Information Security Analyst

Bangor Savings Bank • Bangor, ME

387d

About The Position

The position is responsible for the daily supervision and execution of the Bank's Information Security Program. The InfoSec team plays a crucial role in supporting Risk Management's mission to protect the confidentiality, integrity, and availability of Bank assets and information. This is achieved through identifying assets and associated threats, and minimizing risks via preventive, detective, and corrective controls.

Requirements

• College Degree or equivalent in education and work experience required.
• InfoSec, I.T, and/or Risk Management experience, preferably in the Banking industry.
• Strong analytical skills and ability to handle complex problems required.
• Strong written and verbal communication skills required.
• Knowledge in GLBA, PCI, FACTA regulations preferred.
• Strong understanding of security tools (DLP, Stateful Firewalls, IDS/IPS, EDR) required.
• Strong understanding of networking protocols preferred.
• Strong understanding of Windows and Linux operating systems and their management solutions preferred.
• Knowledge in the AS/400 operating system preferred.

Responsibilities

• Monitors Bank security systems for alerts and conducts appropriate investigations to their conclusion.
• Monitors Bank systems (Operations, IT, etc) for anomalies and conducts appropriate investigations to their conclusion.
• Develops standards, procedures, and documentation for information security policies, systems, and practices.
• Assists in overseeing the Bank's Vulnerability Management Program.
• Assists in overseeing the Bank's Data Loss Prevention Program.
• Assists in overseeing the Bank's Phishing Prevention Program.
• Assists in the facilitation of system risk assessments.
• Provides guidance to Bank departments on maintaining compliance with information security policies.
• Identifies direct non-compliance or general weaknesses in the Bank's information security posture and provides recommendations on improvements.
• Participates in the Bank's Incident Response and Forensics Program.
• Stays current on Cyber and Information security trends and news.
• Makes an effort to continue their education in the Cyber and Information security field.
• Intentionally socializes with Bank personnel to ensure the Information Security department is a welcoming presence within the Bank.

Benefits

• Internal and external training opportunities including internships, lateral training, management training, and tuition reimbursement.
• Holistic health and wellness programs allowing customization of well-being approaches.
• Pay, rewards, recognition, and incentive programs to ensure employees are well-compensated.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Industry: Credit Intermediation and Related Activities
• Education Level: Bachelor's degree