What are the responsibilities and job description for the Information Security Officer position at US Metro Bank?
Job Details
Job Description
POSITION OVERVIEW
The FVP & Information Security Officer is responsible for the security of an organization s computer systems and networks. The engineer implements security measures that effectively safeguard sensitive data in the event of a cyber-attack. The role is highly collaborative, involving frequent interaction with various members of the IT team. The ideal candidate should have a strong background in computer science, system engineering, and information security.
POSITION RESPONSIBILITIES
- Recommend security requirements, access levels, other appropriate controls, and restrictions for all critical applications, networks, and servers.
- Monitor system performance and proactively identify and address any potential security issues.
- Manage system updates and patches to ensure optimal system security and stability.
- Maintain the Bank's Information Security Risk Assessment and ensure that it is updated as new products and services are implemented, new threats are detected, but no less than annually.
- Maintain and update the FFIEC Cybersecurity Assessment Tool at least annually.
- Maintain up to date working knowledge in the field of Cyber Security and new and emerging types of prevention and detection products.
- Develop and maintain documentation related to Information Security policies and procedures.
- Provide reporting for trending and key performance indicators related to the Bank s Information Security Programs.
- Review security event logs and alerts from security systems and tools such as, IDS/IPS, DLP, SIEMS, and Syslog.
- Provide an analysis of security events and investigate cybersecurity threats to the environment.
- Review and Audit Bank s ID assets including but not limited to Fiserv banking software, and other banking/financial platforms.
- Review the appropriate security reports and activity logs for system user activities.
- Administer and maintain bank s Service / User account and IDs: Microsoft Windows and Office, Active Directories, Fiserv banking software, and other banking/financial platforms.
- Utilize tools like SharePoint 365 to assist in building out a secure internal communication and workflow management system.
- Develop and implement backup and disaster recovery plans to ensure system availability.
- When necessary, interact professionally with third-party vendors to seamlessly provide services for bank s Infrastructure.
- Perform any tasks or projects as assigned by management.
- Complies fully with all Bank policies and procedures as well as all regulatory requirements (e.g. Bank Secrecy Act, Anti-Money Laundering, Code of Conduct, etc.). Must complete all required training.
SKILLS / QUALIFICATIONS
- Strong understanding of network protocols and infrastructure
- Experience with cloud platforms such as AWS or Azure
- Experience with virtualization technologies such as VMware or Hyper-V
- Experience with Microsoft System products, including MS Office 365, SharePoint, and MS Windows Servers.
- Excellent problem-solving skills and attention to detail
- Strong communication and collaboration skills
- Ability to work independently and as part of a team.
EDUCATION / EXPERIENCE
- Bachelor s degree in computer science, System Engineering, or a related field
- 5 years of experience in system engineering or a related field
- Security Engineering experience or a related field (preferred).