Information Security Analyst

Summary: The Cybersecurity Analyst is responsible for monitoring, identifying, investigating, and responding to cybersecurity threats and vulnerabilities across Tropical Financial Credit Union. This position supports the protection of systems, networks, endpoints, applications, and sensitive information through security monitoring, vulnerability management, incident response, and security control administration. The position works closely with the Information Security Officer, Information Security Team Lead, IT teams, vendors, and business units to maintain and continuously improve the Credit Union's cybersecurity posture. Essential Duties and Responsibilities include the following: Provide service that meets the Service Standards defined by Tropical Financial Credit Union and achieve annual goals established through the Performance Management Process. Monitor security alerts and events from endpoint, firewall, identity, email security, and other cybersecurity platforms. Investigate suspicious activity, security incidents, malware, phishing attempts, unauthorized access, and other cybersecurity threats. Perform initial triage and escalation of cybersecurity incidents in accordance with the Incident Response Plan. Assist with containment, remediation, recovery, and documentation of cybersecurity incidents. Conduct vulnerability scans and analyze findings based on severity, exploitability, and organizational risk. Coordinate remediation of vulnerabilities, security weaknesses, and configuration issues within established timelines. Track vulnerability remediation efforts and prepare reports on outstanding risks and remediation progress. Monitor endpoint security and investigate potentially compromised workstations, servers, and user accounts. Review identity and access alerts, including suspicious authentication activity, privilege changes, and account anomalies. Support phishing investigations and cybersecurity awareness initiatives. Assist with administration and monitoring of EDR, vulnerability management, firewalls, email security, identity protection, and security monitoring platforms. Assist with security assessments, penetration testing activities, and remediation of identified findings. Support cybersecurity due diligence and security reviews of third-party vendors and technology solutions. Maintain documentation related to incidents, investigations, vulnerabilities, procedures, and security controls. Assist with internal and external audits, regulatory examinations, risk assessments, and cybersecurity assessments. Monitor threat intelligence and evaluate emerging threats that may impact the Credit Union. Assist with security metrics, dashboards, and reports for Information Security management. Support cybersecurity policies, standards, procedures, and technical security controls. Participate in tabletop exercises, incident response testing, and business continuity/disaster recovery exercises. Stay informed of emerging threats, vulnerabilities, attack techniques, privacy laws, regulations, and security technologies. BSA Compliance - every employee is required to uphold the Credit Union's compliance with the Bank Secrecy Act and anti-money laundering policies and procedures. Complete required BSA and OFAC training at least annually and comply with all TFCU policies and procedures. Perform other duties as required with or without accommodation.