IS Security Analyst II

at  Lake Trust Credit Union

JOB SUMMARY

The Information Security Analyst will work within Information Services department, championing and performing security related activities, including assisting in the development and maintenance of the security practices and procedures for protecting the environment. The Information Security Analyst II will participate in expanding the security landscape maturity, evolving the existing controls to the ever-changing threads, ultimately ensuring the security and integrity of the environment and the information. Information Security Analyst II is expected to stay up to date on the latest intelligence, including hackers’ methodologies, cyber threats and countermeasures in order to anticipate security breaches. Additional duties may include; Contribute to responses to audit findings relating to Information Services security. Performing security and network assessments and testing of data processing systems. Participate in the development of security dashboards, providing KPIs, trends, and risks to our security posture for Management. Review the daily logs, reports, and alerts from security related systems (A/V reports, SIEM, DLP, i.e.). Bring attention to ‘zero-day’ exploits, determine impact, bring awareness and recommendations forward. Participation in Vulnerability Management and Patch Management processes. Developing in collaboration system hardening controls and methodologies. Developing in collaboration Access Control frameworks for authentication and authorization, leveraging ‘least privileged’ principles. Consultant on firewall rules, data encryption technologies, and other security measures. Participate in recommending security enhancements and purchases.

• Ensure the integrity and availability of computer and data communication systems through effective management of computer resources specific to the security infrastructure.
• Coordinate and execute the IT security policy, standards, and procedures of the organization.
• Provide analysis and coordinate the appropriate response to information security incidents, events, and findings.
• Record and maintain accurate incident and change records and logs.
• Train and mentor IT staff on security policies and procedures.
• Provide immediate response to network security notifications.
• Ensure the computing systems exceed security and service level targets through the use of reliable products, services, network and system monitoring, penetration and security testing, and sound practices.