As our Senior Information Security Analyst, you will:
- Communicate and live out Community First's mission statement, core values, and core purpose
- Provide internal and external members with secure, reliable, efficient, and user-friendly systems that support short and long-term objectives for Community First
- Manage information security infrastructure to secure and protect business operations and member-facing systems
- Develop, plan, and perform configuration changes for the security infrastructure, including but not limited to network security controls, endpoint protection, IPS/IDS, and vulnerability detection/assessment
- Perform daily information security operations by monitoring and responding to security events, support requests, incident management, and project initiatives
- Collaborate with team members both internal and external to the department to provide system support and improvements that benefit staff and members directly
- Develop and document plans for securing systems that support the business objectives to either improve business functionality or provide enhancements for members
- Perform business continuity planning and systems security for business and member-facing systems as required
- Maintain or exceed regulatory compliance as assessed from risk assessments and audits; both internal and external
- Maintain knowledge of changing trends in information security threats and technology in contrast to regulations to ensure Community First remains compliant while delivering competitive products and services for business and members
An ideal candidate will have a combination of: - Bachelor's degree or a combination of education and relevant experience (Network Infrastructure or Information Security related)
- A minimum of 3 years' experience working with proven effectiveness on a Network Team, Infrastructure, or Security Team with a deep knowledge of Information Security technology and principles
- Maintain current Information Security certifications (example: Security+, CySA+, GSEC, GCIH, GCIA, CISSP)
- Knowledge and understanding of network infrastructure and associated network ports and protocol
- Knowledge and experience in network security, firewalls, enterprise operating systems, server administration and management, vulnerability testing, log file aggregation, intrusion detection, incident response, and data leakage prevention
- Ability to develop and document repeatable processes and procedures
