Information Security Analyst

Company: Adirondack Bank
Location: Utica
Posted on: February 22, 2021

Job Description:

providing oversight and direction for developing and supporting the Information Security initiatives. The Information Security Analyst (ISA) assists in the planning and implementation of the company IT system, business operation, and facility defenses against security breaches and vulnerability issues. This individual is also responsible for assisting in directing the administration of security policies, activities, and standards. The ISA will collaborate with peers from the Information Technology Department and the business unit managers to understand their privacy and security needs and will also implement procedures and solutions to accommodate those requirements consistent with statutory guidelines and regulations. The ISA should be responsible and accountable for assisting in the administration of the Information Security Program. At a minimum, the ISA will assist the ISO in managing or overseeing the risk assessment process, creation of policies, standards, procedures, testing, and security reporting processes. The ISA should report directly to the ISO and have sufficient independence to perform their assigned tasks. In the absence of the ISO, the ISA should report directly to the Risk Manager. The ISA should not be a production resource assigned to the Information Technology Department. In the absence of, or with permission of the ISO, the ISA should have the authority to respond to a security event by ordering emergency actions to protect the financial institution and its customers from an imminent loss of information or value. They should have sufficient knowledge, background, and training, as well as an organizational position, to enable them to perform their assigned tasks. They must also possess knowledge of all applicable consumer compliance regulations. ESSENTIAL DUTIES:
Performs any functions, within scope of authority and expertise, to provide the highest level of service and responsiveness to customers and co-workers. 1. Assist with developing and implementing global security policies, standards and procedures.2. Maintain up to date knowledge of applicable compliance requirements and needs, to identify shortcomings and ensure constant compliance with applicable regulations and rules.3. Assist in performing information technology risk assessments. 4. Assist with all required actions involving audits and issuing reports of findings including recommendations for corrective actions.5. Research, develop, implement, test and review an institution's information security in order to protect information and prevent unauthorized access. 6. Assist in maintaining and improving the vendor management program.7. Create and maintain the monthly information security newsletter for employees. 8. Assist in completing scheduled reports and reviews to include board and committee based reports. 9. Participate in compliance committee meetings, Audit Committee meetings, ERM Committee meetings and IT Steering Committee meetings when possible and appropriate. Assist in the execution of information security/social engineering training and testing for employees and other parties as required.10. Assist with the Banks BSA, physical security, fraud programs and ensure all facilities and equipment meet all applicable laws and regulations.11. Maintain up-to-date knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks or threats. This should include continuation of education and certifications to maintain compliance with regulatory requirements and guidelines. 12. Required to attend or participate in necessary compliance training, training, including but not limited to BSA, Security, Information Technology, OFAC, Privacy and applicable BVS courses.13. Assist with any other duties as assigned. POSITION REQUIREMENTS: These specifications are general guidelines based on the minimum experience normally considered essential to the satisfactory performance of this position. The requirements listed below are representative of the knowledge, skill and/or ability required to perform the position in a satisfactory manner. Individual abilities may result in some deviation from these guidelines. 1. Bachelor's degree (BA/BS) in Computer Science or Cybersecurity from a technical or trade school; or 2 years related experience and/or training; or equivalent combination of education and experience. Work related experience should consist of a technical background in information resources, products or services. Educational experience, through in-house training sessions, formal school or technical industry related curriculum, should be business/financial industry and/or security related. 2. Basic knowledge of Bank operations, services and related state and federal laws and regulations.3. Exceptional organization skills with the ability to handle complex multifaceted issues and respond quickly and effectively to threatening situations. 4. Demonstrated skills in computer/network operations especially concerning data security including encryption, hacking, virus control, profiles, server policies, security methods and operations.5. Exceptional oral, written and interpersonal communication skills with the ability to apply common sense to carry out instructions, interpret documents, understand procedures, write reports and correspondence, and speak clearly to customers and employees. 6. Demonstrate strong analytical and project management skills for a variety of tasks or projects. The incumbent must be able to perform this position safely, without endangering the health or safety to himself or herself or others.

Keywords: Adirondack Bank, Utica , Information Security Analyst, Professions , Utica, New York