IT Security Analyst

Job Description

Job Description

Description:

Department:

Information Technology Job Status:

Full Time FLSA Status:

Non-Exempt Reports To:

VP IT Manager Amount of Travel Required:

5% Positions Supervised:

None Work Schedule: Monday-Friday 8:00 - 5:00 Hours may vary based on need. POSITION SUMMARY The IT Information Security Analyst supports the Bank’s IT Department and Information Security Program by monitoring, analyzing, and protecting information systems to safeguard organizational data. This role works with IT, Risk Management, and the Information Security Officer to identify vulnerabilities, respond to security events, support regulatory compliance, strengthen day-to-day security operations, and provide documentation for exam readiness, ISO program oversight, and board reporting. ESSENTIAL FUNCTIONS Reasonable accommodations statement To accomplish this job successfully, an individual must be able to perform, with or without reasonable accommodation, each essential function satisfactorily. Reasonable accommodation may be made to help enable qualified individuals with disabilities to perform the essential functions. RESPONSIBILITIES: Security Monitoring & Incident Response Monitor security tools (SIEM, MDR, endpoint protection, and network controls) for suspicious activity Assist ISO with investigation of security events and escalate incidents in accordance with the bank’s incident response procedures Document incidents, root cause analysis, and remediation actions Support ISO with phishing simulations and user-awareness initiatives Risk Assessment & Compliance Support ISO in maintaining risk assessments for systems, applications, and vendors Review and assist with security considerations related to third-party connections and service providers Vulnerability & Threat Management Perform vulnerability scanning and track remediation efforts Monitor emerging threats and assess exposure to the institution Coordinate patch management and secure configuration practices Participate in penetration testing and external audit remediation Security Controls & Policy Administration Maintain and enforce security policies, standards, and procedures Ensure controls align with the organization’s information security program and risk appetite Configure and validate security tools such as: Firewalls, MFA, endpoint protection Email security and web filtering Data protection and encryption controls Assist in third-party risk and vendor access reviews Governance, Reporting & Documentation Prepare reports on: Security posture Risk findings Incident trends Maintain documentation Business Continuity & Resilience Support Assist ISO with Business Continuity Planning (BCP) and Disaster Recovery (DR) testing Ensure recovery strategies align with regulatory expectations Assist in audit preparation, evidence gathering, and control documentation for IT department OTHER DUTIES AS ASSIGNED POSITION QUALIFICATIONS Competency Statement(s) Accuracy - Ability to perform work accurately and thoroughly. Detail Oriented - Ability to pay attention to the minute details of a project or task. Honesty / Integrity - Ability to be truthful and be seen as credible in the workplace. Initiative - Ability to make decisions or take actions to solve a problem or reach a goal. Responsible - Ability to be held accountable or answerable for one’s conduct. Loyal - The trait of feeling a duty to the employer. Reliability - The trait of being dependable and trustworthy. Organized - Possessing the trait of being organized or following a systematic method of performing a task. Accountability - Ability to accept responsibility and account for his/her actions. Working Under Pressure - Ability to complete assigned tasks under stressful situations. Adaptability - Ability to adapt to change in the workplace. Safety Awareness - Ability to identify and correct conditions that affect employee safety. Deductive Reasoning - Ability to apply principles of logical or scientific thinking to a wide range of intellectual and practical problems. Communication, Oral - Ability to communicate effectively with others using the spoken word. Other duties as assigned. SKILLS & ABILITIES Education:

High School Graduate or General Education Degree (GED), bachelor’s degree or higher in I.T. related field preferred but not required. Experience:

Two or more years of experience in Cybersecurity environment preferred. Computer Skills: Excellent knowledge of Windows operating systems, including Windows Server Working knowledge of VMware vCenter and vSphere Excellent knowledge of Microsoft Office suite of products Network and Internet connectivity knowledge – including switch, router, firewall and wireless management. Other Requirements: Strong understanding of: Network security, endpoint security, and identity management Security monitoring tools (SIEM, EDR, MDR) Knowledge of banking regulatory frameworks (FFIEC, GLBA, NIST) Risk assessment and control evaluation skills Analytical and problem-solving ability Strong written and verbal communication skills (especially audit/regulatory communication) Preferred Qualifications Bachelor’s degree in computer science, Information Systems, or related field Certifications in CISSP, CISM, CISA, Security+ Experience in financial services or regulated environment PHYSICAL DEMANDS N (Not Applicable) Activity is not applicable to this position. O (Occasionally) Position requires this activity up to 33% of the time (0 - 2.5+ hrs/day) F (Frequently) Position requires this activity from 33% - 66% of the time (2.5 - 5.5+ hrs/day) C (Constantly) Position requires this activity more than 66% of the time (5.5+ hrs/day)

Physical Demands Lift/Carry Stand F Walk F Sit F Manually Manipulate F Reach Outward O Reach Above Shoulder O Climb O Crawl O Squat or Kneel O Bend O Grasp F Speak F 10 lbs or less O 11-20 lbs O 21-50 lbs O 51-100 lbs O Over 100 lbs O Push/Pull 12 lbs or less O 13-25 lbs O 26-40 lbs O 41-100 lbs O WORK ENVIRONMENT:

Office environment. Requirements:

Education: High School Graduate or General Education Degree (GED), bachelor’s degree or higher in I.T. related field preferred but not required.

Experience: Two or more years of experience in Cybersecurity environment preferred. Computer Skills: Excellent knowledge of Windows operating systems, including Windows Server Working knowledge of VMware vCenter and vSphere Excellent knowledge of Microsoft Office suite of products Network and Internet connectivity knowledge – including switch, router, firewall and wireless management. Other Requirements: Strong understanding of: Network security, endpoint security, and identity management Security monitoring tools (SIEM, EDR, MDR) Knowledge of banking regulatory frameworks (FFIEC, GLBA, NIST) Risk assessment and control evaluation skills Analytical and problem-solving ability Strong written and verbal communication skills (especially audit/regulatory communication) Preferred Qualifications Bachelor’s degree in computer science, Information Systems, or related field Certifications in CISSP, CISM, CISA, Security+ Experience in financial services or regulated environment