Information Security Analyst
Apply NowCompany: Farmers and Merchants Bank of Long Beach
Location: Seal Beach, CA 90740
Description:
Job Summary
The Information Security Analyst configures, administers, and monitors information security controls at F&M Bank. The Information Security Analyst assists the CISO with risk assessment activities, selecting and implementing security controls, and documenting the results of their activities while executing the Information Security Program. The Information Security Analyst assists with incident response and may require after-hours support if there are production issues with security controls.
Essential Duties
The Security Analyst is responsible for the design, daily administration and operation, and monitoring of security controls, including maintaining reliability, performance, and availability of the systems.
The Security Analyst contributes to IT and Information Security risk assessment documentation using an understanding of Information Technology and Information Security risks and controls.
The Security Analyst will participate in research and development of security technologies that will assess/monitor/reduce vulnerabilities for the enterprise.
The Security Analyst must document their activities in activity logs, periodic reports, problem management systems, change management systems, project tracking systems, and other similar systems.
The Security Analyst must document system design and configuration information.
Documentation must be factually accurate and conform to business writing standards with minimal spelling, grammatical, or syntactical errors.
The Security Analyst must be able to follow Change Management procedures and minimize disruption to production systems by exercising good judgment and due care.
Essential Duty - On Call Support
When scheduled for on-call duty, responsible for all end-user support after hours, and ensuring that response times and service levels are within the guidelines established by management. Bank Security personnel must ensure that cell phones are on and available in the event of end-user support call or outage alert via text message. Bank Security personnel may be expected to be available to respond to critical situations, even if not scheduled for on-call duty.
Complies with all State and Federal Banking regulatory requirements, including but not limited to: BSA, Anti-Money Laundering OFAC, CIP, Financial Elder Abuse Reporting, Sexual Harassment, Information Security and privacy requirements. This position will elevate suspicious activity to supervisory staff and/or BSA department. Completes compliance and other technical training workshops as assigned.
Non-Essential Duties
Automating security activities and data analysis via system automation scripting and data management (Ruby, Python, PERL, PowerShell)
Security related MS SQL database administration
Required Knowledge
Understanding of information security concepts and domains
Experience administering server or network systems
Understanding and/or experience with the following security technologies, firewalls, web application firewalls, IDS/IPS, e-mail encryption gateways, vulnerability scanning tools, forensics tools
Exposure to log/packet capturing & decoding of various attack signatures, such as recognizing SQL injections, cross-site scripting attacks, etc.
Experience working with vendors to implement security-related projects
Strong understanding of Microsoft Active Directory access rights, user access provisioning, SQL access and Operating System security
Basic Knowledge, Skills and Abilities
Effective verbal and written communications, including documenting activities, writing reports, and presentation skills for findings and recommendations
Clear understanding of the English language (spoken and written)
Customer service skills
Time management skills
Project planning and execution skills
Detail-oriented
Critical thinking, judgment and problem solving skills
Ability to actively listen and learn.
Ability to work both independently and with others at all levels.
Ability to respectfully communicate with Supervisors and Co-workers
Ability to effectively deal with unpleasant, angry or discourteous people
Officer Title Eligibility
For qualified positions, the Bank may designate Officer Titles to employees who meet defined competencies for an eligible position. This position is not eligible for an Officer Title.
Equipment Operated
Desk top Computers
Standard Office Equipment (copiers, fax machines)
Information Security software and hardware
Physical Requirements & Work Environment
Requires sitting for prolong periods of time
Requires lifting up to 25 lbs.
Office setting w/controlled temperature
Requires repetitive movement.
Education and Experience
Minimum of three years of applicable security and system administration experience
Bachelors in computer science or equivalent required.
Certifications such as GIAC, ISC2, CompTIA preferred
As a part of the Bank's internal control systems, employees holding sensitive positions are required to be absent from their duties for a minimum of two consecutive weeks each year. This position has been deemed to meet the test for a sensitive position, and therefore you will be required to meet the minimum absence requirement each and every year.
This job description is not intended to be all-inclusive, and employees will be required to perform additional related work duties as assigned by their immediate supervisor and/or management.
Farmers and Merchants Bank of Long Beach reserves the right to revise or change job duties and responsibilities as the need arises. This job description does not constitute a written or implied contract of employment.
The Information Security Analyst configures, administers, and monitors information security controls at F&M Bank. The Information Security Analyst assists the CISO with risk assessment activities, selecting and implementing security controls, and documenting the results of their activities while executing the Information Security Program. The Information Security Analyst assists with incident response and may require after-hours support if there are production issues with security controls.
Essential Duties
The Security Analyst is responsible for the design, daily administration and operation, and monitoring of security controls, including maintaining reliability, performance, and availability of the systems.
The Security Analyst contributes to IT and Information Security risk assessment documentation using an understanding of Information Technology and Information Security risks and controls.
The Security Analyst will participate in research and development of security technologies that will assess/monitor/reduce vulnerabilities for the enterprise.
The Security Analyst must document their activities in activity logs, periodic reports, problem management systems, change management systems, project tracking systems, and other similar systems.
The Security Analyst must document system design and configuration information.
Documentation must be factually accurate and conform to business writing standards with minimal spelling, grammatical, or syntactical errors.
The Security Analyst must be able to follow Change Management procedures and minimize disruption to production systems by exercising good judgment and due care.
Essential Duty - On Call Support
When scheduled for on-call duty, responsible for all end-user support after hours, and ensuring that response times and service levels are within the guidelines established by management. Bank Security personnel must ensure that cell phones are on and available in the event of end-user support call or outage alert via text message. Bank Security personnel may be expected to be available to respond to critical situations, even if not scheduled for on-call duty.
Complies with all State and Federal Banking regulatory requirements, including but not limited to: BSA, Anti-Money Laundering OFAC, CIP, Financial Elder Abuse Reporting, Sexual Harassment, Information Security and privacy requirements. This position will elevate suspicious activity to supervisory staff and/or BSA department. Completes compliance and other technical training workshops as assigned.
Non-Essential Duties
Automating security activities and data analysis via system automation scripting and data management (Ruby, Python, PERL, PowerShell)
Security related MS SQL database administration
Required Knowledge
Understanding of information security concepts and domains
Experience administering server or network systems
Understanding and/or experience with the following security technologies, firewalls, web application firewalls, IDS/IPS, e-mail encryption gateways, vulnerability scanning tools, forensics tools
Exposure to log/packet capturing & decoding of various attack signatures, such as recognizing SQL injections, cross-site scripting attacks, etc.
Experience working with vendors to implement security-related projects
Strong understanding of Microsoft Active Directory access rights, user access provisioning, SQL access and Operating System security
Basic Knowledge, Skills and Abilities
Effective verbal and written communications, including documenting activities, writing reports, and presentation skills for findings and recommendations
Clear understanding of the English language (spoken and written)
Customer service skills
Time management skills
Project planning and execution skills
Detail-oriented
Critical thinking, judgment and problem solving skills
Ability to actively listen and learn.
Ability to work both independently and with others at all levels.
Ability to respectfully communicate with Supervisors and Co-workers
Ability to effectively deal with unpleasant, angry or discourteous people
Officer Title Eligibility
For qualified positions, the Bank may designate Officer Titles to employees who meet defined competencies for an eligible position. This position is not eligible for an Officer Title.
Equipment Operated
Desk top Computers
Standard Office Equipment (copiers, fax machines)
Information Security software and hardware
Physical Requirements & Work Environment
Requires sitting for prolong periods of time
Requires lifting up to 25 lbs.
Office setting w/controlled temperature
Requires repetitive movement.
Education and Experience
Minimum of three years of applicable security and system administration experience
Bachelors in computer science or equivalent required.
Certifications such as GIAC, ISC2, CompTIA preferred
As a part of the Bank's internal control systems, employees holding sensitive positions are required to be absent from their duties for a minimum of two consecutive weeks each year. This position has been deemed to meet the test for a sensitive position, and therefore you will be required to meet the minimum absence requirement each and every year.
This job description is not intended to be all-inclusive, and employees will be required to perform additional related work duties as assigned by their immediate supervisor and/or management.
Farmers and Merchants Bank of Long Beach reserves the right to revise or change job duties and responsibilities as the need arises. This job description does not constitute a written or implied contract of employment.