Location:

Elevations Credit Union- Broomfield Basecamp

Hybrid: Employees who are able to perform the essential functions of their jobs away from an Elevations location may do so with the expectation that they are onsite at least fifty percent of the time over a two-week pay period.
Summary/Objective:

Information Security Analyst: Responsible for coordinating and completing projects under the Information Security Program, this role assesses current security situations, evaluates trends, and recommends security improvements to protect data and ensure regulatory compliance while maintaining technical knowledge through continuous learning.
Essential Functions include:

• Assists with maintaining Logical Security Access to various applications and systems including documentation, updates and routine reviews.
• Conducts security awareness training campaigns and phishing simulations to raise awareness and promote a security-conscious culture within the organization.
• Identifies, assesses, and manages vulnerabilities throughout the organization's technology portfolio. This includes scanning, validation, and confirming that remediation was complete. Additionally, collaborates with various teams to prioritize & remediate based on risk levels and expected SLA's.
• Monitors the organization's networks, systems, and applications for security incidents, unusual activity, or potential threats. This included analyzing and responding to events, and identifying patterns or anomalies,
• Manages identified risks from security assessments, audits and penetration tests. Provides recommended remedial actions and works with various departments to ensure that risks and vulnerabilities are handled in a timely manner.
• Manages and maintains incident response procedures and investigates and responds to security events. This includes documenting findings, recommending actions, contributing to post incident analysis, and participating in lessons learned.
• Supports preparation and delivery of security reports, KPI, and KRI metrics to management and key stakeholders.
• Contributes to the development and maintenance of security policies, standards, and guidelines.
• Stays Informed: Keeps up-to-date on news, events, and emerging vulnerabilities that could be potential threats to the organization.

Reports to:

Manager, Information Security
Manages:

This role does not have supervisory responsibility.
Required Skills, Education and Experience:

• 2+ years of experience in information security or technology legal/compliance
• Experience monitoring and responding to security incidents, conducting vulnerability assessments and risk analysis, and managing security controls and access management
• The ability to write effectively, to explain information security in non-technical terms
• Possess the ability to effectively develop issue papers, memorandums, letters, work plans, and other types of written communication

Preferred Skills, Education and Experience:

• Degree in Computer Engineering, Technology, Information Systems, or related field of study.
• Risk management experience
• Experience working in the financial services industry, such as a credit union or bank.

Work Environment:

Elevations uses multi-factor authentication to keep our data safe. As such, a personal smartphone is a requirement for employment with us. This job operates in an office setting and routinely uses standard office equipment.
Physical Requirements:

Sitting frequently, walking occasionally, use of hands frequently, hearing constantly, talking frequently, exerting up to 10 lbs of force occasionally to lift, carry, push, pull, or move objects
Position Type/Expected Hours of Work:

• Full-time / 40 hours per week

Compensation Information:

The person hired into this position will likely earn between $71,973 and $89,966 annual salary, plus annual bonus.

Actual compensation offered may vary from the posted hiring range based on factors such as relevant experience, time in role, base salary of internal peers, prior performance, business sector, licensure requirements and/or skill level, and will be finalized at the time of offer.

Anticipated Application Window:

This role is anticipated to close within 25 days from the date of posting. However, if the position has not been filled, Elevations may keep the application period open longer.
Other Duties:

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.