Information Security Analyst (On-Site)

Exceed the expectations of our residential mortgage borrowers & business partners through superior service, simple processes, and effective communications.

We deliver on this mission by empowering our employees by encouraging and recognizing superior performance and innovative solutions, by promoting teamwork and divisional cooperation.
 

POSITION SUMMARY

Responsible for monitoring, evaluating and maintaining policies and procedures including administrative, technical, and physical safeguards to protect the security, confidentiality of customer and company information. Identifies potential threats and responds to reported security violations. Identify and manage the cyber risks associated with third-party service providers that the organization engages with.

DESCRIPTION

Duties and Responsibilities

• Performs security compliance activities for vendors, customer, regulatory, and internal audit reviews and/or reports business and technology risk assessments to identify internal and external risks. 
• Provide recommendations to strengthen safeguards and security of confidential customer information.
• Identifies potential threats and responds to reported information security incidents and recommends corrective actions to ensure information security.
• Researches, recommends, develops, and communicates changes to policies, procedures, and systems to enhance information security.
• Manages and maintains security infrastructure and tools; utilizes tools to test and validate security configurations.
• Provides information security training and communication through development of articles, presentations, training programs, and individual follow-up and discussion.
• Monitor compliance with information security policies and practices including Third Party Risk Management (TPRM) program.
• Negotiate and act as an intermediary with internal/external Audit and customers to close current and future audit items

• Performs related duties as assigned by management.

Qualifications and Education Requirements

• Bachelor’s degree in information technology or related field.
• 2-4 years previous information security, technology controls experience; NIST experience preferred.

Skills, Abilities, and Knowledge

• Practical understanding of IT Security Compliance, risk management and information security principles including access control, network security, information security architecture, information security operations, and leading practices.
• Superior verbal and written communication skills.
• Experience handling confidential and sensitive information in a professional and responsible manner. 
• Strong problem-solving skills. 
• Strong PC skills. Excellent organization skills. 
• Ability to work independently. Detail oriented.

Additional Information:

While this description is intended to be an accurate reflection of the position’s requirements, it in no way implies/states that these are the only job responsibilities. Management reserves the right to modify, add or remove duties and request other duties, as necessary.

All employees are required to have smart phones that meet Company security standards with the ability to install apps such as Okta Verify and Microsoft Authenticator. Employment will be contingent on this requirement.

Company Benefits:

Newrez is a great place to work but we are only as strong as our greatest asset, our employees, so we believe in rewarding them!

• Medical, dental, and vision insurance

• Health Savings Account with employer contribution

• 401(k) Retirement plan with employer match

• Paid Maternity Leave/Parental Bonding Leave

• Pet insurance

• Adoption Assistance

• Tuition reimbursement

• Employee Loan Program

• The Newrez Employee Emergency and Disaster Fund is a new program to support our team members

Newrez NOW:

• Our Corporate Social Responsibility program, Newrez NOW, empowers employees to become leaders in their communities through a robust program that includes volunteering, philanthropy, nonprofit grants, and more

• 1 Volunteer Time Off (VTO) day, company-paid volunteer day where all eligible employees may participate in a volunteer event with a nonprofit of their choice

• Employee Matching Gifts Program: We will match monetary employee donations to eligible non-profit