IT Security and Systems Analyst

POSITION SUMMARY:

The IT Security and Systems Analyst serves as a liaison between business departments, Information Technology, and Information Security to help ensure technology solutions support business needs and organizational priorities. This position defines and documents business and system requirements, supports Guidewire Insurance Suite and other enterprise applications, and assists with cybersecurity governance, risk management, compliance, and audit activities.

ESSENTIAL FUNCTIONS: The following are the usual, basic and essential functions of the position. However, this job description does not preclude the performance of other duties by the incumbent. These functions are not to be construed as an exhaustive list of all responsibilities, duties, and skills required:

Gathers, analyzes, and documents business and system requirements, user stories, process flows, and acceptance criteria.

Facilitates requirements workshops, solution-design discussions, and process-improvement activities.

Serves as a liaison between business stakeholders, application teams, technical teams, vendors, and Information Security.

Supports Guidewire InsuranceSuite and other enterprise applications by evaluating system needs, enhancements, defects, and production issues.

Supports user acceptance testing, defect triage, production releases, and post-implementation activities.

Assists with prioritizing enhancement requests and maintaining technology-related backlogs.

Analyzes application metrics and operational data to identify opportunities to improve efficiency and effectiveness.

Supports the Information Security Officer in maintaining and improving the organization’s cybersecurity program.

Assists with security risk assessments, control reviews, vulnerability management, and remediation tracking.

Supports internal and external audits by gathering documentation, coordinating responses, and monitoring corrective actions.

Develops and maintains security policies, standards, procedures, and supporting documentation.

Assists with vendor security reviews, third-party risk assessments, and identity and access management reviews.

Supports security awareness, regulatory compliance, and cybersecurity governance activities.

Participates in incident response activities, documentation, and post-incident reviews.

Monitors emerging cybersecurity risks and recommends improvements to security controls and processes.

REQUIRED EDUCATION AND EXPERIENCE:

Bachelor’s degree in Business, Information Systems, Computer Science, Cybersecurity, or a related field.

Five years of business or systems analysis experience supporting enterprise applications or business processes.

Experience gathering and documenting business, functional, and system requirements.

Experience supporting software development lifecycle and testing activities.

Experience working directly with business stakeholders and technical teams.

An equivalent combination of education and experience may be substituted for the stated requirements.

Willingness to obtain an approved entry-level cybersecurity certification within 12 to 18 months of hire and participate in ongoing security training.

PREFERRED EDUCATION AND EXPERIENCE:

Experience with Guidewire PolicyCenter, ClaimCenter, BillingCenter, or other Guidewire applications.

Experience supporting Guidewire InsuranceSuite implementations, upgrades, or enhancements.

Knowledge of property and casualty insurance operations, including underwriting, policy administration, claims, billing, or customer service.

Experience with Rally, Jira, Azure DevOps, or a similar work-management platform.

Familiarity with SQL and data-analysis tools.

Experience supporting regulatory compliance, internal or external audits, cybersecurity, or risk-management activities.

ISC2 Certified in Cybersecurity or another recognized cybersecurity certification.

REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES:

Knowledge of business analysis, systems analysis, requirements gathering, and process-mapping practices.

Knowledge of software development lifecycle activities and testing practices.

Understanding of system integrations, APIs, application architecture, and related technical concepts.

Knowledge of Agile, Scrum, or similar delivery methodologies.

General knowledge of cybersecurity governance, risk management, internal controls, and compliance practices.

Strong analytical, critical-thinking, and problem-solving skills.

Ability to translate business needs into clear functional and technical requirements.

Ability to facilitate meetings and communicate technical information to nontechnical audiences.

Ability to build effective working relationships across business and technical teams.

Ability to organize and prioritize multiple assignments, projects, and deadlines.

Strong written communication, documentation, and attention-to-detail skills.

Proficiency with Microsoft 365, Visio, and collaboration or work-management tools.

REQUIRED COMPETENCIES:

Communication: Makes clear and convincing oral presentations and written documents (to individuals and groups) that achieve their purpose.

Customer Focus: Identifies customer’s needs and requirements correctly and provides value added solutions; acts proactively for ensuring customer satisfaction.

Interpersonal Skills: Demonstrate personal respect for others and conveys an understanding of others’ needs, feelings and perspectives.

Decision Making: Uses effective approaches for choosing a course of action or developing appropriate solutions. Makes timely and sound decisions by comparing data from different sources to draw conclusions. Understands the impact and implications of decisions and provides feedback on outcomes. Takes responsibility for decisions.

Critical Thinking: Approaches a situation or problem by defining the problem or issue, determining its significance, collecting data, making inferences about the meaning of the data, and using logic and intuition to arrive at conclusions or decisions.

Job Knowledge: Possesses the level of technical and functional knowledge necessary to meet individual performance targets and perform the required duties as outlined in the position description.

Initiative: Independently completes tasks and assignments with little or minimal direction.

PHYSICAL REQUIREMENTS: This position requires the ability to sit, hear, converse over the telephone, and key frequently on a computer for long periods of time.