IS Security Analyst I

The IS Security Analyst I is responsible for assisting with the implementation, administration, monitoring, and maintenance of information security controls and technologies designed to protect the Bank's systems, networks, applications, data, and users. This position supports day-to-day security operations by monitoring security events, investigating potential threats and vulnerabilities, responding to security incidents, performing security reviews, and assisting with regulatory and compliance requirements.

PRINCIPAL DUTIES AND RESPONSIBILITIES

1. Monitors, analyzes, and responds to security alerts, events, and notifications from security tools and systems to identify potential threats, vulnerabilities, unauthorized activity, and policy violations.
2. Assists with the development, implementation, testing, and maintenance of security policies, procedures, standards, processes, and technical controls.
3. Maintains accurate and thorough documentation of security investigations, incidents, vulnerabilities, remediation activities, system reviews, projects, and other security-related work.
4. Identifies recurring security issues, control gaps, process deficiencies, and opportunities for improvement. Recommends and assists with implementing practical solutions to reduce risk and improve the effectiveness and efficiency of security operations.
5. Takes ownership of assigned security issues and projects from identification through resolution or completion. Defines objectives, coordinates with appropriate teams, tracks progress, documents outcomes, and communicates status and risks to stakeholders.
6. Assists with security-related audits, examinations, assessments, and governance, risk, and compliance (GRC) activities. Provides documentation and evidence as requested and assists with remediation of identified findings.
7. Maintains awareness of current cybersecurity threats, attack techniques, vulnerabilities, security technologies, information technology trends, regulatory requirements, and evolving security standards relevant to the Bank.
8. Ability to participate in after-hours security response activities as required.

Non-Essential Functions: Performs other duties as assigned.

Qualifications

EDUCATION AND/OR EXPERIENCE

• High School Diploma, or equivalent, required.
• 1-2 years’ experience in information technology, cybersecurity, networking, systems administration, or related role, required.
• Experience with security monitoring, vulnerability management, endpoint security, identity and access management, network security, or incident response, preferred.
• CompTIA Security+ certification, preferred.
• Additional cybersecurity certifications, education, training, or relevant technical experience, preferred.

KNOWLEDGE, SKILLS, AND ABILITIES

• Ability to communicate information security risks, technical findings, and recommended actions clearly and concisely to both technical and non-technical audiences.
• Strong analytical and problem-solving skills with the ability to evaluate technical information and determine appropriate courses of action.
• Working knowledge of information security principles, cybersecurity best practices, network security, endpoint security, authentication, access control, and internet communications..
• Ability to independently investigate issues, determine appropriate next steps, and drive assigned work through resolution without requiring continuous direction or close supervision.
• Ability to identify opportunities for process, control, and security improvements and take initiative to pursue appropriate solutions.