Info Security Specialist

$72,000 - $134,600/Yr

Federal Reserve Bank Of Atlanta - Kansas City, MO

Part-time,Full-time - Mid Level

Onsite - Kansas City, MO

Monetary Authorities-Central Bank

About the position

The Information Security Specialist at the Federal Reserve Bank of Kansas City is responsible for providing security risk monitoring, analysis, and assurance activities. This role involves aligning organizational practices with security industry best practices and facilitating an understanding of the Federal Reserve System's information security policies. The specialist will engage in both project work and operational services, offering consulting and subject matter expertise to internal IT and business customers.

Responsibilities

• Develops and maintains the information security posture to protect the Bank's information assets.
• Analyzes, documents, and communicates risks using the SAFR risk management process.
• Plans, develops, and delivers initiatives that promote sound cyber security practices, including training.
• Analyzes assessment results and compliance activities, reporting findings and providing remediation recommendations.
• Determines asset risk levels and coordinates the development of security plans and packages.
• Reports on compliance and policy exceptions, maintaining non-compliance risk acceptance reviews.
• Provides input to the NIST Risk Management Framework process activities and related documentation.
• Participates in supplier assessments by evaluating responses against required controls to identify gaps.
• Assists with information risk management services, including risk assessments for IT automation products and projects.
• Enforces information security policies and procedures by creating security reports and investigating exceptions.
• Defines and maintains information security non-compliance review and approval processes.
• Assists in department self-audit, internal audit, and external audit reviews.
• Provides guidance and training to less experienced staff.
• Assists with security communications, education, and outreach programs.

Requirements

• Typically requires at least 3 years of relevant IT experience.
• High school education or GED; Associate's degree in an IT field preferred.
• Industry recognized security certifications such as CISSP, CISM, CISA, AWS Security preferred.
• Experience leading or assisting with cyber security risk assessments or initiatives.
• Experience with risk-based control assessment methodologies.
• Experience developing assessment reports that communicate results and risks effectively.
• Familiarity with FISMA, FedRAMP, and NIST 800 publications.
• Demonstrated ability to lead multiple projects simultaneously in a dynamic environment.
• Excellent interpersonal, communication, organizational, and analytical skills.

Nice-to-haves

• Expertise in NIST 800-53, Artificial Intelligence, or FAIR risk assessment methodologies.

Benefits

• Competitive salary range of $72,000 to $134,600 based on qualifications and location.