Information Security Analyst

Transpecos Banks SSB•San Antonio, TX

8d•Onsite

About The Position

The Information Security Analyst protects the bank’s digital assets and infrastructure, including cloud infrastructure, from cyber threats and manages information security risks in alignment with industry standards and regulatory expectations. The role monitors systems, analyzes security incidents, conducts risk assessments, assists with Identity & Access Management (IAM) processes, supports regulatory compliance, and helps establish sound governance and effective internal controls. The position is based at the bank’s historic downtown San Antonio headquarters and reports to the CISO. It supports audits and regulatory examinations, maintains security policies and documentation, monitors security awareness and risk remediation, and assists with business continuity and disaster recovery planning. The role has no supervisory responsibilities.

Requirements

Bachelor’s degree in Business Administration, Finance, Risk Management, Law, or a related field.
2–4 years of experience in an information security or cybersecurity role; banking or financial services experience is preferred.
Familiarity with banking regulations, Interagency Information Security Standards, and cybersecurity frameworks such as NIST CSF/RMF, PCI DSS, FFIEC, FDIC Part 364 Appendix B, and GDPR.
Strong technical aptitude with Microsoft Azure and AWS cloud infrastructure and experience managing cloud security tools such as Sentinel, Defender, Purview, AWS Security Hub, and other native security tools.
Strong analytical and problem-solving skills.
Knowledge of risk assessment methodologies and compliance frameworks.
Ability to manage multiple priorities and work collaboratively in a team environment.
Ability to interpret instructions in written, oral, diagram, or schedule form.
Ability to lift up to 20 pounds.

Nice To Haves

Certifications such as CRISC, CISA, CISM, CISSP, or equivalent.
Experience in banking or financial services.

Responsibilities

Monitor and analyze security alerts from SIEM, IDS/IPS, DLP, and endpoint protection systems.
Investigate and respond to cybersecurity incidents, including root cause analysis and remediation.
Conduct vulnerability assessments and penetration testing; recommend mitigation strategies and ensure remediation plans are completed timely.
Support Secure Development Lifecycle (SDLC) processes and ensure secure development practices are embedded and enforced throughout the SDLC.
Manage processes for securing the bank’s cloud infrastructure, particularly Microsoft Azure and AWS.
Monitor regulatory requirements, threats, and industry trends; advise leadership on necessary changes and improvements, and generate reports and metrics for management and regulatory bodies.
Maintain and update information security policies, procedures, and standards in alignment with industry frameworks and regulatory requirements.
Develop and maintain security documentation, playbooks, and training materials.
Manage and monitor employee security awareness, education, and training.
Perform internal and vendor information security risk assessments, including data privacy and other regulatory risk assessments, and lead remediation of identified control gaps.
Assist with management and testing of the bank’s Business Continuity Plan and Disaster Recovery Plan.
Support centralized IAM governance and daily access-request processing and provisioning.
Monitor and report information security metrics; prepare reports and dashboards for senior management and stakeholders, including status of risk remediation activities.
Support audits, inspections, and reviews conducted by regulators and external parties.
Carry out responsibilities consistently with the organization’s values, operating principles, policies, applicable laws, and commitment to continuous improvement and process excellence.
Perform other duties as assigned.