Information Security Operations Specialist - Incident Response

Description/Job Summary

Join a team focused on the success of our customers, the success of our communities, and the success of each other. Farm Credit East (FCE) is the leading provider of loans and farm advisory services to farm, forest product, fishing, and other agricultural business owners across the northeast with $13.5 billion in total loan volume and $29 million in annual financial services revenue from 18,000 customers across our 8-state territory. We are One Team Working Together with a focus on our five pillars: Outstanding Customer and Employee Experience, Quality Growth, Operational Excellence, Commitment to our Communities, and Protecting Customer Information. 

 

The Information Security Operations Specialist - Incident Response supports the operational strength of the information security program by coordinating incident response activities for both insider and external risks. This role ensures that security incidents are escalated and managed effectively, insider risks are proactively addressed, and response processes are standardized through playbooks and automation. Working closely with other members of the Information Security team, Legal, HR, business stakeholders and our managed service provider Farm Credit Financial Partners (FPI), the position promotes alignment on governance and reporting requirements, facilitates training and follow-up actions, and drives continuous improvement through root cause analysis and lessons learned. 

 

The value drivers for this role are as follows:

• Coordinated Incident Response 
• Proactive Risk Management 
• Operational Consistency & Readiness
• Continuous Improvement & Stakeholder Alignment 

 

Come join a collaborative, customer-focused team at Farm Credit East!

 

Duties and Responsibilities

 

Incident Response Coordination & Escalation 

• Act as the first responder for all reported security events and confirmed security incidents, ensuring timely triage, classification, escalation as needed and ensuring close collaboration with FPI to ensure containment and escalation.
• Align incident handling with FPI and their incident response framework and coordinate across internal teams and external partners.
• Perform and document RCA for all security incidents and security events as needed.
• Coordinate incident response activities outside of standard business hours as needed, including facilitating calls, engaging external partners (e.g., FPI), and ensuring appropriate stakeholders are informed during active incidents.
• Maintain accurate event and incident documentation and tracking for compliance and audit readiness.
• Collaborate with other InfoSec team members to ensure integrated responses.
• Develop and maintain KPIs, KRIs, and SLAs for incident response performance.
• Align SLAs with FPI’s service delivery commitments and monitor adherence. 

 

Incident Preparedness & Process Development 

• Develop and maintain incident response playbooks, ensuring regular testing and updates.
• Complete a periodic review of FPI and FCE playbooks to ensure alignment, accuracy and drive updated improvements as needed.
• Plan and coordinate tabletop exercises, ensuring corrective actions are documented, tracked, and implemented.
• Maintain incident response related policies, procedures, and instructions.
• Ensure documentation supports audit readiness and aligns with internal cybersecurity controls matrix.
• Support automation and orchestration initiatives to streamline responses. 

 

Risk Monitoring & Risk Management 

• Configure and maintain Insider Risk Management policies o Define risk indicators (e.g., data exfiltration, privilege misuse, anomalous activity, etc.)
• Integrate insider risk alerts with incident response workflows for timely escalation.
• Collaborate with InfoSec team members to align insider risk detection with data protection strategy.
• Work with HR and Legal to ensure proper handling of investigations and privacy compliance.
• Develop playbooks for insider risk scenarios, including escalation paths and evidence handling.
• Report insider risk trends and metrics to leadership for governance and awareness