Join the People Helping People

Velera is the nation’s premier payments credit union service organization (CUSO) and an integrated fintech solutions provider. The company serves more than 4,000 financial institutions throughout North America, operating with velocity to help our clients keep pace with the rapid momentum of change and fuel growth in the new era of financial services. Our purpose: We accelerate partners’ success through innovative financial technology solutions and inspired service.

The Opportunity

The Information Security Analyst is responsible for securing the company's systems and applications, identifying potential weaknesses, assessing risk and outlining remediation strategies. Perform ongoing monitoring and threat analysis, identify potential IT security incidents and escalate information to appropriate staff.   Assess vulnerability information from all sources (both internal and external) and promptly apply applicable mitigation techniques, conduct vulnerability analysis and assessments across the entire enterprise in support of operations and maintenance activities, and develop mitigation and remediation plans as a result of vulnerability assessment findings. Incumbent will leverage systems and network knowledge to integrate appropriate security functions into the operational environment, using innovative scripting techniques. 

Day in the Life

• Resolve customer escalations involving phishing, malware, and anomalous network or server behavior; utilize technical and customer skills to identify security problems, policy violations and high-risk threats; use independent judgment to resolve issues in a timely manner before escalation is needed 

• Monitoring and investigating suspicious activity

• Maintain security awareness related to information security among the workforce members  

• Arrange and administer security measures to restrict unauthorized use of data systems and databases  

• Monitor and maintain the Information Security ticket queue  

• Maintain and administer the corporate security tools, including: Endpoint Malware Detection, Email SPAM Gateways, Data Loss Prevention (DLP), Internet Proxy, Network Malware Gateways,  IPS/IDS  plunk 

• Monitor, configure and upgrade the necessary controls and procedures to cost-effectively protect information systems assets from intentional or inadvertent modification, disclosure or destruction; monitor systems and security tools for security alerts and escalate as needed  

• Update existing departmental documentation and create documentation for new processes  

• Assist with other departmental initiatives such as performing discovery on new technology and leveraging scripting languages to automate manual processes; develop and implement ideas and/or suggestions for current process improvement    

• Participate in risk assessments and risk management planning related to the information security features of systems, networks, and related administrative activities  

• Participate in the review and monitoring of assessments, plans, implementations, operations, and usage related to information security throughout the organization  

• Participate in disaster recovery, contingency planning, and testing for information systems in the organization  

• Coordinate any security investigations and execute preventive measures  

• Work in a team environment ensuring that departmental SLAs and other time and quality commitment KP