Cybersecurity Analyst - Information Systems

Orion Financial•Memphis, TN

About The Position

The Cybersecurity Analyst protects company hardware, software and network systems from cyber attacks. The primary responsibility is to understand company IT infrastructure in detail, monitor at all times and evaluate threats. The Cybersecurity Analyst ensures proactive compliance of IT security systems, processes and controls with credit union information security program, security policies and regulatory compliance guidelines, and continuously looks for ways to enhance company network security and protect sensitive information.

Requirements

Bachelor’s degree in Computer Science, Management Information Systems or closely related subject required, advanced degree preferred.
Security+, CEH, CySA+, CISM, CISA, CISSP certification highly desired.
Documentable knowledge of Cyber Incident Response, IDS/IPS, SIEM, PAM, Patch Management, Vulnerability and Risk Management, Data Classification Management and Threat Detection and Management.
Five (5) years of experience as an IT Security Analyst or similar role
Ability to communicate effectively with technical and non-technical Stakeholders, including senior management.
Very strong analytical & problem-solving skills
Strong written and oral communication skills with an understanding that group presentations on created work is required for knowledge transfer, incident and problem management systems & procedures.
Ability to drive consistent and repeatable results.
Self-starter, dependable partner, as well as team player.

Responsibilities

Configure Tools: Virus Software, password protections software, vulnerability management software, activity log management, honeypots and privilege access management.
Conduct SOC 2 review of third party IT security controls.
Work with Third Party Security Operations Center for reporting, trends and incident response.
Reporting: Evaluate detection, firewall, and traffic log data to identify activities including but not limited to: policy violations, abnormal behaviors, intrusions, best practice recommendations, etc.
Conduct network forensics as required as a result of any cyber breach.
Champion all IT security best practices in all layers.
Analyze daily incident reporting trends from IDS/IPS and SIEM logs.
Research trends, news and threats in the cyber space and recommend best practices to secure credit union data.
Conduct ongoing tests of all company networks to determine weaknesses.
Facilitate ongoing phishing testing and training of staff.
Work with Microsoft Engineer on AD security hardening.
Drive and facilitate Cyber Incident Response Policy including contingency plans.
Drive and facilitate Data Classification Policy.
Facilitate penetration testing, risk assessments, vulnerability and threat assessments of networks and systems. Ensure timely remediation and tracking of all findings.