Information Security Assistant

• Location 227 West Dixie,Elizabethtown, KY, 42701,United States
• Employee Type FT Non-Exempt

• Assist the ISO in enforcement of company policies and procedures by monitoring logs and activities of users.
• Conduct regular reviews of user access controls and monitor for anomalies.
• Present a professional image as a representative of the bank.
• Establish and maintain effective professional working relationships with co-workers, and management.
• Review problem tracking system, auditing against system reports and reported to the ISO.
• Stay abreast of the latest developments in technology security.
• Assist with compliance with policies that effectively protect the bank as well as its employees and customers, identify and mitigate risks, contributing to the overall safety and soundness of the bank.
• Participate in the identification and mitigation of risk to customers and their accounts when a potential threat is encountered.
• Understand, monitor and report on network systems, software configuration, user access, abnormalities and potential technology threats.
• Capture, monitor and analyze computer usage data, conduct research on employee use and enforce disciplinary actions for abuse of privileges or violation of policies.
• Review and audit domain & group policies.
• Abiding by Information Security policies and procedures.
• Comply with all relevant laws, regulations, and policies.
• Compliance with Bank Secrecy Act regulations as they pertain to the functions of this position and Information Security in general.
• Conduct tasks of the Vendor Management Program as directed by the program supervisor and KITE with duties to include:
• Ensuring that all vendor documents are processed in a timely manner.
• Utilize Planner to keep stakeholders on track for vendor review.
• Track and respond to important timelines for contract renewals and terminations.
• Report monthly to KITE on updates on the status of vendor reviews and related matters.
• Report to the Vendor Management Program supervisor.

• Participate in various opportunities to continue personal growth, expand knowledge, and provide expertise to the organization.
• Other duties as assigned by the ISO, Management, or the Board of Directors

• Knowledge of and the ability to research and stay current on banking laws and regulations as they pertain to this position.
• Knowledge of core processing system.
• Working knowledge of Microsoft Office products and advanced computer skills.
• Ability to deal continuously with confidential information and to work under deadlines.
• Strong organizational skills, attention to detail and accuracy.
• Self-starter with the ability to work unsupervised in a manner that provides the organization a valuable resource in the position.
• Ability to research data input, output, diagrams and reports from a security standpoint with an understanding on how the different components relate to one another.
• Ability to provide research results to ISO, and others as needed, in a way that is understood and beneficial.
• Ability to react quickly and decisively to threats, disasters, or other critical situations in a way that mitigates the risk and exposure of data and to the organization, while demonstrates to others a sense of urgency balanced with control of the situation.
• Ability to read, write and interpret documents such as diagrams, technical policy and procedure, and hardware and software manuals.
• Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions, and decimals; the ability to compute rate, ratio, and percent; and the ability to write and understand complex formulas in spreadsheets and other documents.
• Ability to apply common sense approach and understanding to carry out instructions furnished in written, oral, or diagram form.
• Ability to deal with problems involving several concrete variables in standardized situations.
• Good oral, written and human relations skills.
• Ability to deal tactfully, respectfully and confidentially with customers, both external and internal.
• Technical knowledge including but not limited to network design, backup and recovery solutions, active directory, group policy, Windows operating system, PC repair, anti-virus/malware/spyware and intrusion detection software, network monitoring software and reports, software patch management, help desk solutions, communication systems, remote connectivity, VPN, telephone connectivity, Ethernet and Cat5 wiring, web and email, projectors and video software and solutions, security cameras and DVRs, and other data or technical systems.
• Ability to evaluate and understand user access controls, dual control requirements, and the use of group controls.
• A natural ability to evaluate and understand general software products.

To successfully perform the essential functions of this position:

• The employee is regularly required to talk or hear.
• The employee frequently is required to…