Job Details

Join to apply for the Information Systems Analyst - Security role at Asian Art Museum

Are you a technology professional who wants your work to protect more than just data? At the Asian Art Museum, technology isn't just about systems — it's about safeguarding art, culture, and creativity for generations to come. We're seeking an Information Systems Analyst – Security (ISAS) to lead our information security initiatives and ensure the museum's digital landscape is as resilient and inspiring as the art on our walls. As part of our forward‑thinking technology team, you'll help build and maintain a secure computing environment and collaborate with both internal teams and external vendors to implement security best practices, oversee compliance, and champion proactive cybersecurity measures across the museum.

The Asian Art Museum of San Francisco is the world's leading museum dedicated to connecting global audiences with Asian and Asian American art and culture. With a collection of 20,000 objects spanning over 6,000 years — from ancient sculpture to contemporary installations — the museum offers a powerful lens into the depth and diversity of Asian cultures. A vibrant center for public engagement, the museum is a place where history and the present meet to inspire a more connected future. Our mission is to celebrate, preserve, and promote Asian and Asian American art and cultures for local and global audiences. It is a dynamic forum for exchanging ideas, inviting collaboration, and fueling imagination to deepen understanding and empathy among people of all backgrounds.

Position Summary

The Information Systems Analyst - Security (ISAS) is responsible for the implementation and compliance of the museum's information security policies and best practices. The ISAS manages a variety of in‑house and vendor resources while proactively creating a secure computing environment. The focus of this position is to oversee the processes and technology needed to maintain and improve the museum's information security. The ISAS regularly engages with staff, vendors, colleagues, and with the City and County of San Francisco on related systems issues in a personable and respectful manner.

Essential Functions

• Under the direction of the Director of Information Technology, assists in the development, and leads the implementation of, the museum's cyber security policies, procedures, and standards across the museum.
• Provides security direction and support for all technology at the museum.
• Assists the Network Manager and Business and Data Systems Analyst in assessment, and secure deployment of network and server resources as needed for museum applications and projects.
• Responsible for the timely patching and upgrading of the museum's clients, servers, and network hardware.
• Responsible for maintaining backups and complying with the museum's business continuity plan.
• Responsible for the accurate maintenance of hardware and software inventories.
• Creates, schedules, and executes patch management, capacity management, and other maintenance programs for servers, storage, workstations, and applications.
• Establishes monitoring standards, thresholds, and alarms for critical systems in use at the museum; configures monitoring systems and responds to alerts.
• Creates and maintains documentation on systems, processes, and procedures in coordination with other IT staff.
• Acts as liaison with the City and County of San Francisco's Cyber Security Department as the museum's Departmental Information Security Officer.
• Participates in City and County of San Francisco's cyber security and emergency management planning and training, including yearly risk assessments.
• Maintains knowledge of trends, best practices, regulatory changes, and new technologies.
• Establishes and nurtures strong working relationships with museum staff, colleagues from other institutions, consultants, and vendors.
• Performs other duties and projects as assigned.

Qualifications

• Knowledge of, and experience using US‑CERT, CVE, and NIST.
• Experience successfully managing network and server environments including Active Directory/Azure AD, Office 365, Windows Server, and LINUX servers.
• Experience successfully managing virtualized server environments.
• Knowledge of, and experience implementing security policies to conform to NIST standards.
• Demonstrated experience configuring networking equipment including CISCO IOS and Palo Alto PanOS network firewalls to create a secure networking environment.
• Knowledge of applying network security best practices to networks, servers, and clients.
• Experience with endpoint management tools and practices such as Group Policies, JAMF and Tanium.
• Strong analytical and diagnostic/problem solving skills.
• Strong ability to learn new technology and adapt to changing cyber security threats.
• Excellent written and verbal communications skills and a customer service focus.
• Ability to interpret normal computer display monitors and respond to audible alerts.
• Ability to work on call rotation, evening and weekend hours as needed.
• Ability to work independently as well as collaboratively; establish and maintain cooperative and effective working relationships with a variety of representatives of public and private organizations; City and County representatives; museum staff and the public.

Preferred Qualifications

• Three (3) years of experience successfully managing network and server environments including Active Directory/Azure AD, Office 365, Windows Server, and LINUX servers or a related field or an equivalent combination of education, training, and experience.
• One (1) year of experience successfully managing VMWare VSphere environment including ESX servers, VCenter, and Vmotion or a related or an equivalent combination of education, training, and experience.
• Associate degree in computer science, information technology, computer engineering, or a related field or an equivalent combination of education, training, and experience.
• Experience managing Apple MacOS and iOS/iPadOS in a professional environment.
• Experience with cloud hosted servers, virtual private networks, and hybrid networks.

Working Conditions

• Standard office and server room environment.
• Sitting, standing, squatting, bending, pulling, and lifting up to 40 lbs.
• Accessing areas by climbing ladders, lifting, standing for longer periods of time.

Compensation

The hourly range for this position is $47.9877 - 57.6343/hr. This FLSA exempt opportunity includes a generous benefits package, including but not limited to fully covered medical, dental and vision insurance for employee, 12 paid holidays (2025), 15 days of vacation, 12 days of sick leave, and a group retirement plan starting after one year of employment. The position is represented by Local 1021, Service Employees International Union.

Our Diversity, Equity, and Inclusion Commitments

At the Asian Art Museum, we are dedicated to ideating, building, and holding ourselves accountable for Diversity, Equity, Accessibility & Inclusion in everything we do. We strive to foster a culture of respect, belonging and inclusivity for all employees. Our mission is to celebrate, preserve, and promote Asian and Asian American art and cultures for local and global audiences. We provide a dynamic forum for exchanging ideas, inviting collaboration, and fueling imagination to deepen understanding and empathy among people of all backgrounds. Diversity of thought and experience is essential to our mission, and we are committed to recruiting, hiring, and retaining a diverse workforce. We encourage applicants from all backgrounds to apply.

Next Steps

Apply online at Candidates deemed to be the most highly qualified will be invited to participate in the interview process. Appointment is subject to completion of a thorough background check process.

The Asian Art Museum is an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories (arrest and criminal histories) consistent with applicable federal, state, and local law.