Information Security Analyst

Information Security AnalystRandstad is partnering with a bank that is looking for a contract-permanent Information Security Analyst. Under the supervision of the Head of Information Security, the Information Security Analyst is expected to perform and enhance user access rights reviews and monitoring, perform information asset risk assessments, perform additional periodic information security monitoring, and assist in business continuity planning activities. The Analyst is expected to work closely with various businesses across the enterprise to ensure that user access rights are being managed in accordance with the bank’s defined program. The ideal candidate will have 2+ years of information security experience.Essential FunctionsPerform user access rights reviews for critical systems on a periodic basis.Review system logs regarding the Bank’s infrastructure to identify trends, investigate abnormalities, and report exceptions to the Bank’s Information Security Program.Work closely with the IT Department and develop strong working relationships to ensure that various safeguards are working effectively.Assist business lines in performing risk assessments of the Bank’s information assets and systems.Work with the Head of Information Security to enhance Bank-wide data leakage programs to protect customer and Bank confidential information.Assists the Head of information Security in employee awareness campaign.Facilitates and tracks the Bank’s annual user access rights reviews performed by department managers for their respective areas.Document and track Information Security incidents.Participate in planning for internal and external audits as required.Maintain applicable modules in the Bank’s enterprise risk management system.Job Qualifications2+ years of Information Security or IT Audit experience or recent Information Security or Computer Science college graduate.Bachelor’s Degree in Information Security or Computer ScienceWorking knowledge of security best practices for user access rights management.Working knowledge of security controls on server, workstation and web and cloud environments.Understanding of the role of information security within business.