• Monitor security alerts and notifications from various security tools (SIEM, IDS/IPS, firewalls, etc.), maintaining constant vigilance. Support a 24x7 roster. • Analyze security incidents to identify potential threats and vulnerabilities. • Assist in investigating security breaches and recommend corrective actions. • Participate in incident response activities, including containment and recovery efforts. • Document incidents and response actions for future reference and reporting. • Assist in conducting risk assessments to identify security risks and vulnerabilities. • Support the evaluation of security controls and recommend improvements. • Aid in the development and implementation of security policies and procedures. • Maintain accurate documentation of security incidents, investigations, and policies. • Generate reports for management on security incidents and compliance metrics. • Assist in promoting security awareness throughout the organization. • Participate in training sessions to enhance personal and team knowledge of security best practices.

• Assist in the development, implementation, maintenance, and documentation of information security policies, standards, procedures, controls, and baseline configurations aligned with industry best practices such as NIST and CIS. • Support security functions intended to protect the organization’s systems, applications, infrastructure, data, and operations. • Assist in securing modern infrastructure, including cloud platforms and containerized environments. • Learn and contribute to container security practices, including image scanning, runtime protections, and workload hardening. • Identify, analyze, document, and help address security risks, vulnerabilities, issues, findings, and control gaps across systems, applications, and infrastructure. • Collaborate with internal teams, senior analysts, and engineers to support remediation efforts, compensating controls, and the adoption of secure practices. • Assist with monitoring, testing, and maintaining security controls, related processes, and corporate systems in alignment with established policies and controls. • Support compliance, audit, and regulatory activities, including internal and external audit readiness, through documentation, evidence gathering, and control validation. • Contribute to security automation efforts, including scripting and tooling, primarily in Python, and support identity and access management processes such as SSO, IAM, and role based access controls. • Stay current on information security practices, technologies, certifications, and emerging threats, and perform other related duties as assigned.

• The IT Security Analyst is responsible for leading enterprise risk management, compliance, and security governance initiatives across Telecare’s technology environment. • This role ensures alignment with industry frameworks including NIST Cybersecurity Framework (CSF) and CIS Critical Security Controls, while driving continuous improvement of the organization’s security posture. • The IT Security Analyst partners closely with Security Engineering, IT, and business stakeholders to assess risk, guide remediation, and ensure security controls are effectively implemented across systems, applications, and third-party environments. • This role also plays a key part in identity governance, including assisting with the design and implementation of role-based access control (RBAC) within enterprise platforms such as Workday, ensuring least privilege and regulatory compliance. • The position serves as a bridge between technical security operations and business risk management, providing actionable insights to leadership and supporting audit, compliance, and regulatory requirements.

• Perform data gathering, synthesis, and develop solutions • Partner with teams to identify trends and resolve problems • Evaluate information and provide recommendations based on findings