Information Security Analyst

Hanover Community Bank • Village of Mineola, NY

2d • Onsite

About The Position

Hanover Bank is looking for a full-time Information Security Analyst to support and enhance the Bank’s Information Security Program. Reporting to the Information Security Manager (ISM), this role assists with the planning, implementation, and maintenance of security controls designed to protect the confidentiality, integrity, and availability of the Bank’s information assets.

The Information Security Analyst works closely with the ISM, Information Technology, business units, and third-party service providers to ensure security policies, procedures, and controls align with federal and New York State regulatory requirements. Responsibilities include conducting risk assessments, supporting vendor security oversight, incident response, and business continuity activities, enhancing security awareness, consulting on projects and vendors, and supporting compliance and audit efforts.

Requirements

• Bachelor’s degree in computer science or a related field, or equivalent experience and/or certifications.
• 1–3 years of experience implementing, managing, or supporting information security, risk management, and/or third-party vendor risk management activities.
• Strong analytical, problem-solving, and attention-to-detail skills.
• Ability to communicate technical concepts clearly to both technical and non-technical audiences.
• Working knowledge of network, cloud, endpoint, and application security, as well as SIEM and SOC technologies.
• Familiarity with vendor and third-party risk management concepts, including due diligence, ongoing monitoring, security assessments, and control reviews.
• Knowledge of business continuity planning and disaster recovery concepts.
• Ability to support vendor and system cybersecurity risk assessments, including documentation review and issue tracking.
• Ability to support and deliver information security awareness and training programs.
• Ability to manage priorities and execute tasks within established timeframes.
• Adaptability in a fast-changing technology and threat landscape.

Nice To Haves

• Professional security certification (e.g., CISSP, CRISC) preferred or equivalent experience.

Responsibilities

• Support the development and maintenance of the Information Security Program in accordance with GLBA, FDICIA, Sarbanes-Oxley, FFIEC, FACTA, and NYDFS Cybersecurity Requirements (23 NYCRR 500).
• Develop and maintain information security risk assessments to evaluate inherent risk, controls, and residual risk.
• Support third-party and vendor information security risk management activities, including due diligence, ongoing monitoring, and periodic risk assessments.
• Review vendor security documentation (e.g., SOC reports, cybersecurity questionnaires, policies, penetration test summaries) and identify security risks or control gaps.
• Assist in ensuring vendors comply with the Bank’s information security requirements, contractual security obligations, and regulatory expectations.
• Support the development and maintenance of vendor security procedures, standards, and documentation.
• Assist in tracking vendor risk issues, remediation efforts, and risk acceptance decisions.
• Assist in the selection, implementation, and maintenance of security tools used to monitor, detect, and alert on vulnerabilities and security events.
• Support incident detection, alerting, escalation, response, and reporting in accordance with established policies and procedures, including incidents involving third-party vendors.
• Work closely with Information Technology to review security controls and support the remediation of security-related issues.
• Assist in ensuring security requirements are considered during project planning, system changes, and vendor onboarding activities.
• Produce security reports, including key risk indicators (KRIs), key performance indicators (KPIs), and trend analysis.
• Support access control processes to ensure appropriate access to systems and data based on role and risk.
• Research emerging threats, vulnerabilities, and cybersecurity trends and recommend improvements to enhance the Bank’s security posture.
• Collaborate with business units to support proper data classification practices.
• Support the maintenance, testing, and improvement of the Bank’s business continuity and disaster recovery program, including business impact analysis (BIA).
• Assist in the review of Information Technology changes to ensure alignment with security best practices.
• Support employee security awareness and training initiatives, including phishing simulations and educational materials.
• Assist with regulatory compliance monitoring and respond to audit and examination requests as required, including requests related to vendor oversight.
• Perform other duties as assigned.

Benefits

• Medical, Dental, and Vision insurance (with HSA, FSA, and Commuter Benefits options)
• Company-paid Life Insurance and Accidental Death & Dismemberment (AD&D)
• Company-paid Long-Term Disability Insurance
• Additional Life and AD&D Insurance for employee, spouse, and dependents
• Voluntary Short-Term Disability Insurance
• Pet Insurance
• Legal Services Plan
• Accident Insurance
• Hospital Indemnity Insurance
• Cancer Care Insurance
• 401(k) Plan with Company Match
• Paid Personal Time Off (PTO)
• Paid Company Holidays
• Annual Performance Bonuses
• Annual Salary Increases
• Company-sponsored Events
• Employee Contests and Recognition Programs

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level