Information Security Analyst

Job Description

Key Responsibilities

\n

Languages: Fluency in both English and Mandarin is MANDATORY given global team.

\n

\n

Lead and Manage Security Operations:

\n

\n
• Oversee day-to-day security operations, including monitoring, incident response, vulnerability management, and security assessments.
\n
• Manage and optimize security tools and technologies such as firewalls, IDS/IPS, SIEM systems, antivirus solutions, and encryption protocols.
\n

\n

Regulatory Compliance:

\n

\n
• Ensure compliance with federal and state regulatory requirements (e.g., FFIEC, GLBA, NYDFS, PCI-DSS, GDPR).
\n
• Prepare and present audit and compliance reports to internal and external stakeholders.
\n

\n

Network and Infrastructure Security:

\n

\n
• Design and implement security strategies for network, cloud, and endpoint protection.
\n
• Conduct security audits and penetration testing to identify and mitigate risks.
\n

\n

Backup and Patch Management:

\n

\n
• Manage backup and disaster recovery solutions to ensure data integrity and availability.
\n
• Oversee patch management to address vulnerabilities promptly.
\n

\n

Risk Assessment and Mitigation:

\n

\n
• Perform IT risk assessments, identify vulnerabilities, and develop mitigation plans.
\n
• Collaborate with IT and business teams to ensure security measures align with business objectives.
\n

\n

Collaboration and Communication:

\n

\n
• Work closely with internal IT teams, business units, and external partners to implement security policies and procedures.
\n
• Communicate security risks and action plans effectively to both technical and non-technical audiences.
\n

\n

Continuous Improvement:

\n

\n
• Stay updated on emerging security threats and best practices.
\n
• Recommend and implement enhancements to strengthen the security posture.
\n

\n

Required Qualifications

\n

\n
• Experience: 5-10 years of IT security experience within the banking industry.
\n
• Education: Bachelor’s degree in Information Security, Computer Science, or a related field. Advanced certifications such as CISSP, CISM, or CISA are preferred.
\n
• Regulatory Knowledge: Strong understanding of federal and state regulatory requirements affecting the banking sector.
\n
• Technical Expertise:
\n
• Proven experience in network security, backup solutions, patch management, and IT risk assessments.
\n
• Hands-on experience with security tools like firewalls, SIEM, IDS/IPS, DLP, and antivirus systems.
\n
• Communication Skills: Excellent verbal and written communication skills with the ability to interact with diverse teams globally.
\n
• Certifications: Security certifications such as CISSP, CISM, CEH, or similar are a plus.
\n