Information Security Analyst (Remote)

$73,000 - $93,000/Yr

Smbc - Los Angeles, CA

Full-time

Remote - Los Angeles, CA

About the position

Information Security Analysts at SMBC MANUBANK will play a crucial role in supporting the day-to-day administration and operations of the Bank's Information Security program. Under supervision, these analysts will engage in a wide range of activities that are essential for maintaining the security and integrity of the bank's information systems. The primary focus will be on interpreting actionable signals, intelligence, alerts, requests, and directives to ensure that appropriate actions are taken across the various phases of the information security program, which include identify, protect, detect, respond, and recover. This role is vital in safeguarding the bank's assets and ensuring compliance with relevant regulations and standards. The responsibilities of the Information Security Analyst include monitoring and responding to security alerts, escalations, and open tickets as part of the program's continuous monitoring strategy. Analysts will also be responsible for user administration and account management, which involves defining, entitling, assessing, and removing access for employees based on their job functions. Additionally, they will assist in the configuration and validation of the bank's security controls, ensuring that measures such as encryption, password policies, and logging are effectively implemented and operational. Documentation is another key aspect of this role, as analysts will assist in documenting risks, controls, and technical documents to facilitate consistent management of the information security program. They will also be tasked with researching and briefing management on emerging threats, bulletins, and other threat intelligence activities as assigned. Supporting audit requests by obtaining necessary documentation and responding to inquiries is also part of the job. Furthermore, Information Security Analysts may be called upon to perform other duties as assigned, including participating in projects, incident response, and business continuity events. They may also represent the department and lead projects on behalf of the department, showcasing their leadership and collaborative skills.

Responsibilities

• Monitor and respond to security alerts, escalations, and open tickets as part of the program's continuous monitoring strategy.
• User administration and account management including defining, entitling, assessing, and removing access from employees based on job function.
• Configuration and validation that bank systems security controls such as encryption, password policies, and logging are appropriate and operating effectively.
• Assist in documenting risk, control, and technical documents to assist in consistent management of the program.
• Research and brief management on emerging threats, bulletins, and other threat intelligence activities as assigned.
• Support audit requests by obtaining documentation and responding to inquiries.
• Perform other duties as assigned, including projects, incident response, and business continuity events.
• Represent the department and/or be able to lead projects on behalf of the department.

Requirements

• Bachelor's degree or equivalent education.
• 2+ years of experience in Information Security.
• Relevant certifications including Security+, PenTest+, CySa+, CASP+, CISM, CISA, CISSP, GSEC, CEH, OSCP, CCSP, SSCP are desirable.
• Familiarity with NIST CSF, CIS Critical Security Controls, CRI PROFILE, FFIEC Handbooks & CAT, GLBA, or other information security frameworks/standards.
• Strong verbal and written communication skills.
• Highly developed sense of personal accountability and follow-through skills.
• High collaborative and strong teamwork mentality.

Benefits

• Competitive salary range between $73,000.00 and $93,000.00 based on qualifications and experience.
• Eligibility for an annual discretionary incentive award.
• Comprehensive benefits portfolio offered to employees.