IT Analyst 3

The IT Analyst III - Security Analyst reports to the Project Manager for Security. This individual supports cybersecurity operations across LSUHS clinical, academic, research, and administrative environments. Responsibilities include monitoring and analyzing security events; supporting incident response, vulnerability management, identity and access management, endpoint security, security awareness, governance, risk, and compliance activities; implementing and monitoring security controls; performing security assessments; coordinating remediation with system owners; and maintaining complete, auditable documentation. The incumbent will maintain a customer-focused approach by promptly acknowledging and responding to service needs, communicating effectively with both technical and non-technical stakeholders, safeguarding sensitive information, and coordinating security activities with the Service Desk, Infrastructure, Networking, Application Teams, Research Security, system owners, and third-party service providers. Normal work hours are Monday through Friday from 8:00 AM to 4:30 PM; additional hours may be required. Regular attendance is required to perform the functions of this position. Essential Position Functions & Duties 35% Security Operations and Incident Response Monitor, triage, analyze, document, and escalate security alerts and operational security events using enterprise security platforms. Perform investigations related to reported or suspected incidents in accordance with Incident Response Protocols, including evidence collection, log analysis, containment support, recovery support, and after-action documentation. Monitor SIEM, endpoint, identity, cloud, and system logs; support security control implementation, tuning, and continuous improvement. Coordinate security activities with Service Desk, Infrastructure, Networking, Application Teams, Research Security, system owners, and external response partners. Available on call outside of normal business hours for security emergencies and scheduled maintenance as needed. 25% Vulnerability Management and Security Assessments Perform or coordinate internal, external, endpoint, server, application, and cloud vulnerability assessments using approved tools. Analyze and prioritize findings based on severity, exploitability, asset criticality, exposure, and business impact. Track affected assets, responsible owners, remediation target dates, status, approved exceptions, and evidence of closure. Validate corrective actions through rescanning, control testing, or review of supporting evidence, and prepare operational and executive remediation reports. 15% Identity, Access, and Endpoint Security Support Microsoft Entra ID identity security controls, including authentication methods, multifactor authentication, Conditional Access, risky sign-in review, access reviews, account lifecycle controls, and role governance. Support passwordless authentication initiatives, including passkeys or FIDO2 and Windows Hello for Business. Support Microsoft Intune security configurations, device compliance, security baselines, endpoint remediation, and Microsoft Defender investigations. 15% Governance, Risk, Compliance, and Documentation Develop and maintain information security policies, procedures, standards, playbooks, assessment records, and technical documentation. Perform or support security risk assessments, third-party security reviews, control testing, audit response, and remediation tracking. Support compliance activities involving HIPAA, FERPA, NIST, CIS Controls, LSU policies, contractual obligations, and other applicable requirements. Track policy exceptions, audit findings, corrective actions, approvals, review dates, and closure evidence. 5% Security Awareness Support security awareness initiatives, phishing simulation campaigns, user follow-up, metrics, reporting, and targeted education improvements. Non-Essential Position Functions & Duties 5% Marginal Functions Performs other related duties and responsibilities as assigned.