Information Security Analyst II - Broomfield, CO

As The Artisans of Banking, we strive to be B.R.A.V.E. (Build Relationships & Add Value Everyday). We recognize that in order to meet the needs of our communities, we must represent our communities. Our success relies on creating a culture where we have diverse perspectives and a true sense of belonging. This is a journey, and we pledge to do more than simply check the box.

When you join our Premier Members team, your benefits will include:

• Comprehensive medical insurance plan that has HRA, HSA, and FSA options
• Dental and vision insurance
• Generous paid-time-off
• 11 paid holidays
• Annual bonus (based off of annual results/scorecard each year)
• 401(k) plan with a 5% match
• Wellness program
• Tuition assistance
• 1% employee loan discount
• Employee Assistance Program (EAP)
• Life and disability coverage

What sets working for Premier Members apart?

• Career development and pathing opportunities to move into leadership roles or other lines of business within PMCU such as Commercial Lending, Finance, Marketing, Underwriting, Member Solutions, Training, Human Resources, and more.
• Supportive and engaging work environment.
• A wellness and sustainable work culture that puts family, Mother Nature, our community, and your health first.
• A work environment that encourages personal as much as professional growth, teamwork to make the dream work, and treating everyone equally.
• Studies have shown that individuals from marginalized and or historically underrepresented groups may be less likely to apply for jobs unless they meet every one of the qualifications listed. We are most interested in finding the best candidate for the job. We would encourage you to apply for a job at Premier Members Credit Union, even if you don’t meet every one of our qualifications listed.

PMCU at this time does not offer VISA Sponsorship, Curricular Practical Training (CPT), or Optional Practical Training (OPT) of any kind.

This is a full-time position working 40 hours a week, hours Monday-Friday 8:00am – 5:00pm.

POSITION SUMMARY:
Responsible for designing information security programs, monitoring and responding to security events and incidents. Assist reviews of security hardening in system hardware and software. Review and assess security configurations for network, server, security appliance and service architecture. Perform day-to-day tasks including but not limited to SIEM tickets, vulnerability scanning, Anti-Virus, URL Filtering and cyber hygiene.

ESSENTIAL FUNCTIONS:Information Security Daily Operations:

• Investigate and analyze security events with our MDR and SIEM for unusual or suspicious activity, interpret, and make recommendations for resolution of security incidents.
• Perform on-demand vulnerability scanning with internal teams to remediate vulnerability findings and deliver through a VMS cycle. Assist configuring and fine-tuning vulnerability detection.
• Generate performance and status metrics.
• Security effectiveness testing: work with internal teams to implement new standards across the organization as required. Measure, track and report the security risk, vulnerability, and remediation status.
• Investigate and analyze email related security issues, including spam, phishing, malicious attachment, impersonation, etc. and prepare summary of investigation report.
• Respond to end point security alerts in a timely manner.
• Participate in periodic firewall reviews.

Work closely with internal teams and service providers to ensure new applications, systems, and functionalities meet the organization’s security requirements. Participate in the development, implementation, and maintenance of the Information Security Awareness program and influence.

Maintain documentation and create or update technology operational procedures for information security related programs and incident runbooks.

Monitor and research cyber threats and Trends.

Occasionally respond to alerts or planned maintenance outside regularly scheduled hours. Perform other duties as assigned.

REQUIRED EXPERIENCE:

• 3 years of applicable information security work experience to include any or all of the following:

General hands-onknowledge of firewalls, intrusiondetectionsystems, endpoint protection(EDR/XDRSolution), anti-virus software, data encryption, DLP, NAC, SIEM, Email Security and other industry-standard techniques and practices

• 3 years of experience and proficiency with Incident Response and Handling, malware analysis and proper handling (Sandbox, Quarantine, Remediation, etc.)
• Experiencewith Windows Active Directory, Windows Server and Linux OS hardening.
• 2 years of experience of vulnerability scanning, penetration testing, network security, and the techniques used to expose and correct security flaws.
• 2 years of experience with regulatory compliance (i.e., PCI, GLBA, SOX)
• Knowledge of the information security principles, best practices, and methods of administering information systems, including systems analysis, design, construction, monitoring, maintenance, testing, documentation, training, and production support
• Knowledge of Office365 system and security administration

EDUCATION/CERTIFICATION:

• Bachelor’s degree an IT related discipline or the equivalent combination of education and experience.
• Preferred industry certifications include: Security , SANS certifications, CISSP, ISACA, CISA, and or PCI-DSS.

INTERPERSONAL SKILLS:

• Humility, empathy (Heart), hunger to learn, honesty, integrity, and confidentiality are always required.
• Strong verbal, writing, and listening skills; ability to communicate effectively to all levels of the organization Strong customer service skills with a willingness to assist others.
• Willingness to learn and embrace new technologies and security practices.
• Ability to provide guidance, mentoring, and instruction to others.
• Strong speaking, writing, and listening skills.
• Ability to work and travel independently.
• Experience working in an office environment and navigating collaboration tools such as Microsoft Teams, and Outlook scheduling assistant.

OTHER SKILLS/ABILITIES:

• Ability to manage multiple work-streams, including emergency support tasks, and communicate roadblocks or concerns for maintaining progress on scheduled projects and tasks.
• Ability to work well in a dynamic and changing environment and adapt quickly to new conditions and priorities.
• Ability to recognize and define problems, research, and establish facts, communicate, and resolve issues and problems promptly.
• ProficiencywithMicrosoftOfficeSuite: Word, PowerPoint, Outlook, Excel, Visio.
• Superior critical thinking, troubleshooting, time / project management and problem-solving skills.
• A willingness and capability to work remotely or from an office as necessary.
• Adherence to relevant Financial Industry, Credit Union, and Cybersecurity/Data Privacy regulations, policies, and procedures to protect our members’ data and our organizational reputation.

WORKING CONDITIONS

• Standard office conditions.
• Low to moderate noise.
• Limited lifting up to 50 lbs.

This description has been reviewed to ensure that only essential functions and basic duties have been included. Peripheral tasks, only incidentally related to each position, have been excluded. Essential functions, requirements, skills, and abilities included have been determined to be the minimal standards required to successfully perform the positions. In no instance, however, should the duties, responsibilities, and requirements delineated be interpreted as all-inclusive. Additional functions and requirements may be assigned by supervisors as deemed appropriate.

In accordance with the Americans with Disabilities Act, it is possible that requirements may be modified to reasonably accommodate disabled individuals. However, no accommodations will be made which may pose serious health or safety risks to the employee or others or which impose undue hardships on the organization.
The Credit Union believes that each employee makes a significant contribution to our success. That contribution should not be limited by the assigned responsibilities. Therefore, this job description is designed to outline primary duties, qualifications, and job scope, but not limit the incumbent. It is our expectation that each employee will offer his/her services wherever and whenever necessary to ensure the success of our endeavors.
Job descriptions are not intended as and do not create employment contracts. The organization maintains its status as an at-will employer. Employees can be terminated for any reason not prohibited by law.

This Job Description is not a complete statement of all duties and responsibilities of this position and may change with or without notice.

Final Compensation for this position will be determined by various factors such as relevant work experience, specific skills and competencies, education, certifications, and internal pay equity.

We anticipate this position to close within 30 days of posting. Please submit your application at your earliest convenience to be considered.

You may not check every box, or your experience may look a little different from what we've outlined, but if you think you can bring value to Premier Members Credit Union, we encourage you to apply!

Thank you for your interest in Premier Members Credit Union.