Information Security Engineer

City Bank•Lubbock, TX

1d•Onsite

About The Position

The Information Security Engineer is responsible for designing, implementing, operating, and continuously improving the Bank’s information security program. The position provides hands-on engineering and operational ownership across security operations, threat and vulnerability management, identity and access management, incident response, cloud security, and AI governance. The engineer serves as a key technical resource for securing enterprise systems, managing and optimizing security technologies, and aligning security practices with regulatory requirements and emerging threats. The role operates with a high degree of autonomy and accountability and collaborates with IT, Risk, and business units.

Responsibilities

Design, implement, and maintain enterprise security controls and technologies.
Monitor security systems, analyze logs and alerts, investigate activity, and improve detection and response capabilities.
Perform vulnerability scanning, threat monitoring, and risk analysis; prioritize, track, and coordinate remediation with IT and business stakeholders.
Lead incident response, including investigation, containment, eradication, and recovery; perform forensic analysis and document findings; participate in after-hours response as needed.
Own and administer the Bank’s Identity and Access Management (IAM) program, including identity governance, provisioning, deprovisioning, authentication, authorization, role-based access, privileged access management, and identity lifecycle processes.
Ensure access decisions align with least privilege and regulatory expectations; oversee access certifications and improve identity control effectiveness.
Support and administer governance processes for the Bank’s AI systems and tools, including inventory, risk classification, and monitoring of AI agents and solutions.
Ensure AI governance aligns with internal policies, regulatory expectations, and model risk management requirements; collaborate with stakeholders to evaluate and securely onboard AI use cases.
Design, implement, and maintain cloud security controls aligned with the Bank’s architecture; monitor cloud environments for misconfigurations, threats, and compliance issues.
Administer and optimize security technologies, including firewalls and endpoint security platforms; evaluate and implement new security solutions as needed.
Support oversight of data protection, classification, and retention practices, including management and reporting for supporting tools.
Develop and present security metrics, dashboards, and reports for leadership, committees, and auditors; support risk reporting and program maturity tracking.
Support development and execution of security awareness and training programs, track effectiveness, and recommend improvements.
Participate in vendor onboarding, risk assessments, and ongoing monitoring; support administration of vendor risk management tools.
Support business continuity and disaster recovery planning, testing, and improvement efforts.