Reviews system logs and real time alerts for infrastructure to identify trends, investigate abnormalities, and report exceptions to the Information Security Program.
Participates in the Information Security Committee and creates meeting dashboards.
Coordinates the User Access Program for all systems both on premise and those hosted by third parties including but not limited to the initial set up of users, ongoing reviews, and removal of users due to terminations/separations.
Monitors the IT related accepted risks for adding, updating, and removing accepted risks based on changes in technology and vulnerabilities.
Assists with the initial configuration review of third party hosted systems to determine compliance with company policies and procedures.
Gathers industry alerts and information from information security focused groups (Financial Services Information Sharing and Analysis Center, the FDIC, etc.) to alert the Information Security Committee of the potential threats and recommends action steps commensurate with the risk level.
Monitors the configuration of company-wide applications to verify they meet the standards required by the Information Security Program.
Updates the Information Security Program and corresponding cybersecurity policies, procedures, and controls annually based on regulatory changes, feedback from the Information Security Committee, and the results of audits and assessments.
Coordinates the scheduled reviews of systems logs to verify appropriate system changes and employee access rights to verify alignment with job responsibilities.
Performs scans on internal devices to identify vulnerabilities and provide guidance to system administrators for remedial actions.
Analyzes the integrity of changes made to the network through the Patch Management program, Change Management Program, user access changes, and system modification forms.
Develops and conducts information security training for employees to make them aware of the Bank's information security policies and procedures.
Monitors team members' adherence to the Information Security Program through clean desk audits, phishing testing, and other testing outlined in the Information Security Testing Program.
Research, implement, and maintain an information security framework through ongoing compliance monitoring of the framework.
Develops and coordinates information security training for customers through the Bank's statements and social media platforms.
Assists with the responses to potential cybercrime activity and data breaches according to the Incident Response Policy.
Assists customers with recovering from fraudulent transactions by identifying the recovery steps necessary based on the transaction type and coordinating the follow up with other departments as needed.
Completes or participates in the preparation of risk assessments that are performed for new critical technologies, applications, or devices that are implemented, revised, and/or installed.
Works with Information Services and system administrators to select appropriate technology vendors that support regulatory and best practice requirements and researches information security tools.
Enforces the record retention program for electronic documents and classifies these records in accordance with the Classification of Information Policy.
Supports the Risk Management Department with risk management related tasks as required.
Performs all duties consistent with applicable Federal and State laws and regulations as well as Company Policies
Performs other related duties as assigned.
Exceeds customer expectations by following the guidelines outlined in the Customer Experience Program

Requirements:

3 to 8 years' experience in the information security field, preferably in the financial or banking industry; and
Bachelor's degree (B.A.) with a focus on business and/or technology; or
Equivalent combination of education and experience.
Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), and/or Certified Information Security Manager (CISM) designation(s) are preferred, but not required.

OperationIT

New Jobs

Information Security Analyst