Information Security Specialist

Position Title: Information Security Specialist (ISS)

Reports To: Director of Strategy and Product

Status: Full-time Exempt

Location: Laurel, Montana

Position Summary

Must be authorized to work permanently in the US. The Information Security Specialist acts as the primary contact for technical support at Summit National Bank. Will implement, maintain, and update the Bank’s Information Security and Vendor Management Programs. The ISS will oversee the testing and monitoring of information security controls for compliance with Bank policies and regulatory requirements to ensure that Bank and customer information is properly secured.

Key Responsibilities:

Maintain the Information Security Program and related policies and update based on regulatory guidance and Audit/Steering Committee feedback.

Complete the annual Information Security Program Risk assessment and Annual Report of the ISS to the Board of Directors, documenting risks, results of audits, assessments, and breaches.

Monitor and enhance the Information/Cybersecurity Awareness Programs for employees and customers.

Coordinate and chair the monthly IT Department meetings and the semi-annual IT Steering Committee meetings.

Develop and participate in risk assessments that are performed for cybersecurity, critical technologies, applications, and devices that are implemented or revised.

Coordinate the Bank’s responses to potential data breaches according to the Bank’s Incident Response Plan.

Coordinate the annual review of employee access rights to Bank systems to verify alignment with the job responsibilities, granting access as deemed appropriate.

Monitor the configuration of all Bank applications to ensure they meet the standards set forth in the Information Security Program.

Review system logs and reports on the Bank’s infrastructure to identify trends and investigate abnormalities and exceptions to the Bank’s Information Security Program.

Review systems vulnerability and penetration testing and IT audits conducted and ensures findings are sufficiently addressed.

Implement the Bank’s Vendor Management Program including the coordination of Annual Vendor Risk assessments and compliance with GLBA. Additional duties include:

1. Conducting due diligence of third parties and report results to the IT Steering Committee.

2. Ensure that third parties comply with the Bank’s policies and reporting requirements.

3. Perform continual monitoring of third parties to ensure compliance with contract terms and service level agreements ensuring issues are identified and addressed. Significant issues will be escalated to the IT Steering Committee.

4. Ensures that the Bank has regularly tested controls in place to manage risks associated with third party relationships.

5. Maintains appropriate documentation throughout the life cycle of the agreements; responds to material weaknesses identified by independent reviews.

6. Recommends termination of arrangements with third parties that do not meet expectations or no longer align with the Bank’s strategic goals, objectives, or risk appetite.

Participate in Business Continuity Plan (BCP) meetings, oversees the BCP updates and Business Impact Analysis and ensures that annual BCP testing occurs and is adequately documented.

Stays abreast of current IT related regulatory guidance and industry alerts including updates to GLBA, FFIEC, etc.

Qualifications

Bachelor’s degree in computer science, MIS or related field and/or 5 years of relevant experience in systems administration or an equivalent combination of education and experience.

Proficiency in Windows 10/11, Office 365, Active Directory, voice systems, scripting languages and remote support tools; knowledge of TCP/IP networking, current Windows Server OS, and mobile device support.

Current or willingness to obtain appropriate licenses/certifications with experience working in financial services or other highly regulated industry highly preferred.

Must be able to travel to branch locations and be available on-call, including nights and weekends a needed.

Exceptional skills including customer service; attention to detail; problem solving; communication; teamwork; follow instructions; multi-task; prioritize and organizational skills with the ability to lift up to 50 lbs. with or without accommodation.

Must have ability to pass an OCC non-objection if promoted to CISO.

Job Type: Full-time

Pay: $75,000.00 - $85,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Flexible schedule
• Vision insurance

Schedule:

• Weekends as needed

Work Location: Hybrid remote in Laurel, MT 59044

Salary : $75,000 - $85,000