Cybersecurity Analyst

notes=Months]

About the Role

The Cybersecurity Analyst supports the cybersecurity program through planning, implementation, assessment, and oversight of security measures designed to protect systems, networks, information, and data. The role is designed for someone who is curious, analytical, and interested in developing broad cybersecurity experience in a highly regulated environment. Salary range: $57,500.00 - $75,468.75/annually.

Key Responsibilities

• Supports the implementation, operation, assessment, and continuous improvement of cybersecurity solutions and controls.
• Monitors, assesses, and administers cybersecurity controls and technologies related to identity governance, access management, and data protection.
• Monitors information systems and computer networks for security issues, documents security breaches, and assesses damages.
• Maintains oversight of IT and vendors regarding the security maintenance of their systems and applications.
• Conducts research on emerging products, services, protocols, and standards to support security enhancement and development.
• Monitors and evaluates emerging security alerts/issues and makes recommendations to management.
• Develops, maintains, and tests IT security policies and procedures.
• Ensures all new systems and configuration changes comply with security policy.
• Maintains an active working knowledge on information technology trends, security standards, and frameworks.
• Participates in security assessments, internal/external audits, network penetration and vulnerability testing utilizing IT security tools and methodologies.
• Assists with the identification, assessment, documentation, tracking, and remediation of security vulnerabilities, risks, and control deficiencies.
• Assists in the recovery of information systems and data in the event of a disaster as part of the Emergency Management team.
• Tests server disaster recovery plans for procedural accuracy and availability time frames.
• Participates in security incident response activities, including detection, response, escalation, remediation, and documentation.
• Works with Network Technology to ensure documentation of server, application, and network configuration and topology is current and compliant with credit union security policies.
• Assists with maintaining cybersecurity documentation, metrics, risk records, and other evidence necessary to support the information security program.
• Performs other duties as assigned.

Requirements & Tech Stack

• Six (6) months of experience in cybersecurity, information technology, risk management, compliance, audit, or a related field.
• Experience administering IT security controls in an organization.
• Must be located in, or near Tucson, AZ to work out of our Corporate Office occasionally.
• Some nights and weekends may be required.

Qualifications

• Bachelors Degree in Information Security, Cyber Security, Information Technology, or related degree or related experience.
• Excellent communication skills, both verbal and written.
• Ability to communicate effectively across all levels of the organization.
• Knowledge of latest information security trends and standards.
• Working knowledge of information security principles, controls, technologies, and risk management practices.
• Working knowledge of information security technologies, governance practices, or security assessment tools.
• Working knowledge of cybersecurity frameworks, regulatory requirements, risk assessments, and security control concepts.
• Good process and ability to clarify objectives, evaluate options, consider implications, assess risks, and make decisions.
• Excellent project management, organizational, time management, and problem-solving skills.

Preferred Qualifications

• Experience working in a financial service, credit union, or other regulated organization.
• Familiarity with cybersecurity and regulatory frameworks such as NIST CSF, FFIEC/NCUA/GLBA, CIS Controls, and/or MITRE ATT&CK.
• Experience conducting IT compliance assessments (Sarbanes-Oxley, PCI, etc.).
• Relevant cybersecurity certification, certification coursework, internship, lab experience, or military experience preferred.

Working Conditions/Environment

• The employee will sit or stand most of the time.
• Infrequent lifting of up to 25 lbs may be required.

Other Requirements

• Must comply with all aspects of the Bank Secrecy Act.