Senior Analyst, Cyber Security

The Senior Analyst, Cybersecurity supports Nightingale College’s security operations, vulnerability management, vendor risk management, and access governance activities. This role monitors security events, coordinates investigations and remediation, performs vendor security assessments, and helps mature information security processes, reporting, policies, and controls. 

• Monitor, triage, document, and escalate security alerts, phishing reports, suspected account compromise, malicious email, suspicious forwarding rules, and endpoint security events. 

• Coordinate with managed detection and response, secure access, identity and collaboration, and IT teams to investigate alerts and complete containment or remediation actions such as password resets, session revocation, ticket follow-up, and evidence collection. 

• Operate vulnerability management workflows using a vulnerability management tool and related endpoint data, including recurring reporting, prioritization, remediation coordination, and security stack coverage review. 

• Perform third-party risk assessments for new and existing vendors, including review of SOC 2 reports, HECVAT responses, ISO certifications, bridge letters, security questionnaires, access controls, SSO/MFA, encryption, and data protection practices. 

• Prepare vendor assessment summaries, identify risks and follow-up items, maintain assessment documentation, and support vendor inventory, reassessment, and reporting processes. 

• Support access governance, privileged access reviews, local administrator reviews, policy/procedure updates, SLA/KPI development, and security process improvement. 

• Provide security guidance to IT and business stakeholders and support security awareness or collaborator communications when needed. 

• Leverage approved AI-enabled tools and automation technologies to accelerate analysis, summarize security documentation, improve assessment workflows, generate reports, and support operational decision-making while maintaining appropriate security and privacy controls. 

• Identify repetitive or manual security processes and implement automation solutions that improve scalability, consistency, and operational effectiveness. 

• Create dashboards, reports, and data analysis workflows that provide actionable security metrics, trends, and performance insights.