The Information Security Analyst reports directly to the Director of Technology and Innovation and plays a critical role in safeguarding Tulsa International Airport's data, infrastructure, and stakeholders from cyber threats. This position is responsible for designing, developing, documenting, testing, implementing cybersecurity controls and measures, and actively identifying and mitigating threats within the infrastructure. This position starts at $62,302 a year.

PRIMARY RESPONSIBILITIES

Cybersecurity Program Management & Operations

• Lead      the development, maintenance, and continuous improvement of the Airport      Cybersecurity Improvement Plan (CIP), ensuring alignment with evolving      threats and regulatory requirements.
• Serve      as the primary cybersecurity point of contact with federal agencies,      including TSA, CISA, and FBI coordinating compliance efforts, reporting,      and the adoption of available cybersecurity resources and directives.
• Partner      with Safety and Security to ensure adherence to TSA, FAA, and other      applicable regulatory cybersecurity frameworks.

Cybersecurity Strategy & Threat Management

• Design,      implement, and enhance a comprehensive cybersecurity program to      proactively identify, detect, and mitigate threats across airport systems.
• Monitor      security logs, alerts, and intelligence sources to identify anomalies,      investigate incidents, and recommend corrective actions.
• Develop      and implement security hardening standards and best practices to      strengthen the organization’s overall security posture.
• Evaluate      emerging threats and technologies, recommending improvements to enhance      resilience and operational effectiveness.

Tools & Technology Management

• Optimize      cybersecurity tools, including Vulnerability Management platforms,      Anti-Virus/Anti-Malware solutions, and SIEM tools.
• Ensure      tools are effectively configured, monitored, and continuously improved to      meet organizational security objectives.

Training, Exercises & Awareness

• Lead      the development and execution of cybersecurity training and awareness      programs across the airport, including phishing simulations and social      engineering exercises.
• Design,      facilitate, and evaluate cybersecurity tabletop exercises to test incident      response capabilities and improve organizational readiness.
• Report      training outcomes, trends, and risk insights to leadership, recommending      actionable improvements.

Risk, Compliance & Assessments

• Conduct      and support cybersecurity risk assessments, audits, and compliance      reviews.
• Analyze      business impact and exposure to cybersecurity risks, developing mitigation      strategies aligned with approved security architectures.
• Maintain      and enhance documentation for cybersecurity policies, procedures, and      controls to support compliance and operational consistency.

Collaboration & Technical Support

• Collaborate      cross-functionally with IT, operations, and leadership to integrate      cybersecurity into all aspects of airport technology and operations.
• Provide      technical support and backup for infrastructure systems, including servers      and networks, as needed.  

 Education & Experience: 

Bachelor's degree in Cybersecurity, Management Information Systems (MIS), Computer Information Systems (CIS), or a related field. Cybersecurity-related certifications are a plus. 

Knowledge, Abilities and Skills: 

· Strong knowledge of threats and vulnerabilities associated with cloud and on-premise security.

· Proficiency in Vulnerability Management scanning and reporting tools.

· Hands-on experience with security monitoring tools, vulnerability scans, and assessment report review.

· Experience as a systems or network administrator in modern infrastructure.

· Proficiency in firewall management, endpoint protection, networking, and server security.

· Excellent written and verbal communication skills.

· Availability to work 40 hours per week and ability to work overtime when necessary.

Physical Requirements: Physical requirements include arm and hand steadiness and finger dexterity enough to use a keyboard and telephone; occasional lifting up to 30 pounds; frequent carrying, pushing and pulling up to 15 pounds with occasional carrying; vision, speech and hearing sufficient to perform the essential tasks; Capable of regularly walking to various parts of the Airport without overly being exerted. 

Licenses and Certifications: Possession of a valid Oklahoma Driver's License; ability to obtain and maintain eligibility to hold a Security Identification Display Area (SIDA) badge.

Working Environment: The working environment is primarily indoors in an office setting. The Information Security Analyst may be required to work extended hours outside of the regular shift schedule to meet operational needs.

Note:

This job description lists only the primary job duties normally assigned to this position but does not restrict the performance of other duties as assigned.

Reasonable accommodation may be made to enable individuals with disabilities to perform the essential