Information Security Solutions Analyst

Description/Job Summary

Join a team focused on the success of our customers, the success of our communities, and the success of each other. Farm Credit East (FCE) is the leading provider of loans and farm advisory services to farm, forest product, fishing, and other agricultural business owners across the northeast with $13.5 billion in total loan volume and $29 million in annual financial services revenue from 18,000 customers across our 8-state territory. We are One Team Working Together with a focus on our five pillars: Outstanding Customer and Employee Experience, Quality Growth, Operational Excellence, Commitment to our Communities, and Protecting Customer Information. 

 

As part of our commitment to protecting customer information and enabling operational excellence, the Security Solutions Analyst plays a key role in supporting the secure design, implementation, and documentation of systems and cybersecurity initiatives.  

This role serves as a technical liaison between the Information Security team and internal and external  stakeholders, including Farm Credit Financial Partners, Inc. (FPI). The analyst represents Information Security in the Architecture Review Board (ARB), evaluates strategic projects for security alignment, and ensures that  security requirements are embedded in technical decisions and implementation plans.

 
The analyst applies Security by Design principles, ensuring that systems and solutions are architected with  security as a foundational principle. This includes adherence to internal standards, regulatory requirements, and industry best practices throughout the lifecycle of technology initiatives.  

 

The value drivers for this role are as follows:

• Secure Enablement of Initiatives 
• Data Protection and Governance Support  
• Alignment with Standards and Risk Appetite  
• Operational Resilience and Incident Readiness  
• Cross-Team Collaboration and Technical Alignment 

 

Come join a collaborative, customer-focused team at Farm Credit East!

 

Duties and Responsibilities

Security Architecture, Standards & Project Evaluations  

• Represent Information Security in the Architecture Review Board (ARB) for all projects requiring architectural review.  
• Evaluate strategic and technical initiatives for alignment with security architecture, regulatory requirements and risk posture.  
• Conduct threat modeling to assess cybersecurity risk related to new projects and technologies.  
• Apply security by design principles to ensure security is embedded throughout  project lifecycles.  
• Ensure solutions adhere to internal security standards, NIST CSF principles, and applicable regulatory frameworks.  
• Ensure security standards are defined, are accurate, up-to-date, and aligned with FCE’s risk appetite and industry best practices.  
• Conduct security evaluations of internal and third-party systems, including encryption, patching, APIs, data residency, incident response, and third-party risk  indicators.  
• Review configurations and security controls for AI-enabled systems, including  generative, agentic, and embedded AI. Evaluate risks related to model behavior, data usage, integration points, and alignment with internal standards and  responsible AI security practices.  
• Provide security oversight throughout the full lifecycle of systems, from design to deployment to decommissioning.  

 

System Configuration Oversight & Technology Service Provider Collaboration  

• Provide guidance and maintain oversight for the configuration and security settings of all FCE systems.  
• Partner with FPI and/or other outside vendors to ensure system configurations, access policies, and integration points meet FCE’s security requirements.  
• Participate in joint planning and review sessions to support shared initiatives and maintain architectural alignment. 
• Maintain visibility into FPI-managed implementations and ensure security expectations are clearly communicated, documented, and tracked.  
• Participate in change management process to assess the security impact of system changes, upgrades and new deployments.   

Initiative Coordination, Implementation Support & Incident