Job
Description
BNI is seeking a highly skilled IT Security Analyst to support the Head of IT Security in developing, implementing, and maintaining a comprehensive information security program, including policies, procedures, standards, and guidelines. Roles and Responsibilities Monitor BNIs IT and Cloud infrastructure to detect cybersecurity events, triage them, and follow established incident response processes. Complete daily checklists and prepare and send daily/weekly and Monthly reports. Contribute to the evolution of use cases and incident response processes. Triage and Remediate XDR Alerts from Microsoft O365 Defender suite. Investigate and take necessary action on Risky Users/sign-ins and Oath App requests. Optimize the O365 Defender suite configuration to increase security scores. Monitor the organizations day-to-day cybersecurity posture. Log security events, investigate suspicious activity, and implement appropriate response and remediation measures. Collaborate with IT and other departments to ensure secure application and infrastructure development and deployment. Hands on Experience with Kusto Query Language. Good To Have: Manage and secure Microsoft 365 environments, including Exchange Online, SharePoint Online, OneDrive, and Teams, focusing on implementing and maintaining security policies and solutions. Contribute to various aspects of the information security program, establishing foundational controls across the environment. Establish processes, procedures, and security solutions based on organizational policies to demonstrate compliance. Develop and deliver security awareness and training programs for employees. Stay informed about evolving cybersecurity threats by communicating with external sources. Liaise with external vendors and auditors on security matters. Stay updated on security threats and trends, recommending appropriate security solutions. Experience with non-O365 collaboration tools such as Google GSuite is a plus. Qualifications Required: Bachelors degree in computer science, Information Security, or a related field. Relevant certifications (e.g., O365 Defender suite from Microsoft). Minimum of 4 years of experience in the Information/Cyber Security field Extensive product knowledge and experience with the M365/O365 environment, including Microsoft Teams, Exchange Online, SharePoint/OneDrive. Basic understanding regulatory frameworks (ISO 27001, Privacy, and PCI-DSS). Ability to work independently and as part of a team.
