IT Security Analyst
About The Position
The IT Security Analyst is responsible for protecting the Credit Union’s information systems, networks, and data while also providing systems administration support for core infrastructure platforms. This role combines hands-on security operations with system administration duties to ensure systems are secure, available, and compliant with regulatory requirements including NCUA, FFIEC, and GLBA. Role and Responsibilities Security Operations Monitor security alerts, logs, and events from SIEM, endpoint protection, firewalls, and other security tools. Investigate, document, and respond to security incidents in accordance with incident response procedures. Assist with malware containment, account compromise response, and security event remediation. Systems Administration Administer and support Windows Server environments, Active Directory, and Microsoft 365 / Azure AD. Manage user accounts, permissions, group policies, and access controls following least-privilege principles. Perform system patching, upgrades, and maintenance to ensure security and stability. Monitor system performance, availability, and capacity; troubleshoot system-related issues. Security Controls and Infrastructure Configure and maintain security-related system settings, hardening standards, and baseline configurations. Support endpoint management tools (e.g., Intune, Group Policy, MDM) and secure workstation builds. Assist with firewall rule changes, VPN access, and secure remote access solutions. Vulnerability and Risk Management Perform vulnerability scans and assist with remediation and patch management efforts. Participate in risk assessments and support penetration testing activities. Track and remediate system and security-related findings. Backup, Disaster Recovery, and Business Continuity Monitor and maintain backup and recovery systems. Participate in disaster recovery testing and business continuity planning. Assist with system restores and recovery validation. Compliance and Audit Support Support NCUA, FFIEC, GLBA, and internal/external audit examinations. Maintain system and security documentation, procedures, and audit evidence. Assist in remediation of audit and exam findings. Collaboration and Improvement Work closely with Core Management, Data Developers and third-party vendors. Recommend improvements to system reliability, security posture, and operational efficiency. Stay current on security threats, system vulnerabilities, and industry best practices.
Requirements
- Bachelor’s degree in Information Technology, Cybersecurity, or related field (or equivalent experience).
- 3–5 years of experience in information security and/or systems administration.
- Experience in a Credit Union, bank, or regulated financial environment preferred.
- Windows Server, Active Directory, and Group Policy
- Microsoft 365 / Azure AD
- Endpoint protection and EDR tools
- Patch management and vulnerability remediation
- Backup and disaster recovery solutions
- Network security fundamentals (firewalls, VPNs)
Nice To Haves
- CompTIA Security+, CySA+, or Network+
- Microsoft certifications (Azure, Windows Server)
- CISSP, CISM, or GIAC certifications
Responsibilities
- Monitor security alerts, logs, and events from SIEM, endpoint protection, firewalls, and other security tools.
- Investigate, document, and respond to security incidents in accordance with incident response procedures.
- Assist with malware containment, account compromise response, and security event remediation.
- Administer and support Windows Server environments, Active Directory, and Microsoft 365 / Azure AD.
- Manage user accounts, permissions, group policies, and access controls following least-privilege principles.
- Perform system patching, upgrades, and maintenance to ensure security and stability.
- Monitor system performance, availability, and capacity; troubleshoot system-related issues.
- Configure and maintain security-related system settings, hardening standards, and baseline configurations.
- Support endpoint management tools (e.g., Intune, Group Policy, MDM) and secure workstation builds.
- Assist with firewall rule changes, VPN access, and secure remote access solutions.
- Perform vulnerability scans and assist with remediation and patch management efforts.
- Participate in risk assessments and support penetration testing activities.
- Track and remediate system and security-related findings.
- Monitor and maintain backup and recovery systems.
- Participate in disaster recovery testing and business continuity planning.
- Assist with system restores and recovery validation.
- Support NCUA, FFIEC, GLBA, and internal/external audit examinations.
- Maintain system and security documentation, procedures, and audit evidence.
- Assist in remediation of audit and exam findings.
- Work closely with Core Management, Data Developers and third-party vendors.
- Recommend improvements to system reliability, security posture, and operational efficiency.
- Stay current on security threats, system vulnerabilities, and industry best practices.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
