What are the responsibilities and job description for the Information Security Analyst II position at KTVAECU?
Our Mission is to help Members grow financially.
Our Vision is to be Members' First Choice for all Financial Services.
We can achieve these goals through our commitment to providing excellent service to our membership and our communities. And it all starts with YOU! We are looking for a service-minded individual to join our team in order to continue to provide the high-quality service our members expect from us.
Our full-time team members enjoy a wealth of benefits including employer-paid medical and dental insurance premiums, competitive pay, and a 401(k) plan with an employer match. The great service we provide to our Members is reflected in our team environment and the professional development opportunities our positions offer. People Helping People is what we do every day.
Submit your application to us today and let us be the First Choice for your new career journey!
About Us:
Knoxville TVA Employees Credit Union is a not-for-profit, Member-owned, and locally operated financial institution serving the financial needs of its communities of Membership. We have 25 locations throughout East Tennessee and we serve more than 264,000 Members. The Credit Union helps Members grow financially by offering a variety of accounts including: checking, savings and investments. Also offered are competitive loan rates on new and used autos and recreational vehicles, mortgages, personal loans and credit cards.
Benefits:
- Employer-paid health and dental insurance monthly premiums
- Accrual of PTO Leave
- Employer-matched 401k, 50% match up to 6% of employee contributions
- Employer-paid Group Life Insurance and Long-Term Disability benefits
- Potential bonus up to 11% of average salary over the past year based on Credit Union-wide goals
- Paid Holidays and Paid Training
- Potential pay increases through additional training opportunities
- The ability to help serve your local community through our mindset of People Helping People!
This position is on-site in Knoxville, TN.
PRIMARY RESPONSIBILITIES
Administrative:
Report known and potential information security risks and vulnerabilities to Credit Union management. Track the status of known information security vulnerabilities and work with IT and business departments to promote remediation or acceptance of known exposures.
Maintain an inventory of VPN, mobile devices, and file sharing site users and ensure only active, authorized individuals have external access to Credit Union data.
Develop and conduct user awareness training for new employees during new employee orientation. Develop and conduct periodic user security awareness campaigns and training.
Prepare, document, and maintain standard operating procedures and technical references for security solutions/tools.
Make information security a cultural focus of the organization by utilizing various methods such as awareness campaigns and branch visits.
Technical:
Manage and maintain all IT security related applications, hardware, and tools. Ensure all aspects of these products are working as intended and are updated against the latest threats.
Perform routine monitoring and analysis of system logs, user activity reports, and other security related alerts and reports in order to identify suspicious, unauthorized, or malicious activity.
Participate in the evaluation of new products and services and ensure the Credit Union understands and properly weighs the potential security risks inherent within these products.
Review the configuration of workstations, servers, and network devices, including firewalls and other external facing devices, on a periodic basis. Provide guidance and recommendations around any potential security risks or violations of Credit Union security best practices.
Ensure patch management is completed in an accurate and timely manner.
Responsible for malware analysis, threat modeling and deployment/usage of a malware detonation device/sandbox to test for potential malicious software or websites.
Information Security:
Maintain knowledge of relevant laws and standards including Gramm-Leach-Bliley Act, National Credit Union Administration (NCUA), Federal Financial Institutions Examination Council (FFIEC) and National Institute of Standards and Technology (NIST) requirements and standards.
Determine security violations and inefficiencies by conducting periodic audits and vulnerability assessments. Determine the potential impacts and mitigations and relay to appropriate staff for remediation.
Assist in collecting documentation from IT and business departments in preparation for NCUA and external audit annual exams and participate in audit interviews and responses.
Responsible for incident response, mitigation, and reporting.
Maintain up-to-date knowledge and skills in the Information Security field through yearly training and skills maintenance.
Standards:
Follow all Credit Union policies, procedures and regulations.
Represent the Credit Union in a professional manner (including but not limited to appearance, behavior and performance).
Maintain regular and predictable attendance.
Work cooperatively with others.
All other duties as assigned.
QUALIFICATIONS
Education/Experience – Bachelor’s degree from four-year college or university or related experience or equivalent combination of education and experience. Five or more years of experience in Information Technology preferred. IT security certifications are preferred.
Qualifications and Requirements – Individual must possess the knowledge skills and ability required to execute the essential functions in a satisfactory manner.
Language – Ability to read, analyze and interpret general business periodicals, professional journals, or governmental regulations. Ability to write reports and procedure manuals and use proper grammar, punctuation and spelling. Ability to effectively present information and respond to questions from groups.
Mathematical – Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions and decimals. Ability to compute rate, ratio and percent.
Reasoning – Ability to solve practical problems and deal with a variety of concrete variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written or oral form.
Computer – Knowledge of IT networks. Ability to operate related computer applications including Word, Excel and email. Proficient typing skills. Ability to operate other business equipment including adding machine, coin, and money counting machines and telephone.
Certificates and Licenses – At least two professional certifications in IT Security preferred. Valid driver’s license.
