UKFCU is an equal employment opportunity employer and is committed to providing employment opportunities to minorities, females, veterans, and disabled individuals. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or status as a protected veteran. UKFCU invites you to review the current "EEO Is the Law" poster as part of the application process. Please also see the 2015 Supplemental EEO Poster here.

This position allows for an optional hybrid work arrangement which includes a combination of both in-office and remote work arrangements. (Maximum of two days remote, three days in-office). To be eligible for the program, employees must complete a minimum of 6 months of continuous, regular employment, be in good standing, and submit a formal hybrid work application prior to being eligible for hybrid work, pending supervisor approval. Work schedules will be established by the employee's supervisor according to business needs. Working locations and schedules may be altered at management discretion.

Title: Security Analyst

Department: Information Technology

Reports to: Manager of Information Technology and Infrastructure

FLSA: Non-Exempt

Job Grade: 12 (starting rate $36.16 - $38.47 hourly)

Job Purpose: The Security Analysts assist IT and the business by administering and determining how to best secure data assets and to make sure they stay secure. The security analyst protects computer networks from cyber-attacks, partners with the IT Director and ISO on policies and practices for the entire organization.

Essential Job Results

JOB SPECIFIC RESULTS

Administers and evolves the CU's Extended Detection and Response (XDR) solution.
Evaluates third party relationships for compliance to the CU's standards.
Perform first level incidence response and computer forensics activities.
Serves as Subject Matter Expert (SME) on information security related projects and initiatives assigned.
Develops and recommends security designs and frameworks for technology systems by defining process and architecture for creating secure networks, building firewalls and implementing intrusion-detection systems.
Improves audit readiness testing techniques and assists in remediation efforts of findings.
Administers vulnerability assessments and internal penetration testing on network systems looking for any weaknesses in existing security measures.
Maintains awareness of emerging industry security technologies, technology issues, regulatory issues and practices.
Weighs business needs against security concerns and recommends necessary changes to enhance information systems security.
Participates in Information Security audits of the CU's external vendor/service providers in compliance with auditing standards and requirements.
Consults with the business and IT on the development of ISS security exception requests, assistance with general security questions, design and consulting.
Supports Information Security Officer in enhancing cyber security awareness training, developing, reviewing, and updating the CU's cyber security plans and procedures.
On-call hours (nights and weekends) are required on a rotating basis.

GENERAL STAFF RESULTS

Maintains member and employee confidence and protects operations by keeping information confidential and sharing on a business-related as-needed basis only.
Engages in problem resolution by clarifying the member's and/or employee's complaint; determining the cause of the problem; selecting and explaining the best solution to solve the problem; expediting correction or adjustment; following up to ensure resolution; and keeping the supervisor informed of problems and solutions.
Complies with UKFCU policies and procedures by enforcing and adhering to internal UKFCU procedures and board-established policies.
Complies with federal, state and local regulations and legal requirements by enforcing and adhering to requirements.
Maintains professional and technical knowledge by maintaining an awareness of competitors' rates and terms, industry trends and technology; attending staff meetings; identifying opportunities to attend seminars that enhance skills and maintain knowledge of new products that could assist in improving operational effectiveness; reviewing professional publications; establishing personal networks; benchmarking state-of-the-art practices; and participating in professional societies.
Contributes to a team effort by accomplishing corporate and individual goals and other related results as needed.

KEY COMPETENCIES

Professionalism in all communications.
Commitment to the Credit Union movement and philosophy.
Integrity in all actions.
Ability to identify the needs of the member and provide services to meet those needs.
Accountability to established metrics and performance goals.

Minimum Requirements

At least 5 years of experience with processes, tools, techniques and practices for assuring adherence to standards associated with accessing, altering and protecting organizational data.
Experience creating and implementing processes around systems security, auditing, and identity management preferred; Security +, GSEC, GISF, CEH, and Network + or equivalent are highly desired.
In depth understanding of NIST 800-53, NIST CSF, CCM frameworks.
Bachelor's degree or equivalent.
Experience with Active Directory, Group Policy Objects, Virtualization, and Cybersecurity.
Experience with cloud architecture, security, and migrations
Expert knowledge of computer hardware, software, networking, web design, server infrastructure, and data centers.
Ability to define problems, collect data, establish facts and draw conclusions in an IT environment.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to sit and stand; use hands to finger, handle, or feel objects, tools, or controls; reach with hands and arms; and talk or hear. The employee frequently is required to walk and stand. The employee is occasionally required to stoop, kneel, crouch, or crawl. The employee must occasionally lift

and/or move up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.

Work Environment

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. The employee will be required to work mostly indoors in a climate controlled office setting. The noise level in the work environment is usually moderate.

Mental Demands

The mental characteristics necessary to competently perform this job include the occasional need to be persuasive, use good judgment; and, the continuous need to use auditory perception, memory, and reasoning ability.

The intent of this job description is to provide a representative summary of the types of results that will be required of the positions given this title, and shall not be construed as a declaration of the specific responsibilities of any particular position. Employees may be requested to perform job-related tasks other than those specifically outlined in this description.

Qualifications

MENTAL DEMANDS:

The mental characteristics necessary to competently perform this job include the occasional need to be persuasive, use good judgment; and, the continuous need to use auditory perception, memory, and reasoning ability.

The intent of this job description is to provide a representative summary of the types of results that will be required of the positions given this title, and shall not be construed as a declaration of the specific responsibilities of any particular position. Employees may be requested to perform job-related tasks other than those specifically outlined in this description.

recblid 3xhwc559ieqytdsnr38ttuo1ty336q

University of Kentucky Federal Credit Union

New Jobs

Security Analyst