Information Security Analyst

Southern First Bank•Greenville, SC

1d•Onsite

About The Position

The Information Security Analyst supports the bank’s Information Security Program in accordance with the FFIEC Information Security Handbook and applicable regulatory guidance. Accordingly, this individual works collaboratively across business departments, to document and evaluate security controls, assist in identifying information security risks and support management in maintaining an effective Information Security Program. The Information Security Analyst also provides regular reports on the status of the Information Security Program to applicable management. This position is intended to strengthen the Bank’s cybersecurity governance and regulatory readiness.

Requirements

At least 1-3 years of experience in information security, IT risk management, or IT audit in a banking environment.
Knowledge of laws and regulations including but not limited to: FFIEC Guidance, Gramm-Leach-Bliley Act, and Sarbanes-Oxley.
Knowledge of IT processes and controls and understanding of risk and control frameworks such as COBIT, NIST, PCI, etc.
Bachelor’s degree or equivalent experience.
Excellent organizational and communication skills.
Strong interpersonal skills and the ability to effectively communicate with a wide range of team members.
Strong attention to detail and documentation discipline.
Self-motivated and able to work independently.

Nice To Haves

Prefer certification such as CISSP, CISA, CISM, or ability to obtain certification within a year of taking the position.

Responsibilities

Serves as an internal information security consultant for the organization.
Coordinates the continuous development, implementation and updating of security and privacy policies, standards, guidelines, processes and procedures.
Promotes effective communication and coordination across the organization regarding cybersecurity practices and support leadership in providing information necessary for risk-based decision-making regarding cybersecurity.
Performs various annual information security risk assessments, including Cyber Security and GLBA, and serves as an internal auditor for security issues.
Reviews all system-related security plans throughout the organization's network, acting as a liaison to Information Technology.
Assists and/or prepares the Annual Information Security Report.
Monitors compliance with information security policies and procedures, collaborating with the appropriate department manager and escalating as necessary.
Monitors evolving cybersecurity risks and regulatory guidance.
Assists with preparation for IT audits and regulatory exams, and reviews and addresses issues identified and ensures all audit-related issues are addressed in a timely manner.
Monitors internal control systems to ensure that appropriate access levels are maintained as well as coordinating and/or performing user access reviews.
Support future initiatives such as AI governance and expanded data governance.
Other duties as assigned.