Information Security Specialist

• Job Category Information Security, Cyber Security, IT Systems Support
• Employee Type Full Time

(On-site position; remote work is not available. Relocation assistance is not provided.)

The Information Security Specialist supports the Bank's cybersecurity, information security, and physical security programs. Responsibilities include security monitoring, incident response, vulnerability management, security awareness training, administration of security technologies, physical security systems management, user access administration, audit support, and security reporting.

The position works closely with the Information Security Officer to identify risks, implement security controls, support regulatory compliance efforts, and promote a culture of security throughout the organization.

Provide first-level support for information security operations by responding to security-related requests, investigating and resolving security issues, and communicating with end users throughout the resolution process. Monitor and review security logs, assist with SIEM administration, create and maintain security alerts, and investigate security events and notifications.

Assist in administration and maintenance of security technologies including SIEM, endpoint protection, application control, email security, web filtering, MFA, vulnerability management, password management, and security awareness platforms.

Assist in administration and maintenance physical security systems including alarm systems, video surveillance systems, access control systems, panic alarms, monitoring services, and related security infrastructure.

Support the Bank's security awareness program by developing phishing simulations, administering security awareness testing, tracking employee participation and performance metrics, preparing management reports, and creating security articles, communications, and educational materials for all staff.

Assist in reviewing and maintaining security controls including firewall rules, endpoint security policies, access control lists (ACLs), and system configurations. Participate in incident response exercises, disaster recovery testing, and security control validation activities.

Perform security-related user provisioning and deprovisioning activities across security systems including MFA platforms, physical access systems, security awareness platforms, password management systems, and alarm systems.

Keep up-to-date on latest threats, documenting and storing relevant information and discovered vulnerabilities.

Assist with regulatory examinations, audits, and compliance reviews through document collection, evidence preparation, remediation tracking, control validation, and coordination with internal and external stakeholders.

Other duties as assigned.

Must comply with applicable laws and regulations, including but not limited to, the Bank Secrecy Act, the Patriot Act, the Office of Foreign Assets Control and Bank security policies and procedures.

All employees are expected to actively promote Legacy Bank to existing and prospective customers in order to obtain and build the Bank's customer base and thereby enhance Legacy Bank's growth and profitability.

Two to Five years of similar or related experience, including time spent in preparatory positions.

A two-year college degree or completion of a specialized course of study at a business or trade school.

Demonstrates strong attention to detail, sound judgment, and a commitment to safeguarding sensitive information. Collaborates effectively across the organization to promote security awareness, support risk mitigation efforts, and provide clear guidance on security-related policies, procedures, and best practices.

Since our founding in Colwich, Kansas nearly
140 years ago, Legacy Bank has established itself as a strong community partner and a preferred place of employment. Nowinour fifth generation of leadership,our focus remainson our people and delivering relationships, service, and solutions to our area communities.

All employees are expected to actively…