Information Security Analyst

Key ResponsibilitiesAll the relevant skills, qualifications and experience that a successful applicant will need are listed in the following description.Languages: Fluency in both English and Mandarin is MANDATORY given global team.Lead and Manage Security Operations:Oversee day-to-day security operations, including monitoring, incident response, vulnerability management, and security assessments.Manage and optimize security tools and technologies such as firewalls, IDS/IPS, SIEM systems, antivirus solutions, and encryption protocols.Regulatory Compliance:Ensure compliance with federal and state regulatory requirements (e.g., FFIEC, GLBA, NYDFS, PCI-DSS, GDPR).Prepare and present audit and compliance reports to internal and external stakeholders.Network and Infrastructure Security:Design and implement security strategies for network, cloud, and endpoint protection.Conduct security audits and penetration testing to identify and mitigate risks.Backup and Patch Management:Manage backup and disaster recovery solutions to ensure data integrity and availability.Oversee patch management to address vulnerabilities promptly.Risk Assessment and Mitigation:Perform IT risk assessments, identify vulnerabilities, and develop mitigation plans.Collaborate with IT and business teams to ensure security measures align with business objectives.Collaboration and Communication:Work closely with internal IT teams, business units, and external partners to implement security policies and procedures.Communicate security risks and action plans effectively to both technical and non-technical audiences.Continuous Improvement:Stay updated on emerging security threats and best practices.Recommend and implement enhancements to strengthen the security posture.Required QualificationsExperience: 5-10 years of IT security experience within the banking industry.Education: Bachelor's degree in Information Security, Computer Science, or a related field. Advanced certifications such as CISSP, CISM, or CISA are preferred.Regulatory Knowledge: Strong understanding of federal and state regulatory requirements affecting the banking sector.Technical Expertise:Proven experience in network security, backup solutions, patch management, and IT risk assessments.Hands-on experience with security tools like firewalls, SIEM, IDS/IPS, DLP, and antivirus systems.Communication Skills: Excellent verbal and written communication skills with the ability to interact with diverse teams globally. xhyhwjd Certifications: Security certifications such as CISSP, CISM, CEH, or similar are a plus.