Information Technology Security Specialist

HYBRID POSITION!

Position Title: Information Technology Security Specialist

Department:  IT Security

Supervisor's Title: VP of Information Technology and Security 

Classification:  Exempt                                                 

Full Salary Range:  $66,875.77 - $100,313.66

Starting Salary Range: $66,875.77 - $83,594.72

Benefit Highlights:

- Competitive compensation!

- Medical, Dental, and Vision Insurance!

- 401K with up to 4% company match!

- Holiday Pay starting at day 1!       

- Paid Vacation Time! 

- Medical Benefits starting at your 31st day of employment! 

- Pension Plan! 

And many more!    

Summary:

Under general supervision and within prescribed policies and procedures this position is responsible for the daily functions and processes related to cybersecurity systems. Enforce cybersecurity policy to improve security posture of the credit union for overall organization. Serve as the Information Technology Security Specialist interfacing with vendors, consultants, and internal staff to assure smooth and efficient operations of the credit union’s cybersecurity compliance.  

Essential Functions:

1. Create, maintain documentation, and provide education and training on cybersecurity policies and procedures to credit union staff.
2. Work with vendors to develop and maintain Cybersecurity Awareness program including annual training, as well as remedial training for frequently phished staff.
3. Develop and maintain an ongoing risk assessment program targeting cybersecurity matters.
4. Create monthly and annual reports on cybersecurity for the Board of Directors. 
5. Monitor daily reports such as security logs, IDS/IPS reports, and other reports by document draft required remediation.
6. Responsible for maintaining current anti-virus/Malware software across the organization.
7. Conduct internal security audits, assessments, reviews and tests to ensure compliance with security policies and report on the results.
8. Maintain and oversee company-wide MFA solution (DUO). 
9. Run tests and assessments to identify potential security vulnerabilities within company systems.
10. In conjunction with the Network and Infrastructure areas, this position is responsible for vulnerability and patch-management.
11. Responsible for web monitoring, log aggregation, cybersecurity, and other duties as part of maintaining a comprehensive cybersecurity and privacy program. 
12. Create written response documentation after each assessment or audit and provide it to the board or supervisory committee. 
13. Oversee email DLP solution (Zix) and make necessary changes to ensure data integrity.
14. Implement security measures to ensure that the credit union complies with statutory and regulatory requirements regarding information access, security, and privacy.
15. Take the necessary and appropriate action to circumvent any privacy or cybersecurity threats or breaches.
16. Respond to any breaches or malicious malware attacks to clean up any damage done and mitigate future lingering risks.
17. Inform senior management of critical security issues and recommend risk-reduction solutions.
18. In conjunction with the SVP of IT & CS, VP of IT and Security, and the IT Managers, document security-related procedures, processes, and functions.
19. Act as project-lead for all cybersecurity initiatives and coordinates with other areas as needed.
20. Evaluates and recommends frameworks for the credit union’s overall Cybersecurity program.
21. Develop and maintain incident response plans to effectively address security breaches or cyber-attacks. 
22. Lead investigations into security incidents, analyze root causes, and implement corrective actions to prevent future occurrences. 
23. Coordinate the updates and maintenance of each departmental Disaster Recovery and Business Continuity Plans within the credit union.
24. Facilitate annual Tabletop Disaster Recovery exercise.
25. Facilitate annual Incident Response tabletop recovery exercise.
26. Assist in complying with all compliance regulations, NCUA regulations, and Department of Banking related to the Information Technology area.
27. Assist in providing budget considerations and recommendations with respect to upgrades and new security service applications.
28. Complete and document Help Desk tickets.
29. Provide 24x7 on-call support as needed.
30. Develop a working knowledge of the various software programs and platforms currently in use within Belco to better understand any cybersecurity implications.
31. Stay updated on industry trends, emerging threats, and regulatory changes to adapt security measures accordingly.
32. Seize any opportunity to cross sell credit union products and services to members and to educate members about Belco, its products and services.
33. Abide by Belco’s policies, procedures, and standards.
34. Embody and promote Belco’s Vision, Mission, and The Belco Life Brand.
35. Perform any other duties as requested by the VP of Information Technology and Security.   

Competencies:

• Functional Skills: Technical IT Skills, Education and Self Development, Project Planning
• Operating Skills: Communication, Productivity/Output, Time Management
• Relationship Skills: Relationship Building/Networking, Teamwork
• Behavioral Expectations

Work Environment:

This job operates in a professional hybrid work arrangement consisting of required in-office time and work from remote location.  This role is required to have 20% of in office work.   This role routinely uses standard office equipment such as computers, phones, and printers.  

Physical Demands:

Sitting, standing, bending, and hand dexterity required.  Ambulation – able to move from one area to another throughout one-floor office layout. Ability to manipulate materials and/or equipment (lbs.)

• Lift - 60
• Push/Pull - 100
• Hold/Carry - 60

Manipulation done from ground to waist and waist level, stairs and elevator provided for movement from one floor to another and to enter and exit building.

Travel:  

This position requires periodic travel to all branch locations in our seven-county area. Must possess a valid Pennsylvania Driver’s License and maintain a “clean” driving record. Driving personal vehicle to various work locations throughout the area to install equipment as needed.

Minimum Education and Experience:

A Bachelor’s Degree and a minimum of two years of similar or related experience, including time spent in preparatory positions. Additional educational requirements may be required and will be handled as part of the annual performance evaluation process.  

Certifications:

A , MCSE,  Microsoft Certified: Security, Compliance, and Identity Fundamentals, Azure Fundamentals, or CCNA a plus.

Preferred: Security , CySA, CISA, CASP , PenTest , Network  

Preferred Education and Experience:

A Bachelor’s Degree in Information Technology, Cybersecurity or other related field, with more than two years of experience working in an information technology security field in a credit union or financial institution.

Disclaimer:

Please note this position description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job.  Duties, responsibilities and activities may change at any time with or without notice.  

We are an Equal Employment Opportunity employer.  Qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender identity, sexual preference/orientation, age, disability, marital status, pregnancy, veteran status or other legally protected bases.  Belco’s Diversity and Inclusion initiatives provide all employees with equal access to training and advancement opportunities throughout the organization.

Belco will provide reasonable accommodation to applicants and employees with disabilities where appropriate throughout the application and employment process. Determinations on requests for reasonable accommodation related to any job function will be made on a case-by-case basis. A reasonable accommodation is any change to a job, the work environment, or the way things are usually done that enables an individual with a disability to apply for a job, perform job duties or receive equal access to job benefits.