Information Security Administrator

Tompkins Community Bank•City of Ithaca, NY

15d•$34 - $39•Hybrid

About The Position

This hybrid position is based at our Ithaca NY headquarters office. Selected candidate must be able to work in office three (3) days per week We are seeking an enthusiastic and dedicated individual with a passion for Information Security. The ideal candidate will thrive in a collaborative team environment and will be eager to engage in a variety of tasks and projects to support the Tompkins Information Security Program. This role offers the opportunity to contribute to the development and implementation of security measures, ensuring the protection of our organization's information assets.

Requirements

A bachelor’s degree required (or an associate’s degree plus two (2) years of related work experience in information technology and/or information security).
A minimum of three (3) years’ related experience in information technology and information security required.
Strong interpersonal and communication skills.
Demonstrated understanding and familiarity with Information Security Concepts: network protocols and directory knowledge (Microsoft Active Directory/MS365/EntraID).
Thorough understanding of networking and the internet as well as aspects of security, including authentication, access control, intrusion detection, firewalls, encryption, data integrity, and disaster prevention and disaster recovery.

Nice To Haves

Preferential consideration will be given to candidates with a relevant security certification (Security +, CISSP, CASP, CCNA Security etc.).
Experience working with IBM iSeries operating system and security parameters preferred.
Experience with security logging and event analysis and incident investigation and related tools/systems is preferred.
Demonstrated knowledge of banking application systems preferred.

Responsibilities

Apply systems analysis techniques and procedures to determine and implement information security design and industry best practice security controls for company hardware, software, systems, and infrastructure.
Develop and monitor security reports as necessary, to detect unauthorized system usage and intrusion
Review access, security configurations, users, and overall system security compliance for company information systems and end user applications.
Lead and/or participate in information security strategic and tactical projects.
Design, implement and administer security configurations and controls on information systems.
Monitor intrusion detection software, events, alerts, and reports for network and/or application systems and provide first response/investigation for incident response activities.
Monitor security reports for unauthorized access to networks and application systems.
Serve as a security administrator for functions relating to remote access, security/protection of Company information, and ensure quality and integrity of the network as illustrated by the following duties:
Ensure applicable virus detection software is installed on networks consistent with established Company policies.
Manage the system administration consoles for all security related applications and services.
Perform review and control testing for critical Information Security requirements.
Assist in the formulation of information security policies and procedures.
As required, act as a project leader and coordinator for security or computer system related projects.
Facilitate communication between departments and appropriate system software, hardware, or computer services providers.
Assist with security training as follows:
Development of training programs.
Providing individual assistance and training to end users as needed.
Designing and maintaining manuals for distribution to end users.
Maintain a current knowledge of technology and security methods by means of attending seminars, reading periodicals and attaining relevant security certifications.
All other duties as assigned.