Information Security Analyst

Abbott Laboratories - Gurnee, IL

Full-time

Gurnee, IL

Miscellaneous Manufacturing

About the position

The Information Security Analyst plays a crucial role in safeguarding the credit union's technology assets and member financial data from various threats. This position involves establishing and maintaining security processes and controls to protect sensitive information, ensuring the effectiveness of security systems, and responding to security incidents.

Responsibilities

• Assist the Data Security Administrator in researching, recommending, evaluating, and implementing Information Security solutions.
• Oversee the credit union's access controls and information sharing methods in collaboration with the Data Security Administrator.
• Deliver insights and direction regarding the credit union's antivirus and malware defenses.
• Recommend strategies for vulnerability assessment and internal penetration testing to the Data Security Administrator.
• Provide security training directly to staff in conjunction with the Data Security Administrator.
• Conduct simulated phishing campaigns and area audits with the Data Security Administrator.
• Support the credit union's Information Security and GLBA external audits.
• Respond swiftly to and remediate security events.
• Monitor the credit union's security alerts with the Data Security Administrator.
• Document and maintain data security policies and procedures.
• Implement and maintain Malware Prevention, Data Loss Prevention, and Intrusion Detection and Prevention systems with the Data Security Administrator.
• Monitor and analyze unusual or suspicious activity and recommend resolutions.
• Prepare and analyze security incident and event log reporting.
• Assist the Information Technology area to support staff technology needs as required.
• Participate in Information Security projects, initiatives, or workgroups as assigned.

Requirements

• High School Diploma or equivalent (GED) required.
• Bachelor's degree in Information Security, Information Systems, Computer Science, Risk Management, or related field preferred.
• Two (2) years of experience in an Information Security, Information Technology, or Risk Management position required.
• CEH, CISSP, or CISM Certification may be substituted for experience.
• Three (3) years of experience in Information Security preferred.
• Ability to perform job functions independently and as part of a team.
• Effective verbal communication skills with internal and/or external members.
• Proficiency in using computers and job-specific technology/software efficiently.
• Ability to maintain confidentiality and perform responsibilities with composure, quality, and accuracy under stress.