IT Security Analyst I

Responsibilities

• Assist with distributing Business Impact Analysis questionnaires to business units.
• Track responses and follow up on missing submissions.
• Normalize data into BIA worksheets or SharePoint lists.
• Escalate inconsistencies or gaps for senior Information Security staff for review.
• Engage with Disaster Recovery Program activities (and preparation).
• Assist with monitoring and triaging alerts related to malware, phishing, endpoint security, firewall activity, and intrusion detection systems.
• Escalate potential security incidents to senior Information Security staff in accordance with established incident response procedures.
• Engage with investigation and documentation of basic security events with support and direction from senior Information Security staff.
• Affiliate with Security Infrastructure engagements and document discussed requirements where needed.
• Afford senior staff with vulnerability management activities, including:
• Collecting scan results
• Validating asset inventories
• Tracking remediation status
• Reviewing basic validation of remediation activities for mitigated systems.
• Support information security risk assessments by:
• Collecting evidence and documentation
• Assisting with questionnaires and control validation
• Maintaining risk tracking documentation
• Support collection of audit evidence in repositories and maintaining examiner request materials.
• Afford assistance with enhancements, enforcement, and communication of information security policies, standards, and procedures.
• Support security awareness initiatives, including phishing simulations and employee training tracking.
• Maintain accurate records related to security tools, incidents, and compliance activities.
• Work with IT teams and business units to gather information required for security reviews.
• Promptly escalate issues, risks, or control gaps to senior security staff.
• Participate in team meetings, table-top exercises, and training to build security knowledge.
• Protect all client and bank information confidentially and follow all company policies.
• Complete monthly training in a timely manner to ensure knowledge of bank regulatory requirements, policies, and procedures.

Qualifications

The ideal candidate should have:

• High school diploma or equivalent.
• One to two years of relevant work experience in a security-related field.
• Basic understanding of IT infrastructure, network security, and cybersecurity principles.
• Strong attention to detail and ability to manage multiple tasks simultaneously.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• Basic knowledge of Microsoft Office Suite.

Skills

• Security Incident Response
• Information Security Risk Assessment
• Business Continuity Planning
• Malware Analysis
• Phishing Detection
• Endpoint Security Management
• Intrusion Detection Systems
• Vulnerability Management
• Information Security Policies and Procedures
• Disaster Recovery Planning
• Employee Training and Awareness

Benefits

• Medical
• Dental
• Vision
• 401(k) plan
• Company paid life insurance
• Short and Long-term disability insurance
• Company paid vacation, paid leave and holidays