Cybersecurity Analyst

Full-time

Description

SUMMARY:

Reporting to the Cybersecurity Manager, the Cybersecurity Analyst I executes the cybersecurity operational processes including the ongoing monitoring and tracking of the organization’s cybersecurity hygiene. They are responsible for the day-to-day monitoring of various alerts and system reports. This role is critical in maintaining security of the organization’s control environment as it relates to confidentiality, integrity and availability of data and systems.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Coordinating various security assessments, including but not limited to, the FedLine Solutions Security and Resiliency Assurance Program review and the Ransomware Self-Assessment Tool, recommending best practices, corrective actions for identified issues, and updating documentation.
• Assisting in the facilitation of the annual information technology risk assessment process, working with the Technology Owners and Business System Analysts, and reviewing results for consistency across the organization.
• Assisting in the maintenance of the governance, risk, and compliance (GRC) tool inventories (technologies, processes, people, third-parties, etc.) to ensure completeness and accuracy.
• Assisting in the maintenance of the organization’s inventory of systems along with the users and administrators of those systems to support user access reviews and the termination process.
• Assisting in the facilitation of the user access review process providing a consistent mechanism for all user access reviews to be conducted at the organization. Tracking results to ensure timely submission.
• Reviewing the reasonableness and accuracy of user security authorization forms to ensure requests adhere to the least privileged principles and are filled out appropriately.
• Monitoring and analysis of event logging and SIEM alerting, in conjunction with other CyberOps team members. Escalating issues when warranted to pertinent parties for response.
• Gathering and reporting metrics for oversight and monitoring.
• Reviewing activity reports from the network, various CyberOps technologies, and business applications to identify unauthorized changes and anomalous behavior.
• Monitoring threat intelligence sources and informing the appropriate individuals that need to take action. Tracking and reporting these actions as a part of the vulnerability management process.
• Identifying areas of improvement in security technical controls, including those supported by and implemented with CyberOps technology platforms.
• Advocating for security best practices across the organization.
• Monitoring corrective action plans identified for remediation with the IT function and follow up on plans that are not performed in the timeframes specified.
• Adhere to the Company’s privacy and data security policies including but not limited to safeguarding of sensitive information and complying with relevant regulations to protect non-public information.

SECONDARY/ RESPONSIBILITIES

• Reviewing alerts from the secure email system and managing the admin quarantine, in conjunction with other CyberOps team members. Escalating issues when warranted to pertinent parties for response. Providing backup to the Cybersecurity Engineer for policy maintenance.
• Reviewing alerts from the cloud access security broker, in conjunction with other CyberOps team members. Escalating issues when warranted to pertinent parties for response. Providing backup to the Cybersecurity Engineer for policy maintenance.
• Reviewing alerts from the anti-virus system, in conjunction with other CyberOps team members. Escalating issues when warranted to pertinent parties for response. Providing backup to the Cybersecurity Engineer for policy maintenance.
• Providing backup to InfoSec in responding to user reported phishing submissions that come in by providing feedback to employees on if it was a true phish, spam, or other.
• Assisting with the investigation of cybersecurity security incidents and participating on the Incident Response Team.
• Participating in technology projects to provide insight on security best practices and hardening.
• Understanding the risk acceptance processes, including identifying risk, compensating controls, and developing transition plans.

SUPERVISORY RESPONSIBILITIES:

None

Consider this description to be the foundation of your job, not its boundaries. Expect to participate in internal and external training sessions and activities not described here which enhance the quality of service to the client.

Requirements

QUALIFICATIONS

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

EDUCATION and/or EXPERIENCE

• Bachelor's degree (B. A.) from four-year college or university; or a minimum of 2 years of related experience and/or training, specifically in cybersecurity or information security; or equivalent combination of education and experience.
• At least one relevant security certification (such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) and/or Certified Risk and Information Systems Controls (CRISC)) highly desirable or a desire to work towards a certification.
• Basic understanding of security best practice frameworks such as NIST Cybersecurity Framework and 800-53, PCI-DSS, SOC, or ISO 27001.

SKILLS

• Basic knowledge of the banking and financial services industry including federal laws and regulations
• Mastered skills in information technology operations, voice, and data communications, troubleshooting techniques, and user and software support; including but not limited to desktop applications, and network programs and resources. Willingness to gain new knowledge and technical skills.
• Intermediate typing skills to meet the production needs of the position.
• Intermediate math skills: the ability to calculate interest, commissions, proportions, and percentages; balance accounts; add, subtract, multiply, and divide into all units of measure, using whole numbers, common fractions, and decimals; locate routine mathematical errors; compute rate, ratio, and percent, including the drafting and interpretation of bar graphs.
• Exceptional verbal, written, and interpersonal communication skills with the ability to apply common sense to carry out instructions and instruct others, train personnel, read, analyze, and interpret documents and professional journals, understand procedures, write reports, correspondence, and procedures, speak clearly to customers and employees.

PHYSICAL DEMANDS

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to sit; use hands to finger, handle or feel, reach with hands and arms; and talk or hear. The employee is occasionally required to stand and walk. The employee must regularly lift and/or move up to 10 pounds. Specific vision abilities required by this job include close vision, peripheral vision, and ability to adjust focus.

WORK ENVIRONMENT

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

The noise level in the work environment is usually moderate.

KEY POINTS

For those seeking to deliver the latest financial solutions rooted in trustworthy, high-quality service, Charlesbridge, a mutual bank holding company, provides the operational support, resources, legacy, and innovative thinking to financial institutions so they can deliver a suite of flexible, personalized solutions designed to meet the evolving needs of our clients and our communities. Our local roots, dedication to the communities we serve, loyalty to our people, and commitment to excellence ensure that we remain a trusted partner in an ever-evolving financial journey, today and tomorrow. While our employees are committed to helping our clients, we are committed to our employees. To support our employees, we offer a competitive benefit package with Medical, Dental, Vision, Flexible Spending, Tuition Reimbursement, Childcare Subsidy, Retirement, Life Insurance, and many other benefits.

Charlesbridge is committed to providing equal opportunity for all employees and applicants without regard to race, color, religion, gender, sexual orientation, age, marital status, national origin, physical or mental disability, veteran or disability status, gender identity, or expression, citizenship, genetic information, ancestral origin, military status, pregnancy, childbirth, and or conditions relating to pregnancy or any other related medical conditions or any other status protected by Federal, State or local laws.

Here at Charlesbridge, we strive to foster a culture where every voice is valued and where employees have a sense of belonging and connection with each other. We are dedicated to creating a work environment that understands, supports, and welcomes diverse perspectives and backgrounds. Together, we will create an inclusive and culturally competent and supportive environment where employees model behavior that enriches both Banks and the communities we support.

EOE/F/M/Vet/Disabled

Salary Description

$30.00 - $37.58 Hourly