Information Security Analyst

$62,005 - $87,506/Yr

Cathay Bank - Rancho Cucamonga, CA

Full-time - Entry Level

Rancho Cucamonga, CA

Credit Intermediation and Related Activities

About the position

The Information Security Analyst at Cathay Bank is responsible for managing and maintaining the Bank's security operations and preventive controls in alignment with established Information Security policies, standards, and industry best practices. This role focuses on vendor security risk assessments, evaluating application security risks, and ensuring compliance with regulatory requirements.

Responsibilities

• Perform vendor security risk assessments to determine inherent risk on proposed projects.
• Assess vendor security controls to determine residual risk.
• Evaluate potential exposure to application security risks and recommend appropriate mitigation strategies.
• Periodically assess the information security controls design and execution applied by vendors for completeness and efficacy.
• Identify control gaps for remediation.
• Assess vendor security practices including Information Security governance, Identity and access control, Incident monitoring and response, Vulnerability assessment and Penetration tests, Network Security and Endpoint Security.
• Act as a liaison with Third Party Risk Management, Information Technology, and business department Relationship Managers related to vendor risk assessments.
• Report information security risks and follow-up on remediations.
• Remediate audit and regulatory findings and recommendations related to Information Security and Vendor Risk Management.

Requirements

• College degree in Information Technology or Information Security or equivalent.
• Minimum of 2 years experience in Information Security Risk, Information Security Operations or Security Auditing.
• Proven experience on third-party risk management and vendor security assessments.
• Working knowledge of security practices such as Endpoint Security, Network Security, Security Operations and Security Governance required.

Nice-to-haves

• Security+, SSCP, CISSP, CISM or similar information security certifications preferred.
• Experience working with Vendor Risk Management (VRM) applications preferred.

Benefits

• Medical insurance coverage
• Dental insurance coverage
• Vision insurance coverage
• Life insurance coverage
• Long-term disability insurance
• Flexible spending accounts (FSAs)
• Health saving account (HSA) with company contributions
• Voluntary coverages
• 401(k) plan