PURPOSE:
Participates in the identification, implementation, maintenance, and support of technologies designed to protect the confidentiality, integrity or availability of bank information systems. Works with technical and non-technical staff to insure that deployed technologies are effectively and efficiently providing the intended controls consistent with established policies and procedures. Identifies gaps in protection, and recommends solutions to remediate or mitigate the risks associated with the protection gaps.

ESSENTIAL DUTIES AND RESPONSIBILITIES:
•    Assist the bank in adopting the NIST Privacy and Cyber Security Framework.
•    Manage and monitor the bank’s FFIEC Cyber Assessment Tool, recommend enhancement to the program on an annual basis.
•    Focus efforts on confidentiality, integrity and availably of all bank information
•    Enhance the bank’s Vulnerability Management Program.
•    Understand the bank's technology systems, security controls, business processes, and the teams who directly support them.
•    Responsible for reviewing the vulnerability scans, remediation tracking and trend reporting.
•    Planning and testing information technology business resumptions plans as needed.
•    Security log analysis and issue tracking.
•    Alarm and incident response monitoring.
•    Perform Info Security risk assessments and SOC reviews for all Technology Vendors – ensure the bank has developed and documented compensating controls.
•    Respond to auditor an examiner requests for information security documentation.
•    Develop and enhance employee information security and cyber security training plans. Create a cross functional/cross business line Info Security awareness and engagement team.
•    Serve as a subject-matter expert on information security and compliance-related matters for clients and employees of the bank.
•    Performs other similar duties requiring the same skill, effort and responsibility and under the same working conditions.

QUALIFICATIONS:
•    Associates degree in information systems or equivalent combination of computer courses and business experience.
•    An information security certification is a plus
•    Experience with vulnerability scanning tools and penetration testing.
•    Knowledge of encryption technologies for data at rest and data in transit.
•    Familiarity with risk assessment and risk management concepts or processes.
•    Knowledge of authentication including MFA and SSO.
•    Experience with Anti-virus/malware solutions and endpoint security.
•    Minimum of 2-4 years’ experience in information security.
•    Banking or Finance experience a plus.
•    Excellent reporting and communication skills with an attention to detail.
•    Strong analytical and problem solving skills.

EFFORT:
•    Able to meet strict deadlines.
•    Work includes changing priorities for multiple, simultaneous projects
•    Position frequently moves from sitting to standing to walking.
•    Will be sitting while performing computer data entry functions approximately 6 hours per day.
•    Position does involve limited climbing / crawling/ squatting / kneeling/ to place or move objects under desks or in closets.
•    Needs to be able to move about inside the office space to access file cabinets, office equipment, etc. May work in closets / confined storage areas.
•    Essential to follow written and verbal directions. This role routinely uses standard office equipment such as computers, photocopiers, and scanners.
•    Use of hands and fingers to handle/ operate a computer and other office machinery such as a calculator, copy machine, scanner, computer printer,
•    Requires occasional lifting/ carrying equipment/ boxes of up to 50 pounds within work area.
•    Frequently communicates verbally using telephone to exchange information.
•    Specific vision abilities required by this job include: close vision, distance visions, ability to adjust focus.
•    Mental and visual acuity is a must to concentrate for long periods of time

WORK ENVIRONMENT:
•    Standard 40 – 45 hour work week expected, though position may sometimes require early arrival, late departure, and/or Saturday / Sunday hours.
•    Cubical setting office
•    May work in confined areas used for storage and maintenance of computers, servers and other related equipment.