Junior Information Security Analyst

WHITEFISH CREDIT UNION ASSOCIATION•Kalispell, MT

22h

About The Position

This is an entry level Information Security position that will focus on the monitoring, detection, and response of security incidents, events, and threats at Whitefish Credit Union. This position will work with various departments to ensure compliance with credit union security standards and policies. They will participate in the maintenance of security software and aid in the patching of security systems and appliances when needed. This position will require keeping up to date and being proactive with current security threats to the credit union. This position will monitor physical security components such as cameras, badges, sensors, and access control systems. Timely updates and reporting to manager on assigned tasks and projects will be required.

Requirements

Ability to communicate effectively in person, in writing and over the phone with all internal and external stakeholders. Courtesy and tact are essential.
Ability and willingness to interact calmly and professionally with people from all backgrounds.
Ability to multi-task, prioritize and organize day-to-day responsibilities with attention to detail and timeliness.
Ability to follow oral and written instructions.
Ability to work with others in an effective manner, listen well, share work-related information and be tolerant of others’ work styles.
Competent with Microsoft Office; ability and willingness to work with a variety of office equipment and software systems.
Ability to lift up to 15 lbs., with or without accommodation.
Complete mandatory annual BSA training that includes Red Flag, Identity Theft, OFAC, CTR and SAR reporting and thresholds, as well as the safe keeping of member information, and passes any applicable tests.
Follow all Whitefish Credit Union, Montana and Federal information privacy guidelines.
Adhere to all Whitefish Credit Union policies and procedures.
Protect Member and Whitefish Credit Union confidential information.
High school diploma or equivalent.
Experience working in, or as an intern in, the information security or technology field for 2+ years.
A current security or IT certification such as A+, Security+, Net+ or equivalent.
Experience with Windows security and system hardening.
Knowledge of best practices for securing workstations, networks and servers.
Familiarity with firewall rule configurations.

Nice To Haves

Associate degree in Computer Science or related field preferred.

Responsibilities

Monitor security systems and respond to security events and incidents as required.
Function as the initial triage and response point for all security tickets.
Maintain badge printing hardware and systems.
Monitor security systems (SIEM, CASB, DLP, IDS/IPS, etc.) to ensure adequate data ingestion and reporting is taking place.
Provide direction and initiate processes related to Information Security.
Participate in reviewing and updating security standards and procedures as needed.
Provide security incident and event reporting to manager.
Administer employee authentication and access controls, including the provisioning, transferring, and de-provisioning of users and system accounts.
Participate in the enforcement of member data security controls.
Research security trends, new methods, and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach.
Participate in completing risk and compliance assessments; and participate in third-party risk and compliance assessments as needed.
Review and help mitigate penetration tests and vulnerability assessments on information systems and infrastructure.
Coordinate with security vendors and aid in the configuration and maintenance of security systems.
Participate in the administration of information security training for credit union staff.
Proactively provide feedback to manager for changes to physical or computer security.
Shadow with other senior security and IT team members to gain further education and experience with credit union security and technology infrastructure.
Strict adherence to the CIA triad.
Report to work on time and as scheduled.
Perform other duties as assigned.