Summary

 The Information Technology Security Analyst I supports the Company’s Information Security Program by assisting with day‑to‑day security operations, monitoring activities, and administrative tasks. This role works closely with senior information security staff to help ensure the confidentiality, integrity, and availability of the Company’s systems, data, and information assets in accordance with the Gramm‑Leach‑Bliley Act (GLBA), FFIEC guidance, and internal information security policies and standards.

This position is execution and task‑focused and provides exposure to core security functions while operating under defined procedures and supervision.

 Responsibilities

 Business Continuity

• Assist with distributing Business Impact Analysis questionnaires to business units.
• Track responses and follow up on missing submissions.
• Normalize data into BIA worksheets or SharePoint lists.
• Escalate inconsistencies or gaps for senior Information Security staff for review.
• Engage with Disaster Recovery Program activities (and preparation.)Security Operations & Monitoring

• Assist with monitoring and triaging alerts related to malware, phishing, endpoint security, firewall activity, and intrusion detection systems.
• Escalate potential security incidents to senior Information Security staff in accordance with established incident response procedures.
• Engage with investigation and documentation of basic security events with support and direction from senior Information Security staff.
• Assist with Security Infrastructure engagements and document discussed requirements where needed. 

Vulnerability & Asset Support

• Assist senior staff with vulnerability management activities, including:
• Collecting scan results
• Validating asset inventories
• Tracking remediation status
• Reviewing basic validation of remediation activities for mitigated systems. 

Risk & Compliance Support

• Support information security risk assessments by:
• Collecting evidence and documentation
• Assisting with questionnaires and control validation
• Maintaining risk tracking documentation
•  Support collection of audit evidence in repositories and maintaining examiner request materials. 

Policy, Awareness & Administration

• Assist with enhancements, enforcement, and communication of information security policies, standards, and procedures.
• Support security awareness initiatives, including phishing simulations and employee training tracking.
• Maintain accurate records related to security tools, incidents, and compliance activities. 

Collaboration & Escalation

• Work with IT teams and business units to gather information required for security reviews.
• Promptly escalate issues, risks, or control gaps to senior security staff.
• Participate in team meetings, table‑top exercises, and training to build security knowledge. 

Other

• Protect all client and bank information confidentially and follow all company policies.
• Understand, communicate, and instill the Company’s mission, vision, and values (Pillars of Success).
• Complete monthly training in a timely manner to ensure knowledge of bank regulatory requirements, policies, and procedures.
• Working at the worksite during regular business hours and/or assigned hours.
• Other specified duties as assigned. 

Compensation & Benefits (for HR USE ONLY) 

The IT Security Analyst I position pays a salary of $50,000 - $75,000.

Full‐time associates are eligible for our benefits package:

• Medical
• Dental
• Vision
• 401(k) plan
• Company paid life insurance
• Short and Long-term disability insurance
• Company paid vacation, paid leave and holidays

This position will remain open until a qualified applicant is hired.