Information Security Analyst I Division of Information Technology

$78,800 - $170,000/Yr

Federal Reserve Bank - Washington, DC

Full-time - Entry Level

Hybrid - Washington, DC

Monetary Authorities-Central Bank

About the position

The Information Security Analyst I position is responsible for supporting the design and implementation of security measures for the organization's IT systems. This role involves developing a foundational understanding of system architecture and security solutions, utilizing data analytics to identify security risks, and collaborating with cybersecurity professionals to enhance security across the organization. The analyst will provide technical and analytical support to ensure the protection of Board information and systems, while also participating in risk management and compliance activities.

Responsibilities

• Supports the implementation of risk management and continuous monitoring activities for technology portfolios.
• Utilizes foundational knowledge of risk management principles to evaluate and mitigate potential risks and identify emerging risks using established frameworks and guidelines.
• Participates in assessing the causes and sources of risk, the impacts, and the probability of occurrence.
• With extensive guidance, supports planning and implementation of cybersecurity initiatives, including Cybersecurity Executive Order directives such as Zero Trust Architecture.
• Coordinates with team members to create and communicate plans (action, operating, automation, strategic plans), options, and approaches to ensure continuous service and process improvement.
• Helps design and/or develop new policies and procedures to address cybersecurity and operational risk and may make recommendations to senior management on resilience, information technology, and critical infrastructure.
• Shadows more senior staff to learn to improve upon business processes by employing a systematic approach of evaluating and optimizing underlying processes.
• Utilizes foundational knowledge of and adherence to applicable governing standards to work closely with the Division of IT security teams to support compliance with the Board Information Security Program (BISP).
• Supports the facilitation of the initiation and completion of all security assessments and meeting agreed upon schedules by the supported divisions and certifying agents.
• Shadows more senior staff to provide IT and business consulting support to provide expert recommendations and function as a trusted advisor to clients and stakeholders.
• Supports teammates to work with clients and vendors to implement information system security lifecycle plans in compliance with applicable security statutes and regulations.
• With extensive guidance, works on project teams to implement and measure the effect of minimally complex security, data loss prevention, and privacy strategies.
• Utilizes foundational knowledge of system security standards, best practices, trends, preventative measures, and disaster recovery processes to verify the effectiveness of the security controls protecting systems.
• Participates in developing techniques and procedures for conducting cybersecurity risk assessments and compliance audits and evaluating and testing hardware, firmware, and software.
• Participates in designing reporting dashboards and creating data visualizations and reports for a variety of audiences.

Requirements

• Bachelor's degree in computer science, information technology, cybersecurity, or a related business technology field.
• Foundational knowledge in business process improvement, risk management, system security, system design, information security, security standards, compliance, and project management.
• Ability to work effectively with more senior staff.
• Experience supporting senior staff with designing security systems, investigating and resolving security breaches, consulting, technical writing, and communication.

Nice-to-haves

• Intermediate knowledge in business process improvement, risk management, system security, system design, information security, security standards, compliance, and project management (for higher grades).
• Experience with vendor risk management and security/procurement workflows.
• Knowledge of dashboarding and automation tools, specifically PowerPlatform.

Benefits

• Relocation assistance provided.
• Competitive salary range from $78,800 to $170,000.