IT Security Analyst

Capitol Federal Savings Bank - Topeka, KS

Full-time - Mid Level

Topeka, KS

Credit Intermediation and Related Activities

About the position

The IT Security Analyst supports and coordinates information security activities throughout the organization. This role acts as a focal point for communications related to information security, both with internal staff and third parties. The analyst works with internal department heads to manifest controls that reflect workable compromises, as well as proactive responses to current and future information security risks. Additionally, this position provides support for threat management, analyzing security events, and defining action items for reducing risk in the IT environment. The analyst is responsible for configuring, administering, and managing a variety of security applications, managing access control and identity processes to ensure appropriate permissions and access levels are granted. The role requires making independent decisions on matters of moderate complexity, utilizing knowledge of security best practices and good judgment, while gathering input from peers and management on complex situations. The analyst must use appropriate discretion in handling confidential information, such as employee terminations.

Responsibilities

• Work with business process owners to define and maintain application security, consulting on and administering appropriate security settings for users, following a least-privilege framework.
• Assist with the development, implementation, and maintenance of information security policies, standards, and guidelines.
• Manage security-related applications by maintaining, deploying, upgrading, troubleshooting, and monitoring them, performing tasks following established policies and procedures with a strong attention to detail.
• Participate in proactive team efforts to achieve departmental and company goals.
• Comply with current applicable laws, regulations, and bank policies and procedures, and report all unsafe activities to supervisor and/or Human Resources.

Requirements

• Five to eight years of similar or related experience, including preparatory experience.
• A working knowledge of Microsoft Word, Excel, Outlook, Active Directory, Firewalls, Intrusion Detection, Whitelisting, Endpoint Protection, Multi-Factor Authentication, and security best practices.

Nice-to-haves

• GIAC Security Essentials Certification (GSEC)
• CompTIA Security+
• Certified Information Systems Security Professional (CISSP)