First Financial Bank
Job Description
Job Title
Cybersecurity Analyst
Status
Exempt Salaried
Reports To
Chief Information Security Officer
Summary
This position is responsible for assisting in the development, and dissemination of Information Security policies, monitoring compliance with and reviewing the effectiveness of Information Security policies and procedures, evaluating and assisting with changes in Bank-wide Information Security practices, providing training pertaining to Information Security.
Job Entry Requirements :
To perform this job successfully, an individual must be able to perform each essential duty successfully. The requirements listed below are representative of the knowledge, skill, and / or ability required.)
- Bachelor's Degree preferred in Information Security, Information Technology, Computer Science, Information Management Systems, or related field required. Associate degree at a minimum.
- 1 years' experience in combination or risk management, information security, or IT. Must possess some computer networking experience.
- Appropriate cybersecurity certifications are preferred. May substitute an equivalent combination of education, and experience.
- Working level knowledge of Internet Protocols, communication protocols, data, and network security.
- Knowledge of compliance and regulatory frameworks such as NIST-CSF, PCI-DSS, and SOC.
- Risk management knowledge with proven ability to effectively apply risk principles to challenging business situations.
- Excellent presentation and communication skills.
- Excellent influencing and problem resolution skills.
Primary Activities
Essential duties and responsibilities include the following. Other duties may be assigned. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.)
Run scheduled vulnerability assessment against the network.Run scheduled vulnerability assessment against the first-online.bank website.Run monthly social engineering tests on employee subgroups.Perform monthly review of user access privileges and compliance with security policies and procedures.Manage cyber threat intelligence consolidation. Create weekly threat report.Assist with applying cyber threat intelligence to relevant local systems.Daily review of network systems logs files. Create weekly report of alerts.Manage and coordinate third-party provider patch / update / upgrade schedule and compliance.Review encryption reports and assist users with file transfer options.Assist with employee and customer Cybersecurity information sharing and training.Assist with analyzing and reporting Incident Response Team activations.Assist with Security Incident and Event Monitoring (SIEM) monitoring.Assist with vulnerability detection monitoring.Assist with completing the NIST-CSF Framework certification.Create additional customer training materials for the First-Online website. Including an online self-assessment tool for customers to use for Cybersecurity compliance.Assist with tactical implementation of Information Security strategic plan initiatives.Manage and coordinate handling and reporting of suspicious inbound email messages.Configure and manage log and event management dashboards, activity, alerting, and general reporting.Areas of Responsibility :
Information Security Functions for the bank; Threat and Vulnerability Management; Incident Response; Policy Development; Risk Management; Information Security Standards & Compliance, Communication, Information Security Education & Outreach.
Performance Measurements :
Ensures the delivery of information security services is managed consistently, delivered on time with high quality.Assist in the development of strategies and manage the organizational process for continuing development of information security processes.Assist in ensuring the Bank is current with trends in information security, that product and delivery capabilities are appropriate and reflect the creative capabilities of the staff.Competency / Skill Level :
The behaviors, knowledge, and motivations that are important to success in the job.)
Oral and Written Communication SkillsDelegation of Authority and ResponsibilityAnalysis / Problem AssessmentCoaching; Information MonitoringInnovationTenacityVisionary LeadershipKey Behaviors
Provides Proper Telecommunications Etiquette to Internal / External CustomersServices Internal / External Customer Requests / InquiriesReviews Required Documentation for Accuracy and CompletenessPersonal Development as Established with ManagerBank Secrecy Act
Maintain sufficient knowledge and understanding of the Bank Secrecy Act, Anti-Money Laundering / Anti-Terrorist Financing / PATRIOT Act and OFAC regulations to fulfill applicable requirements and responsibilities under the Bank's related policies and programs.Critical Job Elements
Essential duties and responsibilities include the following. Other duties may be assigned. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.)
A good working environment with little exposure to noise, extreme temperatures, or other adverse factors.Limited physical effort required.Regular talking and hearing, frequent sitting.Reading and analyzing large volumes of reports, log data and other literature.Responding to emergencies and incidents at all hours.Above average amount of pressure to work efficiently and accurately.Considerable effort and eye strain from continued checking on the accuracy of all work.Average amount of pressure to work efficiently and accurately. Average mental effort consists of beyond normal levels of concentration, memory, complexity of decision making, time pressure, analytical thinking.Ability to travel for required meetings.