This is a 100% in-person position based at our Burbank, CA office. Remote or hybrid work arrangements are not available for this role. Candidates must be local or willing to commute daily. Please note that relocation assistance is not provided for this position.BASIC FUNCTIONS:The ideal candidate will perform a variety of basic and essential duties. The role may involve both general and specialized tasks, offering a dynamic work environment.
The
IT Network and End User Systems Analyst will be responsible for assisting with reviewing, maintaining, and improving the credit unions information network and security systems; troubleshooting and recommending improvements. The Analyst will also be responsible for assisting with Network and IT Security related audits and assessments, document gathering, and remediation/mitigation of identified risks. This position is a backup to other areas within the IT department.
ESSENTIAL:- Assisting with maintaining the network and security systems that support the financial institution.
- Serving as a Project Manager for risk assessments, pen tests, new security tool implementations and recommendations/findings remediation.
- Supervising external consultants or vendors performing security audits and technical assessments.
- Review security controls and provide operational insight to management of cyber threats.
- Compiling detailed management reports and presentations to translate technical risks into business-level insights for senior leadership.
- Administer and maintain cybersecurity training for all staff, educating employees on phishing, social engineering tactics, and acceptable use policies to mitigate insider threats.
- Assist with implementing and maintaining Information security program deliverables.
- Assist with directing the program components for Information security incident response plan activity.
- Perform regulatory compliance support and analysis activity in meeting National Credit Union Administration (NCUA) and Federal Financial Institutions Examination Council (FFIEC) regulatory compliance obligations.
- Actively participate in third party IT audits, IT Reviews, and IT risk assessments.
- Assist with annual updates and maintenance of the Business Continuity Plans and BIA.
- Assist with the annual Vendor reviews.
- Support Business Leaders in performing IT security risk assessments for technology and vendors.
- Assist in managing the development and maintenance of SAG-AFTRA FCU's information security program.
- Participate in ongoing assessments to periodically re-evaluate security of SAG-AFTRA FCU's systems, foreseeable risks, and mitigation strategies.
- Notify the appropriate personnel of any suspected incidents in a timely manner and assist in the investigation of incidents as necessary.
- Report directly to the CIO on status of IT related audit remediation items and matters involving IT Audits, assessments, and findings.
- Provide support for security reviews of new and existing systems.
- Collaborate with IT and Business units on annual IT risk assessments and remediation.
- Recommend specific improvements to security and internal controls and follow up on all recommendations.
- Coordinate with internal and external vendors to conduct periodic vulnerability scans and penetration tests.
- Work with IT staff to remediate any issues discovered and report progress to the CIO.
- Assist as a liaison between third party vendors and SAFCU, participating in quarterly services reviews, reviewing incident reporting
- This job description is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.
- Other duties as assigned by management.
WORK ENVIRONMENT:TRAINING AND EXPERIENCE:- Bachelor's degree required in Information Security, Computer Science, or related field.
- A minimum of 3-5 years of related experience in Information security and Network support functions.
- Information security certifications Security+ or equivalent.
- Network certifications Network+, Server+ or equivalents.
- Experience with industry affiliations such as Information Systems Audit Control Association (ISACA), Information Systems Security Association (ISSA), Financial Service-Information Sharing and Analysis Center (FS-ISAC).
- Proven experience in Project Management.
- Knowledge of managing security and technology controls.
- Skill with building and executing Information security programs.
- Experience with security incident response process and program.
- Know-how to perform risk analysis activities.
- Advanced problem-solving skills in detecting errors, system problems, and transforming functional requirements into technical solutions.
- Excellent analytical, detail, communication, presentation and interpersonal skills.
- High attention to detail.
- Ability to receive and maintain confidential information.
- Ability to work independently under minimal supervision.
PHYSICAL REQUIREMENTS:Must be able to meet the following physical requirements, with or without reasonable accommodation: 1) Sit, walk, stand, use hands to manipulate, handle, feel, and control items or equipment; 2) Reach with hands and arms; 3) Talk and hear; 4) See and be able to read, write, and interpret text, spreadsheet, and graphical documents.
PAY GRADE INFO:To provide greater transparency to candidates, we share base pay ranges for all our job postings regardless of State. We set standard pay ranges for all roles based on function and level of expertise, benchmarked against similar stage growth companies. Final offer amounts are determined by multiple factors including, skills, depth of work experience and relevant licenses/credentials, and may vary from the amounts listed below. The base range for this position is: $37.30 to $43.30 hourly.
BENEFITS:- Competitive pay
- Subsidized health care including medical, dental and vision
- FSA and HSA
- Company paid Life insurance
- Vacation and Sick time
- Holidays
- 401K Retirement Savings Plan
