Information Security Analyst I

FHLB Dallas actively pursues dedicated and hardworking individuals to be a part of our professional team. Positions are offered on an as-needed basis for all departments.  View our current opportunities by clicking the View Open Positions tab above.  

Responsible for assisting in the monitoring and executing a portion of the Bank’s Information Security Program.  Completes tasks designed to ensure security of the organization's systems and information assets.  Assists efforts related to application access administration for internal and external users; researches and analyzes operational risk issues; performs data analysis / mining to perform application access monitoring and operations risk monitoring; performs user acceptance and user production validation testing of applications to identify operational and security issues; performs vulnerability management, scanning, and reporting, lead investigations of possible security incidents, perform weekly and monthly reporting task on events, incidents, malware, and patching, and operates as a resource on assigned application or system implementation projects.

Proactively maintains the security infrastructure of the Bank through execution of administration activities, log analysis, and user administration. Assists in automation efforts of security controls and processes to provide better metrics and operational efficiency. Ability to quickly and efficiently resolve issues while maintaining elevated levels of customer satisfaction. This position supports the critical infrastructure providing services to our customers and will work with groups within the Bank to ensure the Information Security Program is operating effectively.  This requires knowledge of technical standards, regulations and best practices. Additionally, it demands persistent learning of new technologies, industry trends, and technical vulnerability and threats.

Responsible for assisting in detailed risk assessments and audits of enterprise systems and helping to establish IT practices to ensure ongoing risk mitigation and compliance; Implements and operates specific compliance toolsets designed to demonstrate continuous compliance of the enterprise security and IT environment.  Works closely with our Internal Audit team, external auditors, and our regulators to provide requested evidence and materials.  Coordinates and assists with leading annual access reviews, audit requests, license reviews, and policy/procedure reviews; Assists with efforts related to automating all relevant IT Security compliance processes and activities.

Participates in On-Call rotation in support of IT Security Incident Management.

PRIMARY RESPONSIBILITIES:                                                                

• Responsible for the administration of access to applications, portals, and external business services as well as IT systems and services.  Performs routine administration review tasks, select system security reviews, including license compliance.  Responsible for reviewing and analyzing access requests for completeness, accuracy, and appropriateness (i.e. segregation of duties) and processing the access accurately, timely, and efficiently; Assists in identifying and automating security business processes. Acts as a liaison with teams when transitioning or decommissioning legacy applications.
• Assists with leading the application access review program/process and associated automations. Prepares and reviews daily, monthly, and quarterly reports.  Makes recommendations to resolve operational issues. 
• Assists in efforts in designing and building efficient and scalable security automations that improve daily security operations, including automations for Access Reviews, Audits, Application Access, etc.
• Responsible for carrying out key internal security testing processes as assigned by management.  Enhances own knowledge through understanding business trends and objectives.
• Has in-depth knowledge of the Banks policies, procedures, and standards.  Assists with yearly policy and procedure reviews and recommends modification / update as required.  Draft and review procedures and desk reference guides.
• Responsible for assisting in aspects of our Vulnerability Management Program, including leading meetings, developing reports and metrics, and establishing/recommending processes, controls and procedures related to the program.  Assists in