Cyber and Information Security Operations Analyst

at  Prospera Credit Union

TEAM LOCAL IS HIRING

Built on nearly 80 years of service in local communities, Prospera Credit Union is a community-based, purpose-driven organization that offers a full range of financial products and services. Prospera is one of the largest credit unions in British Columbia, with approximately $9.3 billion in assets and 120,000 members. With 24 branches, Prospera is proud to serve communities throughout the Lower Mainland, Fraser Valley and Okanagan. It’s our vision to help build vibrant, healthy communities, thriving local enterprises and financially empowered people.
The Cyber and Information Security Operations Analyst will be responsible for monitoring and analyzing Prospera’s network and data infrastructure from a cyber and information security perspective. This will include the development of security playbooks for incident detection and response, analyzing current and emerging threats, addressing vulnerability management, testing, and refining security monitoring tools (i.e., tuning), collaboration with IT Support, Infrastructure, Enterprise Applications, and key suppliers to reduce Prospera’s overall cyber risk.
Please Note: This role will be required to support a 24/7 operation. The successful candidate will need to answer and respond to inquiries on rotational basis.

• Maintain the detection and response to potential security events through the 24/7 Security Operations Centre (SOC), including internal and third-party staff.
• Execute the daily operations of the cybersecurity team, ensuring timely detection, response, and resolution of security incidents
• Monitor security events and alerts, conducting investigations and analysis to identify and mitigate potential threats.
• Utilize cybersecurity tools and technologies, such as SIEM (Security Information and Event Management), IDS/IPS (Intrusion Detection/Prevention Systems), and endpoint security solutions.
• Maintain, and enhance the incident response plan, playbooks for common incident types, incident response retainers, and response testing.
• Oversee a comprehensive Vulnerability Management program following the relevant NIST Framework objectives and controls.
• Assist in coordinating third party penetration / network / application assessments
• Collaborate with GRC specialists as the technical specialist. Bi-weekly and monthly meetings with several governance committees are required, with advance preparation, active participation and listening during the meeting, and follow-up actions from the sessions.
• Provide support during security incidents, contributing to investigations, forensics analysis, and remediation efforts