Information Security Analyst

Position Purpose and Objectives

Under direction of the Director of Information Security, the Information Security Analyst will complete tasks designed to ensure security of the credit union’s systems and information assets. Protects against unauthorized access, modification, or destruction. The Information Security Analyst will work in a support role for security projects, end user compliance and day to day monitoring of security tools to ensure all active security platforms are performing at an optimal level.

Major Duties and Essential Functions

• Leverages prior technical work experiences, such as workstation, server, network, or cloud environment to help the Director of Information Security identify and address security gaps and implement robust security controls. 
• Applies technology know-how to survey, quantify, report and track security control issues to resolution
• Assist the team in issue investigation, solution implementations, and functional evaluations. 
• Works closely with the infosec team to respond to cybersecurity events and incidents.
• Maintains oversight of internal IT systems and vendor platforms regarding the security maintenance of their systems and applications.
• Assists in performing regular security awareness training for all employees to ensure consistently high levels of compliance. 
• Assists with the creation and execution of internal phishing campaigns. 
• Assists with questions from internal and external audits and examinations and tracks findings to resolution. 
• Adheres to policies, procedures and standards that meet existing and newly developed policy and regulatory requirements including NIST, PCI, and/or FFIEC guidance.  
• Maintains up-to-date knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.
• Daily monitoring of major SIEM and Cybersecurity tools, creating tracking, reporting, investigation, and escalation as needed of critical events.
• Helps ensure the confidentiality, integrity and availability of the data residing on or transmitted to/from/through enterprise workstations, servers, and other systems and in databases and other data repositories.
• Engages in ongoing communications with the Service Desk, Infrastructure and Networking groups as well as the various business groups to help ensure enterprise-wide understanding of security goals, to solicit feedback and to foster co-operation.
• Responds promptly to customer needs and solicits customer feedback to improve service.
• Upholds credit union policies and procedures and champion organizational culture both internally and externally.

Positions directly supervised: 

None

Specific knowledge, skills, and abilities required for this position: 

• Experience in a highly regulated financial institution environment preferred.
• Experience with FFIEC controls (FFIEC IT Security Handbook) and ensuring products and services are built compliant and      remain compliant through lifecycle.
• Experience implementing data classification and protection controls (DLP)
• Experience with improving minimum levels of security protections.
• Experience securely managing digital assets.
• Experience interacting and supporting non-technical staff.
• Experience managing to ‘least privilege’ and ‘separation of duties’ security principles using Role-Based Access Control (RBAC) and Privileged Access Management controls 

Education/Certification: 

• Bachelor’s degree in computer science or relevant experience preferred. 
• Certified Information Systems Security Professional (CISSP) preferred 
• Microsoft Certified: Azure Security Engineer Associate preferred
• Microsoft Certified: O365 Information Protection and Compliance Administrator Associate preferred

Experience: Three to five years of experience in networking, security, infrastructure, or Service Desk technical skills, preferably in a Security Operations role, or a combination thereof.