IT Security Analyst

This position is not eligible for immigration sponsorship.

POSITION TITLE: IT Security Analyst

DEPARTMENT: Information Technology

CLASSIFICATION: Exempt APPROVED

BY: CEO

WAGE GRADE: 12

WAGE RANGE: $73,492.22 - $91,865.28

REPORTING RELATIONSHIPS

POSITION REPORTS TO: Network & Security Manager

POSITIONS SUPERVISED: None

POSITION PURPOSE

The IT Security Analyst is responsible for supporting and maintaining the credit union’s enterprise security program, encompassing both physical security and information security controls, to safeguard member information, personnel, facilities, and assets. This position plays a key role in identifying, assessing, and mitigating security risks in accordance with NCUA regulations, GLBA requirements, and internal procedures.

ESSENTIAL FUNCTIONS AND BASIC DUTIES

The duties outlined for an IT Security Analyst involve a combination of technical expertise, risk management, incident response, and collaboration with various teams to protect an organization's information assets from security threats.

Procedural Security:

• Assist in developing, updating, and implementing physical security procedures and standards.
• Conduct incident investigations for security breaches, facility issues, or safety events; prepare documentation and reports.
• Support business continuity and emergency response programs, including drills and tabletop exercises
• Participate in fraud prevention efforts and collaborate with Fraud, Operations, and HR as needed

Physical Security:

• Monitor, maintain, and troubleshoot physical security systems including cameras, access control, alarms, and branch security equipment.
• Ensure alignment of security procedures with industry best practices and regulatory requirements.

Regulatory & Compliance:

• Ensure adherence to regulatory requirements including NCUA, FFIEC, and state laws related to physical and procedural security.
• Assist with internal and external audits, regulatory exams, and security-related reporting.

Collaboration & Support:

• Work closely with IT Security Specialists to ensure alignment between physical and digital security controls
• Partner with Facilities, IT, Operations, and branch management on security needs and risks.
• Provide training and support to employees on security procedures, emergency response, and situational awareness

Security Collaboration:

• Collaborate with IT teams and other departments to integrate security measures into projects and initiatives.
• Provide security guidance and recommendations for technology implementations.

Security Governance:

• Contribute to the development and maintenance of security governance frameworks.
• Ensure that security measures align with organizational goals and industry standards.

Continuous Improvement:

• Stay informed about the latest cybersecurity threats, technologies, and best practices.
• Implement continuous improvement initiatives to enhance the organization's overall security posture.

PERFORMANCE MEASUREMENTS

• Support functions are performed effectively and in accordance with established policies and procedures.
• Good working relations exist with Credit Union personnel, members and vendors.
• Management is appropriately informed of area activities and of any significant problems.
• Required reports and documents are generated accurately and timely.
• Good working relationships, DEI and collaborative initiatives exist with credit union personnel.

Requirements

QUALIFICATIONS

EDUCATION/CERTIFICATION:

• Bachelor’s degree or related experience in Information Technology, Cybersecurity, Information Technology, Risk Management.

REQUIRED KNOWLEDGE:

• Demonstrated knowledge of Physical and information security controls appropriate for a federally insured credit union.
• Knowledge applicable regulatory frameworks such as GLBA, PCI, and credit union specific risk management standards.
• Ability to identify, assess, document, and mitigate security risks impacting facilities, systems personnel, and member data.
• Familiarity with regulatory requirements and security best practices.

EXPERIENCE REQUIRED:

• One year to three years of similar or related experience.

SKILLS/ABILITIES:

• Excellent oral and written communications skills.
• Strong critical thinking and problem solving abilities.
• Solid organizational abilities, attention to detail and quality control.
• Time management skills to meet deadlines.
• Solid interpersonal skills and ability to interact respectfully with both technical and non-technical people.
• Ability to operate all related computer hardware and software.

PHYSICAL ACTIVITIES AND REQUIREMENTS OF THIS POSITION

FINGER DEXTERITY:

• Using primarily just the fingers to make small movements such as typing, picking up small objects, or pinching fingers together.

TALKING:

• Especially where one must frequently convey detailed or important instructions or ideas accurately, loudly, or quickly.

AVERAGE HEARING:

• Able to hear average or normal conversations and receive ordinary information.

REPETITIVE MOTIONS:

• Movements frequently and regularly required using the wrists, hands, and fingers.

AVERAGE VISUAL ABILITIES:

• Average, ordinary, visual acuity necessary to prepare or inspect documents or products, or operate machinery.

PHYSICAL STRENGTH:

• Sedentary work; sitting most of the time. Exerts up to 50 lbs. of force occasionally.

WORKING CONDITIONS

NONE: No hazardous or significantly unpleasant conditions. (Such as in a typical office.)

MENTAL ACTIVITIES AND REQUIREMENTS OF THIS POSITION

REASONING ABILITY:

• Ability to deal with a variety of variables under only limited standardization.
• Able to interpret various instructions.

MATHEMATICS ABILITY:

• Ability to perform basic math skills, use decimals to compute ratios and percentages, and to draw and interpret graphs.

LANGUAGE ABILITY:

• Ability to read a variety of books, magazines, instruction manuals, and reports
• Ability to prepare memos, reports, and essays using proper punctuation, spelling, and grammar.
• Ability to communicate distinctly with appropriate pauses and emphasis; correct punctuation (or sign equivalent) and variation in word order.

INTENT AND FUNCTION OF JOB DESCRIPTIONS

Job descriptions assist organizations in ensuring that the hiring process is fairly administered and that qualified employees are selected. They are also essential to an effective appraisal system and related promotion, transfer, layoff, and termination decisions. Well constructed job descriptions are an integral part of any effective compensation system.

All descriptions have been reviewed to ensure that only essential functions and basic duties have been included. Peripheral tasks, only incidentally related to each position, have been excluded. Requirements, skills, and abilities included have been determined to be the minimal standards required to successfully perform the positions. In no instance, however, should the duties, responsibilities, and requirements delineated be interpreted as all inclusive. Additional functions and requirements may be assigned by supervisors as deemed appropriate.

In accordance with the Americans with Disabilities Act, it is possible that requirements may be modified to reasonably accommodate disabled individuals. However, no accommodations will be made which may pose serious health or safety risks to the employee or others or which impose undue hardships on the organization.

Job descriptions are not intended as and do not create employment contracts. The organization maintains its status as an at-will employer. Employees can be terminated for any reason not prohibited by law.

Salary Description

$73,492.22 - $91,865.28