IS Security Analyst- Level I or II - Lake Trust Credit Union
Brighton, MI
About the Job
IS Security Analyst- Level I or II
More Than A Job!
Why do you work each day? To us, our jobs are not just something we do to make a living, it's a way to live. We work to support our members; whether celebrating moments of joy, finding a solution to an obstacle, or offering encouragement through a time of struggle. The worth of our work isn't measured in dollars and cents, it's seen in our communities and felt by the people who believe in us.
Benefits Include:
• Financial wellbeing services
• 401(K) matching with up to 5% match
• Reduced health insurance
• Employee wellbeing services
• DE&I initiatives
• Work-life integration
Job Summary
The Information Security Analyst will work within Information Services department, championing and performing security related activities, including assisting in the development and maintenance of the security practices and procedures for protecting the environment. The Information Security Analyst II will participate in expanding the security landscape maturity, evolving the existing controls to the ever-changing threads, ultimately ensuring the security and integrity of the environment and the information. Information Security Analyst II is expected to stay up to date on the latest intelligence, including hackers' methodologies, cyber threats and countermeasures in order to anticipate security breaches. Additional duties may include; Contribute to responses to audit findings relating to Information Services security. Performing security and network assessments and testing of data processing systems. Participate in the development of security dashboards, providing KPIs, trends, and risks to our security posture for Management. Review the daily logs, reports, and alerts from security related systems (A/V reports, SIEM, DLP, i.e.). Bring attention to 'zero-day' exploits, determine impact, bring awareness and recommendations forward. Participation in Vulnerability Management and Patch Management processes. Developing in collaboration system hardening controls and methodologies. Developing in collaboration Access Control frameworks for authentication and authorization, leveraging 'least privileged' principles. Consultant on firewall rules, data encryption technologies, and other security measures. Participate in recommending security enhancements and purchases.
What You'll Do
• Ensure the integrity and availability of computer and data communication systems through effective management of computer resources specific to the security infrastructure.
• Coordinate and execute the IT security policy, standards, and procedures of the organization.
• Provide analysis and coordinate the appropriate response to information security incidents, events, and findings.
• Record and maintain accurate incident and change records and logs.
• Train and mentor IT staff on security policies and procedures.
• Provide immediate response to network security notifications.
• Ensure the computing systems exceed security and service level targets through the use of reliable products, services, network and system monitoring, penetration and security testing, and sound practices.
What You'll Bring
• BA or BS degree in Computer Science, Management Information Systems or equivalent demonstrated experience.
• Six (6) years job related experience preferred.
• At least three (3) years' experience working in an enterprise environment comprised of multiple data centers.
• Experience should include security policy development, security education, network penetration testing, application vulnerability assessments, risk analysis and compliance testing.
• C.ISM, TIA Security+, CCNP Security, or other security certifications desired.
• Knowledge of information security standards and frameworks (e.g., ISO 17799/27002, FFIEC, etc.), rules and regulations related to information security and data confidentiality (e.g., GLBA, HIPAA, etc.) and desktop, server, application, database, network security principles for risk identification and analysis.
• An ability to work independently with little supervision as well as part of project teams and stakeholders.
• Strong analytical and problem solving skills.
• Excellent communication (oral, written, presentation), interpersonal and consultativ
More Than A Job!
Why do you work each day? To us, our jobs are not just something we do to make a living, it's a way to live. We work to support our members; whether celebrating moments of joy, finding a solution to an obstacle, or offering encouragement through a time of struggle. The worth of our work isn't measured in dollars and cents, it's seen in our communities and felt by the people who believe in us.
Benefits Include:
• Financial wellbeing services
• 401(K) matching with up to 5% match
• Reduced health insurance
• Employee wellbeing services
• DE&I initiatives
• Work-life integration
Job Summary
The Information Security Analyst will work within Information Services department, championing and performing security related activities, including assisting in the development and maintenance of the security practices and procedures for protecting the environment. The Information Security Analyst II will participate in expanding the security landscape maturity, evolving the existing controls to the ever-changing threads, ultimately ensuring the security and integrity of the environment and the information. Information Security Analyst II is expected to stay up to date on the latest intelligence, including hackers' methodologies, cyber threats and countermeasures in order to anticipate security breaches. Additional duties may include; Contribute to responses to audit findings relating to Information Services security. Performing security and network assessments and testing of data processing systems. Participate in the development of security dashboards, providing KPIs, trends, and risks to our security posture for Management. Review the daily logs, reports, and alerts from security related systems (A/V reports, SIEM, DLP, i.e.). Bring attention to 'zero-day' exploits, determine impact, bring awareness and recommendations forward. Participation in Vulnerability Management and Patch Management processes. Developing in collaboration system hardening controls and methodologies. Developing in collaboration Access Control frameworks for authentication and authorization, leveraging 'least privileged' principles. Consultant on firewall rules, data encryption technologies, and other security measures. Participate in recommending security enhancements and purchases.
What You'll Do
• Ensure the integrity and availability of computer and data communication systems through effective management of computer resources specific to the security infrastructure.
• Coordinate and execute the IT security policy, standards, and procedures of the organization.
• Provide analysis and coordinate the appropriate response to information security incidents, events, and findings.
• Record and maintain accurate incident and change records and logs.
• Train and mentor IT staff on security policies and procedures.
• Provide immediate response to network security notifications.
• Ensure the computing systems exceed security and service level targets through the use of reliable products, services, network and system monitoring, penetration and security testing, and sound practices.
What You'll Bring
• BA or BS degree in Computer Science, Management Information Systems or equivalent demonstrated experience.
• Six (6) years job related experience preferred.
• At least three (3) years' experience working in an enterprise environment comprised of multiple data centers.
• Experience should include security policy development, security education, network penetration testing, application vulnerability assessments, risk analysis and compliance testing.
• C.ISM, TIA Security+, CCNP Security, or other security certifications desired.
• Knowledge of information security standards and frameworks (e.g., ISO 17799/27002, FFIEC, etc.), rules and regulations related to information security and data confidentiality (e.g., GLBA, HIPAA, etc.) and desktop, server, application, database, network security principles for risk identification and analysis.
• An ability to work independently with little supervision as well as part of project teams and stakeholders.
• Strong analytical and problem solving skills.
• Excellent communication (oral, written, presentation), interpersonal and consultativ
Source : Lake Trust Credit Union