Information Security Analyst

Key Responsibilities

Languages: Fluency in both English and Mandarin is MANDATORY given global team.

Lead and Manage Security Operations:

• Oversee day-to-day security operations, including monitoring, incident response, vulnerability management, and security assessments.
• Manage and optimize security tools and technologies such as firewalls, IDS/IPS, SIEM systems, antivirus solutions, and encryption protocols.

Regulatory Compliance:

• Ensure compliance with federal and state regulatory requirements (e.G., FFIEC, GLBA, NYDFS, PCI-DSS, GDPR).
• Prepare and present audit and compliance reports to internal and external stakeholders.

Network and Infrastructure Security:

• Design and implement security strategies for network, cloud, and endpoint protection.
• Conduct security audits and penetration testing to identify and mitigate risks.

Backup and Patch Management:

• Manage backup and disaster recovery solutions to ensure data integrity and availability.
• Oversee patch management to address vulnerabilities promptly.

Risk Assessment and Mitigation:

• Perform IT risk assessments, identify vulnerabilities, and develop mitigation plans.
• Collaborate with IT and business teams to ensure security measures align with business objectives.

Collaboration and Communication:

• Work closely with internal IT teams, business units, and external partners to implement security policies and procedures.
• Communicate security risks and action plans effectively to both technical and non-technical audiences.

Continuous Improvement:

• Stay updated on emerging security threats and best practices.
• Recommend and implement enhancements to strengthen the security posture.

Required Qualifications

• Experience: 5-10 years of IT security experience within the banking industry.
• Education: Bachelor’s degree in Information Security, Computer Science, or a related field. Advanced certifications such as CISSP, CISM, or CISA are preferred.
• Regulatory Knowledge: Strong understanding of federal and state regulatory requirements affecting the banking sector.
• Technical Expertise:
• Proven experience in network security, backup solutions, patch management, and IT risk assessments.
• Hands-on experience with security tools like firewalls, SIEM, IDS/IPS, DLP, and antivirus systems.
• Communication Skills: Excellent verbal and written communication skills with the ability to interact with diverse teams globally.
• Certifications: Security certifications such as CISSP, CISM, CEH, or similar are a plus.