Information Security Analyst

Elevations Credit Union•Broomfield, CO

3d•Hybrid

About The Position

The Information Security Analyst is responsible for coordinating and completing projects under the Information Security Program. This role assesses current security situations, evaluates trends, and recommends security improvements to protect data and ensure regulatory compliance while maintaining technical knowledge through continuous learning. The role assists with maintaining Logical Security Access to various applications and systems, conducts security awareness training, identifies and manages vulnerabilities, monitors networks for security incidents, manages identified risks, and maintains incident response procedures. Additionally, the analyst supports the preparation of security reports and contributes to the development of security policies. This role requires staying informed about emerging vulnerabilities and potential threats to the organization.

Requirements

2+ years of experience in information security or technology legal/compliance
Experience monitoring and responding to security incidents, conducting vulnerability assessments and risk analysis, and managing security controls and access management
The ability to write effectively, to explain information security in non-technical terms
Possess the ability to effectively develop issue papers, memorandums, letters, work plans, and other types of written communication
A personal smartphone is a requirement for employment

Nice To Haves

Degree in Computer Engineering, Technology, Information Systems, or related field of study.
Risk management experience
Experience working in the financial services industry, such as a credit union or bank.

Responsibilities

Assists with maintaining Logical Security Access to various applications and systems including documentation, updates and routine reviews.
Conducts security awareness training campaigns and phishing simulations to raise awareness and promote a security-conscious culture within the organization.
Identifies, assesses, and manages vulnerabilities throughout the organization's technology portfolio. This includes scanning, validation, and confirming that remediation was complete. Additionally, collaborates with various teams to prioritize & remediate based on risk levels and expected SLA's.
Monitors the organization's networks, systems, and applications for security incidents, unusual activity, or potential threats. This included analyzing and responding to events, and identifying patterns or anomalies.
Manages identified risks from security assessments, audits and penetration tests. Provides recommended remedial actions and works with various departments to ensure that risks and vulnerabilities are handled in a timely manner.
Manages and maintains incident response procedures and investigates and responds to security events. This includes documenting findings, recommending actions, contributing to post incident analysis, and participating in lessons learned.
Supports preparation and delivery of security reports, KPI, and KRI metrics to management and key stakeholders.
Contributes to the development and maintenance of security policies, standards, and guidelines.
Keeps up-to-date on news, events, and emerging vulnerabilities that could be potential threats to the organization.

Benefits

4 weeks paid time off for full-time employees
work anniversary paid time off
paid volunteer time off
12 paid holidays
Comprehensive medical, dental, and vision plans
employer contributions to supercharge your Health Savings Account
Up to a 4% match on 401(k) contributions
Up to twelve weeks of fully paid parental leave
An extensive Employee Assistance Program that provides personalized care options for your whole household
Ample opportunity to learn, develop and grow with access to LinkedIn Learning, career and leadership development programs, job shadowing, a mentor program, and tuition reimbursement up to $5,250/year