Information Security Analyst

Company Description

Ent Credit Union exists to improve the financial quality of life of the people we serve. This mission drives us every day, but we are more than our mission. We're also individuals using our unique abilities to make our organization, and the communities we serve, better than they were yesterday. We're a not-for-profit that puts people above profits and actively invests in our community. Our rapidly growing team is expanding our reach to serve more people throughout Colorado. To spread our mission far and wide, we need people like you. If you're interested in a paycheck with a purpose, apply with us today. Our people make the difference, and we truly believe you are our greatest asset.

Job Description

The Information Security (Info Sec) group is hiring an Information Security Analyst to support ongoing and new efforts within our area of responsibility. The Info Sec group sits within our Risk department and partners with other departments to protect our networks, systems, data, and digital assets. This Analyst will be part of the team that is responsible for maintaining and enhancing Ent's Information Security program. To understand and work within the Info Sec program, the Analyst will have to become aware of the internal policies, procedures, frameworks, applicable regulations (BSA/AML, NCUA, FFIEC, GLBA). There will also be several software tools the Analyst will need to learn to utilize with minimal supervision. Because Info Sec partners with other departments, the Analyst will be expected to learn how Info Sec interacts within other departments, and work within those partnerships to raise awareness and support for Info Sec activities. However, during any of these activities, there may be an incident, and the Analyst will be expected to assist with the response to the incident.

Essential Functions

• Information Security Service: Assist in developing, reviewing and updating InfoSec policies as required Assists with the development, presentation, and maintenance of materials for several initiatives, including: phishing simulations, security awareness, incident response, and data loss prevention. Assists InfoSec team in an ad-hoc role to provide research or report writing for relevant security topics.
• Member of the Data Governance Team: Data Loss Prevention (DLP): Monitors the shared DLP mailbox to quickly respond to users that have DLP related questions Reviews DLP reports to identify trends that will help in policy creation Coordinates and conducts DLP focused meetings Creates training materials for DLP policies Data Classification and Data Catalog: Utilize the Microsoft Purview toolset to configure policies, conduct simulations, and "train" the tool to identify new data types Assist with the cataloging and classification of data Modify and keep the Data Catalog up to date based on new findings and partner feedback.
• Member of the Information Security Team: Maintains up-to-date knowledge of industry trends and best practices Analyzes and monitors Information Security Key Performance Indicators and Data Organizes meetings, prepares materials, writes meeting minutes, and collects action items; when required, facilitates meetings with minimal supervision Maintains and updates existing reports and creates bespoke reports. Assists and supports the Physical and Cybersecurity Teams with tool administration and documentation Assists with the Vulnerability Program
• Member of the Incident Response Team: Ensures Consistency of Handling Incidents. Contribute to/maintain/improve incident response "playbooks" and related documentation Assists with maintaining Incident Response Program.
• Bank Secrecy Act: Remains cognizant of and adheres to Ent policies and procedures, and regulations pertaining to the Bank Secrecy Act.

Qualifications

Minimum Formal Qualifications for this Position

• Associate's Degree in Computer Science, IT Security, Information/Network Security or similar field of study.
• 2+ years' of relevant experience related to IT Security.
• Bachelor's Degree in Computer Science, IT Security, Information/Network Security or similar field of study (preferred)
• 1+ years' financial industry experience (preferred)

Each year of relevant work experience may be exchanged for a year in a relevant degree program or vice versa. For example, a requirement of a bachelor's degree in accounting and 2+ years of account experience could be substituted for a high school diploma and 6 years of relevant accounting work experience or a master's degree in accounting and 0 years of work experience.


Technical or Specialized Knowledge/Skills:

• Data: Awareness of data standards (both data exchange and storage), relational database structure, and cloud-based systems. Awareness of these areas com