Information Security Engineer

Information Security Engineer

If you like to work with people in a family atmosphere, enjoy great benefits and provide unequaled personal service to every customer, consider a career with Bell Bank.

Company Information:

Bell Bank was founded in 1966 and headquartered in Fargo, North Dakota. It is the largest family-and employee-owned bank in the upper Midwest, and one of the largest in the nation, with assets of more than $10 billion. Bell Bank has full-service banking locations in North Dakota, Minnesota and Arizona. Bell has empowered more than $27 million in charitable giving through its unique Pay It Forward initiative, through which every employee chooses each year how to help individuals, families and organizations in need.

Bell Bank has been recognized as a top workplace by American Banker, Forbes and Fortune .

If you want to work for an established, growing, forward-looking organization with world-class employees, this is the place for you. Let Bell Bank be your destination workplace.

Bell's Values:

As stewards, dedicated to the growth and reputation of this independently owned organization, we are committed to:

• Promoting and sustaining our family atmosphere.
• Providing unequaled personal service to each and every customer.
• "Paying it forward" by giving back to the communities we serve.

Our Bottom Line:

Happy Employees! Happy Customers!

Job Summary:

This position assists with maintaining Bell's enterprise information security program to ensure information is protected. This includes monitoring Bell's environment for security issues to protect the organization from threats while enforcing organization-wide best practices in a manner that meets compliance and regulatory requirements. This position leads security related projects involving members of IT and other internal business units and external customers/partners. This position will support and may lead facets of Bell's incident response, business continuity, and security operations efforts as required.

Primary Duties:

• Strategy and Planning:
• Develop, implement, maintain, and oversee enforcement of policies, procedures and associated plans based on regulatory requirements and industry-standard best practices.
• Provide strategic and tactical security guidance for projects, including the evaluation and recommendation of security controls.
• Perform security assessments of new technologies, business acquisitions, or third party vendors and advise on recommended remediation strategy and plans.
• Assess need for any security reconfigurations (minor or significant).
• Keep current with emerging security alerts and issues.
• Conduct research on emerging products, services, protocols, and standards in support of security enhancement and development efforts.
• Acquisition and Deployment:
• Interact and negotiate with vendors, outsourcers, and contractors to obtain protection services and products.
• Assist business units with maintaining their business continuity requirements and assist with the update and testing of Bell's overall business continuity plan.
• Work with Bell's new and existing vendors to complete risk-based vendor assessments as part of Bell's vendor management efforts.
• Recommend and advise on countermeasures and scheduling of security improvements, upgrades, and/or purchases.
• Operational Management:
• Monitor, advise, and recommend security baseline standards for security systems and their corresponding or associated software, including firewalls, intrusion detection systems, encryption, and anti-virus software.
• Monitor and ensure connection security for local area networks, the company web site, the company intranet, and email communications.
• Monitor and ensure the security of databases and data transferred both internally and externally.
• Design, perform, and/or oversee vulnerability and penetration testing of all systems in order to identify system vulnerabilities.
• Design and implement monitoring and reporting activities on security system and end user activity audits.
• Monitor cloud systems, server logs, firewall logs, intrusion detection logs, and network traffic for unusual or suspicious activity. Interpret activity and make recommendations for resolution.
• Perform incident response activities and forensics in response to security incidents.
• Evaluate new security software and/or technologies.
• Provide on-call security support to end-users and managers as related to assigned responsibilities.
• Manage and/or provide guidance to other employees.
• Work flexible hours to ensure the security of computer hardware and software within the Bell Bank infrastructure, to include after hours and weekends, as needed.
• Demonstrate both knowledge and application of Bell Bank policies, procedures, and guidelines.
• Demonstrate good planning skills by ensuring the appropriate scheduling of resources including staffing, equipment, and supplies.
• Demonstrate the ability to take charge, take unpopular stands, if necessary, and face difficult situations.
• Facilitate and support change within the Bell Bank system.
• Demonstrate commitment to continuous learning.
• Demonstrate and apply continuous quality improvement knowledge and skills.
• Travel overnight occasionally for training or for site visits.
• Know by name and face as many customers and employees as possible, calling them by name as often as possible.
• Know and practice LOCBUTN, our Golden Rules, and Bell Bank Customer Service Standards.
• Know, understand, and live the company values and bottom line.
• Conduct activities consistent with established Bell Bank policies, procedures and systems, the Bell Bank Employee Conduct policies, the Bank Secrecy Act and all applicable State and Federal laws and regulations.
• All employees are responsible for information security including compliance with policies and standards which protect sensitive information.
• Perform other duties as assigned.

Job Skills Required:

• Associate's or B.A. degree and proven senior level engineer experience within IT or a security related field.
• Consideration given to those with certifications in the following areas:
• CompTIA Security+
• SANS GIAC Certifications
• MCSE or MCITP
• SSCP or CISSP
• CISM, CGEIT, CISA, or CRISC
• Broad knowledge of firewalls, intrusion detection systems, anti-virus software, data encryption, and other industry-standard techniques and practices.
• Strong knowledge of TCP/IP and network administration/protocols.
• Experience with devices such as hubs, switches, and routers.
• Knowledge of applicable practices and laws relating to data privacy and protection.
• Strong knowledge of Information security audit and risk assessments.
• Experience or knowledge of business continuity planning, and project management.
• Intuition and keen instincts to pre-empt attacks.
• High level of analytical and problem-solving abilities.
• Ability to conduct research into security issues and products as required.
• Strong understanding of the organization's goals and objectives.
• Strong written and verbal communication skills.
• Highly self-motivated and directed.
• Strong organizational skills.
• Excellent attention to detail.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
• Able to work in a team-oriented, collaborative environment.

Bell Bank provides competitive compensation and an excellent benefits package.

Bell Bank

Equal Opportunity Employer