Information Security Analyst

Information Security Analyst

Broomfield, Colorado, United States

When joining Elevations, you can expect to work for a company with:

• A leadership team that strives to make this the best place you've ever worked!
• A focus on supporting our employees' mental, physical, and financial well-being
• A commitment to diversity, equity, and inclusion recognized by the Denver Business Journal and Colorado Association of Realtors
• A highly engaged workforce devoted to innovation, continuous improvement, and collaboration
• A reputation for excellence, as evidenced by being a two-time recipient of the Malcolm Baldrige National Quality Award
• A passion for consistently providing amazing experiences and creating raving fans

If you join our team, here are some of the perks you can expect:

• A competitive total rewards package with 4 weeks paid time off for full-time employees, work anniversary paid time off, paid volunteer time off, and 12 paid holidays
• Comprehensive medical, dental, and vision plans with employer contributions to supercharge your Health Savings Account
• Up to a 4% match on 401(k) contributions
• Up to twelve weeks of fully paid parental leave
• An extensive Employee Assistance Program that provides personalized care options for your whole household
• Ample opportunity to learn, develop and grow with access to LinkedIn Learning, career and leadership development programs, job shadowing, a mentor program, and tuition reimbursement up to $5,250/year

Location:

Elevations Credit Union- Broomfield Basecamp

Hybrid: Employees who are able to perform the essential functions of their jobs away from an Elevations location may do so with the expectation that they are onsite at least fifty percent of the time over a two-week pay period.

Summary/Objective:

Information Security Analyst: Responsible for coordinating and completing projects under the Information Security Program, this role assesses current security situations, evaluates trends, and recommends security improvements to protect data and ensure regulatory compliance while maintaining technical knowledge through continuous learning.

Essential Functions include:

• Assists with maintaining Logical Security Access to various applications and systems including documentation, updates and routine reviews.
• Conducts security awareness training campaigns and phishing simulations to raise awareness and promote a security-conscious culture within the organization.
• Identifies, assesses, and manages vulnerabilities throughout the organization's technology portfolio. This includes scanning, validation, and confirming that remediation was complete. Additionally, collaborates with various teams to prioritize & remediate based on risk levels and expected SLA's.
• Monitors the organization's networks, systems, and applications for security incidents, unusual activity, or potential threats. This included analyzing and responding to events, and identifying patterns or anomalies,
• Manages identified risks from security assessments, audits and penetration tests. Provides recommended remedial actions and works with various departments to ensure that risks and vulnerabilities are handled in a timely manner.
• Manages and maintains incident response procedures and investigates and responds to security events. This includes documenting findings, recommending actions, contributing to post incident analysis, and participating in lessons learned.
• Supports preparation and delivery of security reports, KPI, and KRI metrics to management and key stakeholders.
• Contributes to the development and maintenance of security policies, standards, and guidelines.
• Stays Informed: Keeps up-to-date on news, events, and emerging vulnerabilities that could be potential threats to the organization.

Reports to:

Manager, Information Security

Manages:

This role does not have supervisory responsibility.

Required Skills, Education and Experience:

• 2+ years of experience in information security or technology legal/compliance
• Experience monitoring and responding to security incidents, conducting vulnerability assessments and risk analysis, and managing security controls and access management
• The ability to write effectively, to explain information security in non-technical terms
• Possess the ability to effectively develop issue papers, memorandums, letters, work plans, and other types of written communication

Preferred Skills, Education and Experience:

• Degree in Computer Engineering, Technology, Information Systems, or related field of study.
• Risk management experience
• Experience working in the financial services industry, such as a credit union or bank.

Work Environment:

Elevations uses multi-factor authentication to keep our data safe. As such, a personal smartphone is a requirement for employment with us. This job operates in an office setting and routinely uses standard office equipment.

Physical Requirements:

Sitting frequently, walking occasionally, use of hands frequently, hearing constantly, talking frequently, exerting up to 10 lbs of force occasionally to lift, carry, push, pull, or move objects

Position Type/Expected Hours of Work:

• Full-time / 40 hours per week

Compensation Information:

The person hired into this position will likely earn between $71,973 and $89,966 annual salary, plus annual bonus.

Actual compensation offered may vary from the posted hiring range based on factors such as relevant experience, time in role, base salary of internal peers, prior performance, business sector, licensure requirements and/or skill level, and will be finalized at the time of offer.

Anticipated Application Window:

This role is anticipated to close within 25 days from the date of posting. However, if the position has not been filled, Elevations may keep the application period open longer.

Other Duties:

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

About Us: Elevations Credit Union is a member-owned not-for-profit financial institution serving Colorado's Front Range. Founded in 1952, we've grown from 12 members and less than $100 in assets to an institution with 15 branches and more than 170,000 members that manages over $3 billion in assets and is the No. 1 credit union mortgage lender in Colorado. At Elevations, we've made a commitment to move away from a product-centered business model and focus instead on creating consumer solutions. Our objective is to provide our members, as well as the entire community, with unbiased consumer information.

EEO Statement: The Credit Union is dedicated to the principles of equal employment opportunity. We prohibit unlawful discrimination against applicants or employees on the basis of age 40 and over, race (including traits historically associated with race, such as hair texture and length, protective hairstyles), sex, sexual orientation, gender identity, gender expression, color, religion, creed, national origin, ancestry, disability, military status, genetic information, marital status, or any other status protected by applicable state or local law.

Candidates for certain positions may be required to submit to a credit history report in determining qualification for employment with Elevations Credit Union. If the position you are applying for requires a credit history report, any information received in such a report will not be the sole factor in making an employment decision. A history of personal financial irresponsibility may be reason for disqualification insofar as it relates to your potential job duties. Elevations Credit Union is aware that occasionally there are extenuating circumstances that may affect an individual's credit history. We comply with the Fair Credit Reporting Act and the Colorado Employment Opportunity Act.

ELEVATIONS CREDIT UNION'S COMMITMENT TO PRIVACY

Your privacy is important to us. When you use this Careers site to apply for a job at Elevations Credit Union ("we" and "us"), we collect your personal information. Examples of personal information collected on the Careers site include your name, contact details, and information you provide for purposes of job applications. We do not sell your personal information to a third party. We may share your information with a third party who is performing a service for us related to job applicants. If you have any questions about this privacy statement, please contact us.

A