OVERVIEW:

Helps manage the Information/Cyber Security Program. Assists in developing and maintaining the cyber security policies, standards, procedures, and incident response. Installation and maintenance of systems and software to help protect the bank’s infrastructure from Cyber Attacks. Monitoring of bank-wide systems for potential security breaches and/or policy violations. Responds to security incidents.

PRIMARY ACCOUNTABILITIES / RESPONSIBILITIES:

• Manages and monitors reports for patch management, security events, and log monitoring.
• Perform/Coordinate security testing and analyzing results to identify vulnerabilities and violations of information security. Determines strategies and takes measures to mitigate risk.
• Develops and reviews new security baselines and recommends creation of security baselines for new technologies.
• Perform/Coordinate with 3rd party vendors for ongoing bank-wide Social Engineering testing, analyze the results, work with Learning and Development to coordinate communication and employee training efforts.
• Responds to cyber security incidents and works with management to coordinate incident response efforts. Leads the troubleshooting, remediation, and restores flow for critical IT services related to security.
• Documents information / cyber security incidents or breaches analyzes the potential root cause and assesses the impact to the institution.
• Assists the Information Technology Officer during internal, external and all State and Federal audits and examinations.
• Works with Learning and Development to create and communicate security awareness material and training documentation. Support employee training on the Bank’s Security Awareness and Information - Cyber Security Program.
• Works with Management to update the banks Incident Response Plan.
• Participates in ongoing DR and Business Continuity planning and annual testing.
• Stay current on IT security trends, news, latest attack vectors and develop solutions to protect the institution against them.
• Develop and carry out regular risk assessments to ensure that security best practices are being

POSITION REQUIREMENTS:

• Bachelor’s degree in Computer Science, Computer Information Systems, or equivalent work experience in networking and computer technology. Formal technical training or relevant certifications are also welcome.
• CISSP, CISA, Security+, similar or equivalent experience and the motivation to obtain certification.
• Strong analytical and organizational skills.
• Strong critical thinking skills, the ability to make decisions and effectively prioritize and execute tasks in a high-pressure environment.
• Ability to work within a team environment and excels at interfacing effectively with all customers both internal and external.
• Ability to resolve complicated issues through in-depth investigation and research.
• Ability to meet strict deadlines, exercise authority to make decisions and work independently.
• Excellent oral and written communication skills, including the ability to effectively interact with all internal bank organizational levels, external bank consultants, examiners/regulators, vendors and suppliers.