Cybersecurity Analyst

Cybersecurity Analyst

The Cybersecurity Analyst plays a critical role in protecting the organization's digital banking systems and safeguarding sensitive member data from cyber threats. In this position, the analyst continuously monitors and analyzes security events across on-premises and cloud environments, identifies system vulnerabilities, and implements effective risk mitigation strategies to strengthen the organization's security posture. The Analyst ensures robust security controls are in place to protect Payment Card Industry (PCI) data and cloud infrastructure, in alignment with industry best practices and compliance requirements. Additionally, this role coordinates prompt responses to cybersecurity incidents and assists end users by addressing security-related support tickets. The ideal candidate demonstrates a strong understanding of core cybersecurity principles and a passion for continuous learning - especially in staying current with advancements in artificial intelligence (AI) as well as the constantly evolving landscape of AI-driven cyber threats.

Essential Responsibilities

• Manages miscellaneous documentation, requests processing, training (new hire, employee awareness), and other projects as assigned.
• Supports the development, implementation, monitoring, and maintenance of security policies, procedures, standards, and guidelines.
• Assists with maintaining and documenting security testing, including reporting results and remediation.
• Researches and investigates emerging risk topics, threats, vulnerabilities, capabilities, and solution options to create/update policy and governance, technology strategies, solution architecture, and assessments.
• Supports incident management/response across the enterprise and provides consistent security monitoring, response, follow-up investigation, and determination of root cause. Evaluate security alerts generated by internal systems, vendors, and other industry sources.
• Supports the user access review process and other monitoring aspects of identity and access management.
• Works with IT control owners in creating documentation, interpretation and monitoring of IT general controls.
• Interacts with third-party managed security service providers as required to facilitate ongoing system testing and monitoring.
• Reviews active threat intelligence and other sources and suggest enhancements to security posture.
• Works with internal and external auditors during examinations providing support and assistance in addressing audit recommendations.

This is a remote role.

Knowledge & Skills

• Demonstrable knowledge of Microsoft Azure, Defender and Office 365 security controls.
• Knowledge and understanding of relevant legal and regulatory requirements, such as the Gramm-Leach-Bliley Act (the GLB Act or Act), Guidelines for Safeguarding Member Information and Payment Card Industry/Data Security Standard.
• Knowledge of industry frameworks such as NIST and ISO.
• Ability to evaluate the IT controls including, but not limited to, Data Security Standard (PCI DSS), Security and Privacy policies and standards.
• Demonstrable knowledge of cybersecurity risks and application of relevant techniques and tools. Strong analytical skills with the ability to parse requirements and relate them to appropriate security controls.
• Experience in vulnerability testing and ability to plan and implement ongoing testing and monitoring programs and knowledge of IT operational infrastructure including business continuity.
• Ability to work with confidential information and volumes of detail; work intuitively and independently, audit, analyze, organize tasks and projects.
• Ability to interact with personnel at all levels and across all business units and organizations, and to comprehend complex business initiatives.
• Working knowledge of system tools for monitoring trends related to security event management, vulnerability assessment, and intrusion detection to include Cloud offerings

Physical Demands & Environmental/Working Conditions:

• This position requires the ability to:
• move self in different positions to accomplish tasks in various environments including tight and confined spaces
• remain in a stationary position, often standing or sitting for prolonged periods
• adjust or move objects up to 15 pounds in all directions
• perform repeat motions that may include the wrists, hands, and/or fingers
• use primarily just the fingers to make small movements such as typing, picking up small objects, or pinching fingers together
• verbally communicate to convey detailed or important instructions or ideas accurately, loudly, or quickly
• hear average or normal conversations and receive ordinary information prepare or inspect documents or products, assess the accuracy, neatness, and thoroughness of assigned work, or operate office machinery through average, ordinary, visual acuity.

Disclaimer The information contained in this job description has been designed to indicate the general nature and level of work performed by employees within this role. It is not designed to contain or to be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.

The hiring range for this remote position is $100,000 to $125,000 per year, which factors in various geographic regions. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.