Senior Information Security Analyst

Job Description At Ocean First Bank, each one of our employees plays an important role in delivering value to our customers and executing daily tasks in accordance with our core values. We recognize that our employees are essential to our success, making Ocean First a great place to work and do business.

Great benefits include: on-site fitness facility at Red Bank and Toms River headquarter offices, hybrid schedule after initial onboarding has been completed (3 days in office, 2 days remote), employee perks & discount programs, tuition assistance, incentive compensation program, professional development opportunities, and more! Apply today to #Become Ocean First  and make an impact in the local community!

ABOUT YOUR ROLEIn conjunction with the Information Security Operations Manager, develop, implement, and manage an enterprise-wide information security framework to establish IT systems defenses against security vulnerability/ breaches. Assist in the leadership, creation, and maintenance of information security procedures designed for business and technology units to establish and maintain a compliant, risk-focused information security platform. Partner with business and functional units to create and maintain the bank's Business Continuity, Disaster Recovery Plans, and Incident Response Plan.

Implement appropriate monitoring and testing to ensure adherence to the bank's information security protocols across the organization.

WHAT YOU WILL DO LIST Provide timely detection, identification, and alerting of possible attacks, anomalous activities, and misuse activities. Utilize an expertise in security solutions such as SIEM, IPS/IDS, End Point Security, Network Security, Database Security, Firewalls, Cloud Proxy, Network Access Control and Network Segregation to identify security risks. Ensure appropriate systems and controls exist to protect the confidentiality, integrity and availability of data residing on or transmitted to/from/through enterprise workstations, servers and other systems and in databases and other data repositories.

Execute the deployment, integration and initial configuration of all new and enhanced information security solutions with IT partners in accordance with standard best operating practices and the enterprise's documented information security procedures. Maintain information security documentation including procedures, processes and guidelines to ensure the organization's information security and compliance with all applicable banking regulations. Coordinate and document incident reviews to ensure appropriate controls are implemented to prevent or mitigate risks for recurrence of security and continuity incidents and/or data breaches.

Work with IT to maintain the bank's Business Continuity and Disaster Recovery Plans, identify potential information security risks and develop mitigating controls where appropriate. Maintain ongoing communications with IT peers to ensure enterprise-wide understanding of information security goals, solicit feedback and foster co-operation. Support the information security activities of the bank's external network sources. Maintain current knowledge and understanding of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.

Understand the IT threat landscape for banking and financial services industry. Help deliver enterprise-wide security awareness training for all employees to ensure consistently high levels of compliance with enterprise security requirements. Active participant in Incident Response Plan tabletop exercises. Create/Maintain vulnerability scans, and then analyze data and integrate into reporting and dashboard creation. Update security software tools to maintain current versions.

Review and recommend security policies, controls and cyber incident response planning. Approve and oversee identity and access management (IAM) policies and system access control. Ensure continued compliance with laws and applicable regulations. Schedule and participate in periodic security assessments. Choose and recommend security products as necessary. Coordinate electronic discovery and digital forensic investigations. Ensure an inventory of technology assets, classified by sensitivity and criticality is properly maintained.

Review relevant logs for security events Lead and/or manage departmental efforts and resources to accomplish the strategic goals of the…