersecurity risk analyst

Citgo

<div><p><b>CITGO PETROLEUM CORPORATION</b></p><p>
CITGO Petroleum Corporation is a recognized leader in the refining industry and operates under the well-known CITGO brand. CITGO owns and operates three refineries located in Lake Charles, LA.; Lemont, IL.; and Corpus Christi, TX, and wholly and/or jointly owns 38 active terminals, six pipelines and three lubricants blending and packaging plants. With approximately 3,300 employees and a combined crude capacity of approximately 807,000 barrels-per-day (bpd), positions CITGO as one of the best-branded supplier companies in the industry.</p><p></p><p><br>
At CITGO our people are our most important resource. Our core values are Safety, Integrity, Respect, Accountability, and Care.</p><div><div><div><h2 class="jobSectionHeader"><b>
Job Summary</b></h2></div><div><p>
The <b>Cybersecurity Risk Analyst</b> is responsible for identifying, assessing, and managing cybersecurity risks across the organization's IT and OT environments. This role involves conducting comprehensive risk assessments, leading vulnerability management efforts, and ensuring compliance with industry frameworks and regulations. The analyst will work closely with cross-functional teams to design and implement effective risk mitigation strategies, evaluate third-party risks, and support incident response and post-incident evaluations. By leveraging data-driven methods and tracking key performance indicators, the Cybersecurity Risk Analyst plays a critical role in enhancing the organization&rsquo;s security posture and aligning cybersecurity efforts with business objectives.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2></div><div><p><b>
Degree:</b></p><ul><li>
Bachelor's Degree</li></ul><p><b>
The minimum number of years of job related experience required by this job is:</b></p><ul><li>
8 years.</li></ul><p><b>
List any specialized training or unique skills required / preferred:</b></p><ul><li>
In-depth understanding of cybersecurity frameworks such as NIST, ISO 27001, and FAIR.</li><li>
Strong familiarity with IT and OT environments, including cloud platforms, IoT devices, data centers, and software applications.</li><li>
Expertise in vulnerability management processes, penetration testing, and threat modeling.</li><li>
Awareness of emerging technologies and their associated risks.</li><li>
Advanced analytical and problem-solving skills for assessing and prioritizing risks.</li><li>
Effective communication and presentation skills to translate technical risks into business impacts for stakeholders.</li><li>
Proficiency in creating detailed documentation, including risk reports, policies, and compliance evidence.</li><li>
Preferred CISSP, CRISC or other security certifications.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Job Duties</b></h2></div><div><p><b>
1. Comprehensive Infrastructure Risk Assessment</b></p><ul><li>
Perform regular risk assessments of IT and OT systems, including networks, cloud platforms, IoT devices, and software, aligned with NIST and CIS Controls.</li><li>
Ensure compliance with security regulations (e.g., GDPR, CCPA, PCI DSS) and manage third-party risks.</li></ul><p><b>
2. Vulnerability Management</b></p><ul><li>
Lead vulnerability scans, penetration tests, and threat modeling.</li><li>
Assess and address vulnerabilities, prioritize patches, and adapt to new threats in collaboration with teams.</li></ul><p><b>
3. Risk Reporting &amp; Communication</b></p><ul><li>
Present risk reports to stakeholders, translating technical details into business impacts.</li><li>
Use methods like FAIR to prioritize risks and provide updates on risks, incidents, and mitigation efforts.</li></ul><p><b>
4. Collaboration on Risk Mitigation</b></p><ul><li>
Partner with governance and IT teams to develop and implement risk mitigation strategies aligned with security and business goals.</li></ul><p><b>
5. Incident Response &amp; Risk Evaluation</b></p><ul><li>
Act as a key incident response team member, offering expertise during security incidents.</li><li>
Conduct post-incident evaluations, identify root causes, and participate in simulations to enhance response readiness.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Job Duties II</b></h2></div><div><p><b>
6. Cybersecurity Framework &amp; Policy Development</b></p><ul><li>
Contribute to developing and refining cybersecurity policies, standards, and procedures aligned with risk management strategies.</li><li>
Provide input on creating technical security standards supporting risk management goals.</li></ul><p><b>
7. Regulatory Compliance and Audit Support</b></p><ul><li>
Ensure compliance with regulatory requirements through risk assessments, vulnerability management, and mitigation efforts.</li><li>
Support cybersecurity audits by providing documentation, reports, and evidence of remediation activities.</li></ul><p><b>
8. KPI Tracking &amp; Reporting</b></p><ul><li>
Monitor KPIs to evaluate the effectiveness of risk and vulnerability management programs.</li><li>
Leverage metrics, automated tools, and dashboards to report on security posture and provide real-time insights.</li></ul><p><b>
9. Emerging Technology Risk Management</b></p><ul><li>
Evaluate risks tied to adopting emerging technologies (e.g., AI, blockchain) and integrate them securely.</li><li>
Develop strategies to address risks linked to digital transformation initiatives.</li></ul></div></div></div><p>
Job duties displayed above are not all-inclusive, site-specific responsibilities may be assigned.</p><p></p><p><b><br>
Here are the incentives we offer:</b></p><ul><li>Remote Work options available for eligible positions</li><li>Options are department and/or location specific</li><li>9/80 Work Schedule Option (where applicable)</li><li>Annual Vacation Incentive (40-120 hours of additional pay) for Eligible Employees</li><li>Paid Vacation Time</li><li>Company-Paid Holidays</li><li>Caregiver Leave</li><li>Excellent 401(k) Match</li><li>Pension Plan</li><li>Company-Paid Sick Leave and Long-Term Disability</li><li>Medical, Dental, &amp; Vision Plans; FSA and HSA options</li><li>Company-Paid Life Insurance for Active Employees</li><li>Healthy Rewards Program</li><li>Service Awards Program</li><li>Educational Assistance Plan</li><li>Dependent Children Scholarships</li><li>Reimbursement for Gym Membership</li><li>Employee Discount Programs</li><li>On-site Health Clinic (select locations)</li><li>On-site Cafeteria (select locations)</li><li>On-site Credit Union and ATM (Corporate office only)</li><li>On-site Fitness Center (select locations)</li></ul><p><b><br>
PLEASE NOTE ALL JOBS DO NOT QUALIFY FOR ALL PERKS</b></p><p></p><p><br>
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or disability.</p><p>
Requisition ID - 1129</p></div>

CYBERSECURITY RISK ANALYST

Cheniere Energy

<p></p><div><p>The Senior Analyst, Technology Security (ICS) reports to the Manager, Technology Security and is a technical expert for plant control systems networks and computing assets and ICS cybersecurity best practices. The position is responsible for hands-on troubleshooting, administrating, supporting, maintaining and improving control system networks, computers, applications, and cybersecurity initiatives including documentation. The Senior Analyst with direction from the Manager, Technology Security and input from the Control Systems Engineer will provide support for development and execution of ongoing infrastructure and cybersecurity projects.<br>
</p><div></div><div><b>RESPONSIBILITIES AND ESSENTIAL DUTIES
</b></div><ul><li><p>Support execution and development of infrastructure/cybersecurity projects and major capital projects.
</p></li><li><p>Serve as the cybersecurity advisor to the Controls Systems experts. Monitor with the use of cybersecurity program tools, the health of control system software, hardware, and networks, troubleshoots hardware, software and network issues, performs hardware replacements, performs software corrections, and schedules upgrades as needed. Provide Controls Systems support to Maintenance and Operations groups to keep systems operational.
</p></li><li><p>Maintain, troubleshoot and improve existing cybersecurity management systems including endpoint security, patch management, logging, asset monitoring, access control, IDS, Active Directory Group Policies and administration, firewall rules, and network configuration management.
</p></li><li><p>Support development of cybersecurity framework including creation/revision of policies, guidelines, standards and procedures. Support development of practical ICS Asset Management KPIs and associated reporting.
</p></li><li><p>Build and administer the Maritime Transportation Security Act (MTSA) Cybersecurity compliance program. This includes but is not limited to developing/maintaining a Cybersecurity Plan, auditing and updating the Plan; ensuring the Cyber Incident Response Plan is executed and exercised, ensuring adequate training of personnel, and compliance with the Plan.
</p></li><li><p>Participate in ICS Security Incident Response.
</p></li><li><p>Use sound engineering practices, plant standards, and specifications to ensure that documentation for the Controls Systems are maintained properly. Maintains the controls systems asset inventory and system architecture documentation. Evaluate database/automated solutions to keep these up to date.
</p></li><li><p>Thoroughly understand the technical Management of Change (MOC) process and utilize it in support of capital projects and routine facility changes. Support development of risk assessment and cybersecurity Management of Change process.
</p></li><li><p>Develop design basis, preliminary estimates, and schedules for project design scopes.
</p></li><li><p>Work with multidisciplinary Technical Services team to define problems, establish work scopes, prepare task budgets and schedules, plan work, provide technical direction, and report the work status to management.
</p></li><li><p>Reinforce safety and environmental awareness through frequent job observations and by interfacing with plant personnel.
</p></li><li><p>Interact with and support IT, Technology Security, Site Operations, Regulatory Affairs, and other departments as required.
</p></li><li><div>The duties and responsibilities described above are not a comprehensive list, and additional tasks may be assigned to the employee from time to time, or the scope of the job may change as necessitated by business demands.<br>
</div></li></ul><div></div><div><b>KNOWLEDGE AND SKILLS
</b></div><div><b>Knowledge: </b>Strong understanding of ICS cybersecurity standards/best practices and systems administration in an operating facility. Knowledge of secure network design and architecture, active directory management and GPO development, vulnerability management, systems hardening, network and asset monitoring and troubleshooting and backup and recovery systems. Knowledge of Windows, Linux, VMWare, HyperV and Cisco platforms. Knowledge of cyber risk assessment methodology and incident response. Knowledge of Yokagawa/GE/Allen Bradley systems is a plus.<br>
</div><div></div><div><b>Skills:
</b></div><ul><li><p>Exceptional written, verbal and interpersonal communication skills.
</p></li><li><p>Advanced in Microsoft Office Suite including Word, Excel, Access, Project and PowerPoint.
</p></li><li><p>Ability to communicate effectively at all levels of an organization and with individuals and groups from different disciplines, industries and governmental agencies.
</p></li><li><p>Ability to relate to and to establish mutually respectful relationships with 1) management, 2) peers and 3) various facility level workers (Plant Manager, plant supervision and plant workers) whom are all responsible for ensuring sound operations.
</p></li><li><p>Ability to work with a culturally diverse group of technical individuals whose skills cover the range required to engineer, operate and maintain the LNG terminal and Liquefaction production facilities.
</p></li><li><p>Strong leadership and administrative abilities.
</p></li><li><p>Possess acute sensitivity to safety issues in a hazardous environment.
</p></li><li><p>Organized, planning skills, able to manage multiple activities and programs in timely fashion and with a high degree of accuracy, able to meet work deadlines.
</p></li><li><p>Exceptional problem solving and analytical skills.<br>
</p></li></ul><div></div><div><b>EDUCATION AND EXPERIENCE
</b></div><div><b>Education, Training and Certifications </b>:Bachelor&rsquo;s degree in computer engineering, Computer Science, or related cybersecurity field is required. Master&rsquo;s degree preferred. Security Certifications such as CISSP, CCNA, GISCP, ISA/IEC 62443 Cybersecurity Expert, or GICSP highly preferred.<br>
</div><div></div><div>Must be able to obtain and maintain a Transportation Worker Identification Credential (TWIC).<br>
</div><div></div><div><b>Experience </b>: Minimum five (5) years relevant work experience within cybersecurity space is required. Must have some ICS cybersecurity experience working with an operating LNG, petrochemical, NGL, cryogenic natural gas processing, hydrocarbon processing, defense, and/or other critical infrastructure facility.<br>
</div><div></div><div><b>DIRECT REPORTS
</b></div><div>None<br>
</div><div></div><div><b>FREEDOM TO ACT
</b></div><div>The Senior Analyst, Technology Security requires minimal supervision.<br>
</div><div></div><div><b>WORK CONDITIONS
</b></div><ul><li><p>Occasional job tasked performed in an industrial plant environment.
</p></li><li><p>Occasionally, work may be performed from home, after normal work hours or on weekends.
</p></li><li><p>Limited travel required, as business conditions dictate.
</p></li><li><p>Subject to drug and alcohol testing, per applicable federal regulations or as required by Cheniere.
</p></li><li><p>While performing the duties of this job, the employee is often required to stand, walk, sit, climb stairs, work at height above ground on stairs and catwalks, balance, stoop, kneel, crouch, talk or hear, smell, type and write.<br>
</p></li></ul><div></div><div><b>ADA JOB REQUIREMENTS
</b></div><div>Reasonable accommodations will be made to ensure that the essential functions of the job can be performed and not hinder the employee's performance due to physical or mental disability.<br>
</div><div></div><div><b>EQUAL EMPLOYMENT OPPORTUNITY
</b></div><div>Cheniere Energy is an equal opportunity workplace. All employment decisions are made without regard to sex, race, color, religion, national origin, citizenship, age, disability, marital or veteran status, sexual orientation, gender identity or expression, or any other legally protected categories. This includes providing reasonable accommodation if requested for disabilities or religious beliefs and practices.</div></div><div></div>

Senior Analyst, Technology Security

ClearpointCo

<div><div><p>Title: IT Security Analyst
</p><p>Location: Houston, Texas
</p><p>Type: Contact to Hire
</p><p>Hourly Rate: $50.00 - $60.00
</p><p></p><p>Summary:
</p><p>The Information Security Analyst will be responsible for
<br>
protecting the organization's computer networks and systems from cyberattacks,
<br>
unauthorized access, and data breaches. This role is primarily defensive and
<br>
investigative, focusing on identifying vulnerabilities before they are
<br>
exploited and responding rapidly when incidents occur. Fantastic opportunity with a stable
<br>
organization on a contract to hire basis and become a full-time employee to
<br>
grow into Cybersecurity leadership role and running all of the IT Security
<br>
aspects for the company.
</p><p>Position is starting as a 5 day a week on-site role but will
<br>
transition to having more flexibility and hybrid work schedule. 290/Beltway
<br>
location of Houston).
</p><p>Contract to hire agreement to start (Possibility for direct
<br>
hire for the ideal candidate)
</p><p></p><p>Duties:
</p><ul><li>Continuously monitor network traffic and system logs using
</li></ul>SIEM (Security Information and Event Management) tools to detect suspicious
<br>
activity or anomalies.
<ul><li>Investigate security alerts, determine the root cause of
</li></ul>breaches, and implement immediate containment and recovery measures.
<ul><li>Perform regular vulnerability assessments and penetration
</li></ul>tests to find and patch weaknesses in software and hardware.
<ul><li>Install and configure protective software such as
</li></ul>firewalls, data encryption programs, and antivirus solutions.
<ul><li>Prepare detailed reports on security metrics and incidents
</li></ul>for management, and ensure the organization meets regulatory standards like
<br>
NIST, ISO 27001, or GDPR.
<ul><li>Develop and deliver training to employees on cybersecurity
</li></ul>best practices, such as identifying phishing attempts.
<ul><li>Workable +11
</li></ul><p></p><p>Requirements:
</p><ul><li>5+ Years as a Security Analyst
</li></ul><ul><li>Deep understanding of networking protocols (TCP/IP),
</li></ul>operating systems (Windows, Linux), and cloud security.
<ul><li>Must have Sentinel 1 experience
</li></ul><ul><li>Must have Defender and Proofpoint email security
</li></ul>experience
<ul><li>Huntress-ITDR; PSAT Siem offerings experience
</li></ul><ul><li>MS Purview experience
</li></ul><ul><li>Ability to correlate data from various sources to identify
</li></ul>complex threat patterns.
<ul><li>Skilled at translating technical jargon into actionable
</li></ul>advice for non-technical stakeholders.
<p></p><p>Education
</p><ul><li>Prefer a bachelor&rsquo;s degree in computer science,
</li></ul>Cybersecurity, or a related field, but will consider experience and
<br>
certifications in lieu of a degree.
<p></p><p>Security related Certifications:
</p><ul><li>CompTIA Security+ (Foundational)
</li></ul><ul><li>CompTIA CySA+ (Analysis-focused)
</li></ul><ul><li>Certified Ethical Hacker (CEH) (a plus)
</li></ul><p>- CISSP (a plus -not necessary)</p></div></div>

IT Security Analyst

Confidential Company

<div>
 <p>
  The Senior Manager, Cyber Security is responsible for the daily execution and continuous improvement of cybersecurity across a decentralized, multi-business unit enterprise.
 </p>
 <p>
  This is a highly hands-on role. The Senior Manager will directly oversee security monitoring, incident response, vulnerability management, and control enforcement while leading a small security team. This role is not purely strategic. The right candidate must be technically strong, comfortable reviewing alerts, validating configurations, assessing logs, and stepping into incidents when needed.
 </p>
 <p>
  The environment requires operational stability today, with steady program strengthening over time. This role balances execution, discipline, and practical risk reduction.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  Key Responsibilities
 </p>
 <p>
  Daily Security Operations
 </p>
 <ul>
  <li>
   Oversee and actively participate in security monitoring, alert triage, and incident response.
  </li>
  <li>
   Review high-risk alerts and guide investigation and remediation efforts.
  </li>
  <li>
   Ensure timely patching and vulnerability remediation.
  </li>
  <li>
   Validate security configurations across endpoints, identity platforms, and network layers.
  </li>
  <li>
   Maintain visibility into threat landscape and emerging risks.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Vulnerability &amp; Risk Management
 </p>
 <ul>
  <li>
   Own vulnerability scanning, prioritization, and remediation tracking.
  </li>
  <li>
   Conduct risk assessments across business units and document findings.
  </li>
  <li>
   Work directly with infrastructure and applications teams to resolve identified gaps.
  </li>
  <li>
   Track and report measurable risk reduction progress.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Security Architecture &amp; Controls
 </p>
 <ul>
  <li>
   Support implementation of Zero Trust principles across identity, device, network, and application layers.
  </li>
  <li>
   Review access controls, MFA enforcement, and privileged account management.
  </li>
  <li>
   Provide hands-on review of new systems and integrations to ensure security alignment.
  </li>
  <li>
   Reduce technical debt related to legacy security controls.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Governance &amp; Compliance
 </p>
 <ul>
  <li>
   Maintain and enforce cybersecurity policies and standards aligned with recognized frameworks such as NIST, ISO, SOX, and CMMC.
  </li>
  <li>
   Prepare documentation and evidence for audits.
  </li>
  <li>
   Ensure repeatable processes exist for access reviews, change tracking, and control validation.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Team Leadership
 </p>
 <ul>
  <li>
   Lead and develop a small cybersecurity team.
  </li>
  <li>
   Set clear operational expectations and accountability standards.
  </li>
  <li>
   Provide technical mentorship and direct oversight of daily work.
  </li>
  <li>
   Serve as escalation point for complex or sensitive incidents.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Vendor &amp; Tool Management
 </p>
 <ul>
  <li>
   Oversee MSSPs and third-party security providers.
  </li>
  <li>
   Evaluate and recommend improvements to tooling and controls.
  </li>
  <li>
   Ensure vendors meet service expectations and response times.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  Role Profile
 </p>
 <p>
  This role is:
 </p>
 <ul>
  <li>
   Operational and execution focused
  </li>
  <li>
   Technically hands-on
  </li>
  <li>
   Accountable for daily cybersecurity performance
  </li>
  <li>
   Responsible for strengthening controls over time
  </li>
  <li>
   Senior enough to influence IT and business leadership
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Qualifications
 </p>
 <ul>
  <li>
   7&ndash;12+ years of cybersecurity experience
  </li>
  <li>
   Experience leading security operations in a mid-size or multi-entity environment
  </li>
  <li>
   Strong hands-on experience with SIEM, endpoint detection and response, vulnerability management platforms, identity security tools, and access control systems
  </li>
  <li>
   Working knowledge of Zero Trust concepts and practical implementation
  </li>
  <li>
   Familiarity with security frameworks such as NIST CSF, ISO 27001, SOX, or CMMC
  </li>
  <li>
   Experience managing detection, response, and remediation processes
  </li>
  <li>
   Ability to communicate clearly with both technical teams and business stakeholders
  </li>
  <li>
   Bachelor&rsquo;s degree in Information Security, Computer Science, or related field required
  </li>
  <li>
   Certifications such as CISSP, CISM, Security+, or similar preferred
  </li>
 </ul>
 <p>
 </p>
</div>


Senior Manager, Cyber Security

Archrock

<div><p><b>Overview: </b>Supports the organization&rsquo;s cybersecurity program, focusing on protecting corporate and operational technology (OT) assets, sensitive data, and critical infrastructure. Assists with monitoring security controls, conducting risk assessments, supporting incident response, and contributing to governance, compliance, and awareness initiatives.</p></div>
<br><div><p><b>Essential Duties (Approximate % of Time Spent):
</b></p><ul><li>Assist with day-to-day security operations, including alert triage, vulnerability tracking, and policy enforcement. (~40%)
</li><li>Support incident response activities, including investigation, documentation, evidence collection, and remediation tracking. (~20%)
</li><li>Contribute to security awareness programs, phishing simulations, and employee education efforts. (~20%)
</li>Perform basic risk assessments for applications, vendors, devices, and internal systems. (~20%)<br>
<li>
<br>
</li></ul><p><b>Non-Essential Duties: </b>Performs other duties as assigned.<br>
<br>
</p><p><i>All employees shall be in compliance with the Archrock Health Safety and Environmental Policy and local, statutory and/or regulatory requirements at all times.</i></p></div>
<br><div><p><b>Skills and Abilities:
</b></p><ul><li>Ability to handle confidential sensitive data or issues.
</li><li>Ability to review security requests for accuracy and completeness.
</li><li>Ability to enhance and implement policies and procedures consistent with control guidelines and requirements.
</li><li>Ability to identify risk, assess impact, and make adjustments per control requirements.
</li><li>Ability to create and maintain accurate and auditable documentation to fulfill audit requirements.
</li><li>Ability to pay close attention to details with good planning, time management, and organization skills.
</li><li>Ability to multitask and work effectively with interruptions.
</li><li>Ability to work with all levels, including C-level executives.
</li></ul><p><b>Knowledge:
</b></p><ul><li>Knowledge and proficiency in Microsoft Active Directory access provisioning, including user accounts, group membership, shared folders, etc.
</li><li>Knowledge of Microsoft Azure environments and tools.
</li><li>Knowledge of Governance, Risk, and Compliance (GRC) processes.
</li><li>Knowledge of server architecture and roles, communications, security management, electronic messaging services, and remote access services.
</li><li>Knowledge of server-based technologies, including Windows Server (all versions), VMware, Exchange Online, Teams, and other server and cloud-based applications.
</li><li>Strong understanding of basic security concepts such as authentication, access control, networking fundamentals, malware, encryption, risk, and vulnerabilities.
</li><li>Strong analytical, troubleshooting, and communication skills.
</li><li>Knowledge and proficiency in Microsoft Word, Excel, PowerPoint, and Visio.
</li></ul><p><b>Minimum Education and Certification:
</b></p><ul><li>Associate or Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or related field; or equivalent hands-on training/experience.
</li><li>Relevant certifications (e.g., CompTIA Security&amp;#43;, CySA&amp;#43;, GSEC, CC, Google Cybersecurity Certificate).
</li></ul><p><b>Minimum Experience:
</b></p><ul><li>4&amp;#43; years of experience in the following:
</li><li>Microsoft Active Directory and/or Entra ID user provisioning and access control.
</li><li>Service management and ticketing tracking systems.
</li><li>Exposure to SIEM tools, vulnerability scanners, phishing platforms, or identity management.
</li><li>Coursework or experience related to OT security, industrial control systems (ICS), or critical infrastructure (bonus for energy/oil &amp; gas interest).
</li><li>Internship or lab experience in cybersecurity or IT support.
</li><li>Microsoft Office suite, including Word, Excel, PowerPoint, and Visio.
</li><li>Current on industry security trends and emerging technologies.
</li><li>IT Security principles.
</li></ul><p><b>Physical Demands:
</b></p><ul><li>Regularly required to sit, use hands to finger, handle, or feel; reach with hands and arms; and talk or hear.
</li><li>Occasionally required to stand, walk, and stoop.
</li><li>Vision abilities include close vision, distance vision, color vision, and the ability to adjust focus.
</li></ul><p><b>Problem Solving and Innovation:
</b></p><ul><li>Works closely with business partners, subject matter experts (SME), and system integrators (SI) to ensure security requests fit into the overall corporate IT direction and current systems.
</li><li>Assimilates and evaluates data from multiple sources, determining the optimum solution based on requirements.
</li><li>Deals with complex technical issues through own experience or research.
</li><li>Works with little or no supervision.
</li></ul><p><b>Impact:
</b></p><ul><li>Critical component of securing company IT systems.
</li></ul><p><i>This job description is a summary of essential job functions. It is not intended as an employment contract, nor is it intended to describe all duties someone in this position may perform. All employees are expected to perform tasks, as assigned by a supervisor, regardless of job title or routine job duties.</i></p></div><p></p>

IT Security Specialist

<div>
 <p>
  Fantastic opportunity to come into a stable organization on a contract to hire basis and become a full-time employee to grow into Cybersecurity leadership role and running all of the IT Security aspects for the company.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Position is starting as a 5 day a week on-site role but will transition to having more flexibility and hybrid work schedule. 290/Beltway location of Houston).
 </p>
 <p>
  <br/>
 </p>
 <p>
  Contract to hire agreement to start (Possibility for direct hire for the ideal candidate)
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Information Security Analyst responsible
  </strong>
  for protecting the organization's computer networks and systems from cyberattacks, unauthorized access, and data breaches. This role is primarily defensive and investigative, focusing on identifying vulnerabilities before they are exploited and responding rapidly when incidents occur.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Core Responsibilities
  </strong>
 </p>
 <ul>
  <li>
   <strong>
    Security Monitoring:
   </strong>
   Continuously monitor network traffic and system logs using SIEM (Security Information and Event Management) tools to detect suspicious activity or anomalies.
  </li>
  <li>
   <strong>
    Incident Response:
   </strong>
   Investigate security alerts, determine the root cause of breaches, and implement immediate containment and recovery measures.
  </li>
  <li>
   <strong>
    Vulnerability Management:
   </strong>
   Perform regular vulnerability assessments and penetration tests to find and patch weaknesses in software and hardware.
  </li>
  <li>
   <strong>
    System Maintenance:
   </strong>
   Install and configure protective software such as firewalls, data encryption programs, and antivirus solutions.
  </li>
  <li>
   <strong>
    Compliance &amp; Reporting:
   </strong>
   Prepare detailed reports on security metrics and incidents for management, and ensure the organization meets regulatory standards like NIST, ISO 27001, or GDPR.
  </li>
  <li>
   <strong>
    Security Awareness:
   </strong>
   Develop and deliver training to employees on cybersecurity best practices, such as identifying phishing attempts.
  </li>
  <li>
   Workable +11
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Skills &amp; Qualifications
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   <strong>
    Technical Proficiency:
   </strong>
   Deep understanding of networking protocols (TCP/IP), operating systems (Windows, Linux), and cloud security.
  </li>
  <li>
   <strong>
    Must have Sentinel 1 experience
   </strong>
  </li>
  <li>
   <strong>
    Must have Defender and Proofpoint email security experience
   </strong>
  </li>
  <li>
   <strong>
    Huntress-ITDR; PSAT Siem offerings experience
   </strong>
  </li>
  <li>
   <strong>
    MS Purview experience
   </strong>
  </li>
  <li>
   <strong>
    Analytical Mindset:
   </strong>
   Ability to correlate data from various sources to identify complex threat patterns.
  </li>
  <li>
   <strong>
    Communication:
   </strong>
   Skilled at translating technical jargon into actionable advice for non-technical stakeholders.
  </li>
  <li>
   <strong>
    Education:
   </strong>
   Prefer a bachelor&rsquo;s degree in computer science, Cybersecurity, or a related field, but will consider experience and certifications in lieu of a degree.
  </li>
  <li>
   <strong>
    Security related Certifications:
   </strong>
  </li>
  <li>
   CompTIA Security+ (Foundational)
  </li>
  <li>
   CompTIA CySA+ (Analysis-focused)
  </li>
  <li>
   Certified Ethical Hacker (CEH) (a plus)
  </li>
  <li>
   CISSP (a plus -not necessary)
  </li>
 </ul>
 <p>
 </p>
</div>


Security Analyst

Securance Consulting

<p>Applications accepted from: ALL PERSONS</p><p>Job Classification: INFORMATION SECURITY OFFICER</p><p>Posting Number:</p><p>Department: HOUSTON HEALTH DEPARTMENT</p><p>Division: CYBER SECURITY</p><p>Reporting Location: 8000 STADIUM DR.</p><p>Workdays &amp; Hours: MONDAY &ndash; FRIDAY 8:00 AM &ndash; 5:00 PM* *Subject to Change</p><p><b>DESCRIPTION OF DUTIES / ESSENTIAL FUNCTIONS</b></p><p>Under the general direction of the City of Houston (COH) Chief Information Security Officer (CISO), duties, functions and responsibilities of this position include:</p><p>▪ Develop and implement Houston Health Department (HHD) specific Cybersecurity Master Plan aligned with the COH Cybersecurity Master Plan to address the confidentiality, integrity and availability of HHD systems, data and information</p><p>▪ Directs an ongoing, proactive risk assessment program for all new and existing HHD systems and remains familiar with HHD&rsquo;s goals and business processes so effective controls can be put in place for those areas presenting the greatest information security risk</p><p>▪ Responsible for communicating risks and recommendations to mitigate risks to the COH CIO, CISO and HHD senior leadership team in cost/benefit terms so decisions can be made to ensure the security of information systems and information entrusted to HHD</p><p>▪ Oversees all ongoing activities related to the development, implementation and maintenance of HHD&rsquo;s information security policies and procedures by ensuring these policies and procedures encompass the overall security of protected health information (PHI) and electronic protected health information (ePHI) both at rest and in motion</p><p>▪ Assists HHD divisions, programs and HHD Privacy Officer with efforts to ensure Health Insurance Portability and Accountability Act (HIPAA) compliance a</p><p>▪ Ensures HHD vulnerabilities are managed and mitigated per COH Cyber Division policy</p><p>▪ Assists with the development of HHD specific, role-based information security awareness training programs, and works with COH Cyber Division, HHD divisions and programs to present to staff as appropriate</p><p>▪ Works with COH CISO to ensure proper protections, technical and physical controls are in place to protect the confidentiality, integrity and available of HHD systems, data and information.</p><p>▪ Assists with the development and implementation of an HHD business continuity/disaster recovery plan to offset the impact caused by intentional and unintentional acts</p><p>▪ Evaluates security incidents and determines what response, if any, is needed and coordinates with COH CISO and COH Cyber Division on proper responses when sensitive data or information are compromised</p><p>▪ Assists the COH CISO with HHD insider threat investigations</p><p>▪ Remains competent and current through self-directed professional reading, developing professional contacts with colleagues, attending professional development courses, attending training, conferences, and/or courses as directed by COH CISO, and obtaining certifications relevant to job duties</p><p><b>EDUCATION REQUIREMENTS</b></p><p>▪ B.A. or B.S. degree in Management and Information Systems (MIS), Computer Science, Engineering or a closely related field.</p><p>▪ Certified Information Systems Security Professional (CISSP) required; Certified Information Security Manager (CISM) and HealthCare Information Security and Privacy Practitioner (HCISPP) security certifications preferred.</p><p><b>EXPERIENCE REQUIREMENTS</b></p><p>▪ At least 5 years of experience developing and implementing cybersecurity plans and controls in a healthcare focused organization. Strong understanding of the department&rsquo;s core business functions and business strategy.</p><p>▪ Broad working knowledge of health care operations and their related data/software/hardware requirements including, but not limited to, hospitals, clinics, medical offices, and their information technology needs</p><p>▪ Comprehensive understanding of the compliance and legal requirements for information confidentiality and integrity especially as it relates to patient information in a healthcare environment (electronic health/medical records (EHR/EMR), HIPAA, HITECH, etc.)</p><p>▪ Experience evaluating and managing cyber risk and working within industry-standard frameworks (e.g. NIST Cybersecurity Framework, CIS Top 20, NIST 800-XX, etc.).</p><p>▪ Knowledge and experience with Windows, Active Directory, group policy, DNS, encryption, patch management, anti-virus, system configuration management</p><p>▪ Knowledge and experience with LAN, WAN, VPN, routers, firewalls, servers, IDS/IPS, SIEM and DLP</p><p>▪ Solid expertise in formal/structured IT security risk assessment methodology, including understanding the implementation challenges and advantages across all levels of hardware platforms and software applications</p><p>▪ Experience with a wide variety of operating systems: Windows Server, Windows 10, Windows 7, Linux etc.</p><p>Knowledgeable of Cyber Kill Chain and Diamond Model of Intrusion Analysis models</p><p>▪ Knowledge of SIEM, IDS, anti-virus/anti-malware and firewall technologies</p><p>▪ Solid knowledge and understanding of networking and TCP/IP</p><p>▪ Well-developed interpersonal skills. Ability to get along with diverse personalities; tactful, mature and flexible</p><p>▪ Ability to establish creditability and be decisive but also to recognize and support the organization&rsquo;s preference and priorities</p><p>▪ Ability to maintain the highest standard of confidentiality is required with zero tolerance</p><p>▪ High energy level, comfortable performing multifaceted projects in conjunction with normal activities</p><p>▪ Results oriented with the ability to balance other business considerations</p><p>▪ Ability to speak and present information effectively to groups of varying sizes</p><p>▪ Proven experience working in a rapidly changing, high intensity environment</p><p>▪ Avid, proactive learner and ability to work well in a team-based environment</p><p>▪ Strong interpersonal and writing skills</p><p>▪ Superior attention to detail</p><p><b>LICENSE REQUIREMENTS</b></p><p>Must be able to pass a criminal background check, obtain and maintain federally mandated security clearances where required.</p><p><b>PREFERENCES</b></p><p>**Preference shall be given to eligible veteran applicants provided such persons possess the qualifications necessary for competent discharge of the duties involved in the position applied for, such persons are among the most qualified candidates for the position, and all other factors in accordance with Executive Order 1-6.**</p><p><b>SALARY INFORMATION</b></p><p>Factors used in determining the salary offered include the candidate&rsquo;s qualifications as well as the pay rates of other employees in this classification. Salary Range $90,000 to $180,000.</p><p>Job Types: Full-time, Contract</p><p>Pay: $90,000.00 - $180,000.00 per year</p><p>Application Question(s):</p><ul><li>Do you have a CISSP certification?</li><li>Do you have at least 5 years of experience developing and implementing cybersecurity programs and controls in the healthcare sector?</li><li>Are you a US citizen? </li><li>Are you able to pass a criminal background check and, if necessary, obtain a federal security clearance? </li><li>Do you have a Bachelor&rsquo;s degree in Management Information Systems, Computer Science, Engineering, or a related field? </li></ul><p>Work Location: In person</p>

ISO - Health Department

Explore 126+ Cybersecurity risk analyst in Houston this March. Find roles across top companies and apply now to boost your career.