Job Details

Description

General Summary The Information Security Analyst (ISA) works closely with the Information Security Officer (ISO) and Senior Information Security Analyst (SISA) to coordinate information security efforts across the company. The ISA is responsible for working with Security Program Metrics, System Security, Data Loss Protection, and Vendor Management Systems. The ISA serves as backup to the Senior Information Security Analyst. The ISA works closely with the Information Security Officer (ISO) and Senior Information Security Analyst (SISA) to coordinate information security efforts across the company. The ISA m onitors and evaluates applications and application access to ensure appropriate security controls are in place and functioning appropriately. They will work with business partners to onboard new vendors and assist with related ongoing vendor management activities. The ISA is also responsible for administration of the System Security Process, investigating and reporting on information security events, and departmental system access security reviews. The ISA investigates and responds to alerts in the Data Loss Protection program. Using a risk based focus, identifies potential threats and responds to reported security violations to determine causes, possible solutions, and remedial actions required to ensure information security. Evaluates and implements changes to procedures and applications designed to enhance information security. Researches and develops regulatory and information security standards and requirements to address information security risks and potential losses. Improve information security awareness and education. The ISA will verify adherence to corporate-wide policy, procedures, and standards for the organization’s information systems in order to protect privacy, confidentiality of corporate, and client information.

All associates at Capital City Bank have access to confidential client information, and must practice discretion at all times.

Principal Duties And Responsibilities

Routinely analyzes procedures and makes recommendations for changes/corrections, when applicable.
Responds to questions affecting policies and procedures regarding security.
Responds to internal and external department audits by providing pertinent data.
Assists on the various projects handled in Corporate Security and Risk throughout each year.
Assists and cover Senior Information Security Analyst duties in their absence.
Perform security reviews of applications throughout the organization as it pertains to critical information systems. Works with application administrators to ensure systems are updated with current software security.
Perform reviews of vendors throughout the organizations. Works with vendor owners to ensure vendor documentation is updated.
Monitor for security violations and report significant attempts or actual violations of security policy to the Information Security Officer and Chief Information Security Officer and maintains security incident reports. Review security logs and other monitoring reports. Develop queries as needed to facilitate the review.
Review various security reports to identify anomalies or exceptions. Report exceptions to appropriate management and follow up for documentation and approval.
Investigate and respond to alerts in Data Loss Protection program.
Prepare and deliver appropriate and necessary security risk assessments as assigned.
Develop and deliver periodic management reports to include current information security environment, identification of any deficiencies, recommendations for corrective actions needed and results of deficiency corrections previously noted.
Serves as back up for the Senior Information Security Analyst.
Will work on new projects as they are identified.

Employer Determines The Essential Functions Of The Job.

All associates must understand and adhere to the non-negotiable Banker Standards and commit to practicing SGNNT at all times. Associates will consistently follow policies and procedures as established by Capital City Bank, with department managers setting the standard

Associated Duties

Provides additional support to manager and department colleagues.

Completes all assigned/required Bank training within established timelines.

Knowledge, Skills and Abilities (KSA) Required The following KSAs are usually acquired through education with specialized training course(s) in technology, information security, banking, and/or four to five years relevant experience:

Strong analytic and problem solving skills.
Good understanding of risk evaluation, controls, separation of duties and risk mitigation
Proficiency in Microsoft Office applications (particularly Excel and Access).
Detail oriented and self-motivated.
Ability to work independently with little supervision.
Ability to interact with all levels of staff and management.
Ability to organize, prioritize, manage high volume workloads to be able to meet time frames.
Demonstrated knowledge of general information security and technology practices such as is required to obtain an information security certification. (Note - certification is not required).
Exceptional verbal and written communication skills.
General banking experience to include banking regulations - specifically security and compliance regulations - preferred.
Experience with information security log reviews (DLP, Server, etc.)
Experience with Vendor and Application (Cloud based and/or on premise) risk assessments – preferred

Education Bachelor’s degree with emphasis in technology or information security is required. Relevant work experience may substitute for the education requirement. Three to five years related work experience in an information security role is preferred.

Working Conditions

Office/professional environment.
Highly confidential environment
Travel to attend various job-related meetings as needed.
In the rare instance of a major or extensive natural disaster, epidemic or pandemic occurrence, or other disruption within our footprint, it may be necessary for associates to relocate or telecommute before, during or after, to ensure business continuity.
Positions approved for Hybrid Flex/Remote Work are determined by department manager and HR. All associates approved to participate in a Flex/Remote work schedule will review and acknowledge the guidelines outlined in the Hybrid Flex/Remote Work Policy.

EOE/Protected Veterans/Disabled/Drug Free

The above declarations are not intended to be an “all-inclusive” list of the duties and responsibilities of the job described nor are they intended to be such a listing of the skills and abilities required to do the job. Rather, they are intended only to describe the general nature of the job.

THIS JOB DESCRIPTION DOES NOT CONSTITUTE AN EMPLOYMENT AGREEMENT. This job description does not restrict Capital City Bank from the ability to assign, reassign or eliminate duties and responsibilities of this job at any time. This job description describes the current assignment of essential functions. These functions may change at any time as the needs of the Bank or department change or for other reasons deemed appropriate.

Capital City Bank Group, Inc.

New Jobs

Security Info Analyst I