Senior Information Security Analyst

Golden 1 Credit Union is a member-owned, not-for-profit cooperative focused on serving its members and communities. The Senior Information Security Analyst will lead vulnerability management, threat detection, incident response, security monitoring, risk mitigation, compliance, and security control improvement across technical and business environments.

Responsibilities:

• Lead ongoing vulnerability management activities and identification of potential threats. Coordinate and direct technology staff in the identification and remediation of system vulnerabilities across the computing environment. Escalate any immediate and severe issues accordingly to the attention of the Manager – Information Security and appropriate reporting to senior leadership
• Maintain, improve, and develop vendor supported and customized organizational processes supporting information security monitoring of asset, patch, network, vulnerability, change and configuration management
• Prepares for and participates in threat hunting and security incident response activities. This includes working with Golden 1 IT and Information support teams to develop response readiness
• Provide consultative support for technical and non-technical Golden 1 projects and initiatives requiring Information Security oversight to ensure policies, procedures and standards are met
• Define and evaluate functional requirements and specifications of security systems for both internal and external business environments
• Partners with IT Development and Support teams to ensure appropriate procedures and processes are in place to provide optimal security monitoring of on-premises and cloud system environments as well as in establishing and managing a functional anti-virus/malware/DLP policy
• Monitor, measure, test and report on the effectiveness and efficiency of information security controls as well as compliance with information security policies and procedure
• Recommend new security solutions as well as effective improvements to existing security controls that do not negatively impact business innovation
• Train colleagues on new Tactics, Techniques, and Procedures (TTP) of cyber-attacks and mentor junior teammates
• Keep management updated on outstanding issues that are not resolved in a timely manner in accordance with established escalation procedures
• Work with internal and external auditors during examinations providing support and assistance in addressing audit recommendations
• Maintains a thorough understanding of state and federal laws and regulations related to credit union compliance including bank secrecy and anti-money laundering laws appropriate to the position
• Performs other job-related duties as necessary

Requirements:

• You are a security-focused technology professional with expertise in information security, vulnerability management, threat detection, and risk mitigation
• You have a proven ability to partner with technical and business teams to strengthen security controls, lead incident response and threat hunting activities, and ensure compliance with regulatory and organizational requirements
• Your experience includes improving security monitoring, managing vulnerabilities, evaluating security solutions, supporting audits, and driving secure configuration and change management practices
• Bachelor's Degree of Science in Computer Science, Management Information Systems, Information Security Information Assurance, or equivalent industry experience required
• 5+ years hands on experience in the management, configuration, administration, installation, and evaluation of network or operating systems software (Microsoft, Linux desired), hardware and applications required
• 3+ years experience in organizational information security, information assurance or providing security consulting services required