It Service & Security Specialist

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

30+ days ago Requisition

POSITION PURPOSE

To ensure all service requests are handled within established guidelines and owns all service requests and is responsible for ensuring all service requests are handled properly. To provide first level response and support for all service requests. To provide technical and operational support of credit union information systems including personal computers, peripheral devices, telecommunications, document imaging and storage and core processing systems.

To perform maintenance, troubleshooting and repair of information technology hardware and software systems. To coordinate PC system configuration, licensing, hardware refresh processes and equipment disposal processes. To maintain the Cyber Security Program documentation and Cyber Security audits. To maintain Cyber Security related systems/services including but not limited to patch management, SIEM, anti-virus, and content filtering.

ESSENTIAL FUNCTIONS AND BASIC DUTIES

Assumes responsibility for supporting, demonstrating and promoting the Credit Union service culture.

Provides exceptional service to all customers by demonstrating, following, and supporting the Inspired Financial Service promises and standards, along with the Credit Union Mission, Vision and Values.

Assumes responsibility for supporting the following Cyber Security functions:

Performs and maintains documentation of cyber security assessments (ACET and applicable assessments)

System patch management for all systems, including servers, end user computing, firewalls, printers, and network devices. Runs the patch management program using software deployment system or applicable software.

Log and event management and SIEM (Security Incident and Event Management). Responsible for all log and event management / SIEM in accordance with NCUA guidelines.

Vulnerability scans, penetration testing, and security audit management as well as addressing security issues.

Management of Anti-Virus definitions, deployment, and scanning.

Maintains data loss prevention tools/systems, including but not limited to web content filtering, computer baseline images, and access controls required by NCUA.

Validation of user access controls and audits of access controls.

Maintains documentation to support the 5 security domains identified by the NCUA, ensuring monthly reports are completed. Ensures the credit union has adequate documentation to support NCUA audits of the cyber security program in alignment with the ACET.

Cyber risk management and oversight

Threat intelligence and collaboration

Cyber security controls

Cyber incident management and response

Performs or assists with the performance of monthly IT Risk assessments

Creates the following security reports

Log and event management report (SIEM)

Patch management report

Cyber security reports

Web content filtering reports

Data destruction certifications and reports

Cyber threat information, threat reviews and communications, and US Cert alerts

Application access control audits and reporting

Vulnerability assessment reports

Penetration testing reports

IT Security assessments

Firewall reports

Any additional reports or information supporting the information security program

Assumes responsibility for daily infrastructure security support

Analyze IT specifications to assess security risks

Design and implement safety measures and data recovery plans

Install, configure, and upgrade security software (e.g. antivirus programs)

Secure networks through firewalls, password protection and other systems

Inspect hardware for vulnerable points of access

Monitor network activity to identify issues early and communicate them to IT teams

Act on privacy breaches and malware threats

Serve as a security expert and conduct both ongoing and new staff IT security trainings.

Draft policies and procedures

Assumes responsibility for supporting the following systems/services:

Service desk, including management of the service desk ticketing system and all service desk processes – or maintenance and management of the Help Desk ticketing system as it relates to security issues

Cyber security related systems including patch management system, BAE vulnerability scans, Symantec Anti-Virus, Orion LEM/SIEM, Baracuda web content filtering and email controls (or the replacement technology for any related systems)

Reporting of…