Information Security Risk Analyst II

Mariner Finance•Nottingham, MD

1d•$93,772 - $118,076

About The Position

Join Mariner Finance! Since 1927, the Mariner Finance family of companies has provided customers with creative, flexible, and convenient lending options. Headquartered in Baltimore, Mariner Finance operates coast-to-coast with physical locations in over half the states. With a growing number of employees, superior customer service remains the cornerstone of our business, and we pride ourselves in delivering a variety of loans with an enhanced focus on exceptional service. We work with customers to find options that are beneficial to their specific needs, which is why we are recognized by our customers as one of the community’s consumer finance companies of choice.

Requirements

Bachelor’s degree in a related discipline (Computer Science, Information Systems Management, Engineering, or similar); additional, applicable years of experience may be substituted for the bachelor’s degree.
Minimum of five (5) years of security administration experience and vulnerability assessment/management experience.
Certifications: CISA/CISM.
Strong system administration experience in a Microsoft Windows environment.
Strong experience using scripting languages to automate tasks and manipulate data.
Strong experience developing technical diagrams, topology maps, reports, and presentations with various software applications.
Demonstrated ability to explain complex ideas and concepts both verbally and in writing to technical and nontechnical audiences.
Ability to work collaboratively inter-departmentally and across business functions.
Passion for providing excellent customer service.
Ability to work in a fast-paced environment.
Ability to multitask, change direction, effectively prioritize, and meet deadlines with both local and remote staff.
Must have ability to work with limited supervision and be able to independently determine tasks to complete on a daily basis.
Ability to occasionally adjust work schedule to meet business needs (occasional after-hours and weekend requirements).
Excellent interpersonal skills necessary to communicate professionally and effectively with vendors, service dealers, customers, and all levels of company staff.

Nice To Haves

Certifications: CISSP.
Knowledge of web security.
Experience with Payment Card Industry (PCI), ISO Standards, and Risk programs.
Experience with security planning and incident response.
Experience working within or with audit and compliance teams.
Working knowledge of OWASP.

Responsibilities

Perform all functions required to support daily information security risk operations.
Perform network, system, computer, and application vulnerability assessments to identify, evaluate, and mitigate security risks, threats, and vulnerabilities to maintain availability, integrity, and confidentiality for the organization.
Ensure Mariner’s adherence to industry standards and best practices for all Information Security-related responsibilities. This includes but is not limited to: datacenters, networks, telephony, systems, databases, applications, and physical security systems.
Provide support to Mariner Finance's Payment Card Industry (PCI) program.
Provide technical expertise and guidance about security issues to senior management.
Assist in the creation and distribution of effective, periodic communications in the forms of blog posts or job aids to the company about relevant security matters.
Contribute to the development of security policies and procedures in all phases of planning, implementation, training, and monitoring/enforcement.
Assist in ensuring that appropriately managed controls are in place to meet the legal and regulatory compliance requirements of all Mariner Finance networks and systems.
Validate and tests security architecture and design solutions to produce detailed engineering specifications with recommended vendor technologies.
Build and maintain relationships with teams and third parties for security development and support issues.
Participate in vendor management processes to ensure the security of Mariner’s corporate and customer data.
Work with the legal team to evaluate security controls.
Collaborate with senior team members to define corporate security requirements and evaluate systems to determine if they are appropriate and comply with established security standards.
Perform internal risk assessments in cooperation with IT staff and business units.
Manage external risk assessment/third-party and internal audit process in cooperation with IT and Compliance departments.
Validate results of all internal and external risk assessments and provide prioritized remediation plans to appropriate staff.
Track and coordinate validation of remediation.
Oversight management for awareness program, privilege management system, brand protection technology, and enterprise managed security service provider.
Be a member of the Security Incident Response Team and provides the highest level of technical consultancy to ensure problem resolution is achieved in the shortest possible timeframe.
Participate in investigations of security incidents while preparing incident report documents.
May perform additional functions depending on market demand and staffing in order to provide consistent quality customer service.