Information Security Specialist

Saco & Biddeford Savings Institution•Saco, ME

13h•Onsite

About The Position

Supports the Bank’s Information Security, Third-Party Management, and Business Continuity Management programs through day-to-day administration, monitoring, documentation, and coordination. This role helps strengthen regulatory compliance, operational resilience, and enterprise risk management by partnering with business units to maintain effective controls, complete key assessments, support testing and training activities, and address identified issues in a timely manner.

Requirements

Bachelor’s degree in information security, cybersecurity, business, finance, risk management, or a related field, or equivalent combination of education and experience.
One to three years of experience in information security, third-party risk management, business continuity, enterprise risk management, audit, compliance, or a related area preferred.
Experience with banking regulations, risk management principles, and control frameworks relevant to information security, third-party risk management, business continuity and incident management preferred.
Working knowledge of network and security technologies, such as firewalls, VPNs, multi-factor authentication, IDS/IPS, switches, routers, M365, and Active Directory, preferred.
Proficiency in Microsoft Outlook, Word, and Excel; familiarity with Ncontracts or similar governance, risk, and compliance platforms preferred.
Strong analytical, organizational, and documentation skills with close attention to detail.
Effective verbal and written communication skills, with the ability to work collaboratively across departments.
Ability to manage multiple priorities, adapt to changing needs, and work both independently and as part of a team.
Dependable and able to meet attendance, punctuality, confidentiality, and professional conduct standards.
Ability to travel to all Bank locations.

Responsibilities

Administers and uses the Bank’s third-party risk management, business continuity management, findings management, and enterprise risk management systems (Ncontracts) to support program activities, documentation, and reporting.
Supports the Third-Party Risk Management Program by partnering with business unit relationship managers and coordinating onboarding, due diligence collection, periodic reviews, risk assessments, issue tracking, and ongoing monitoring for third-party relationships.
Supports the Business Continuity Management Program by partnering with business units and coordinating and maintaining business impact analyses, departmental recovery plans, and related documentation to ensure key processes, dependencies, and recovery objectives remain accurate.
Assists with the development, coordination, documentation, and follow-up of business continuity and disaster recovery exercises and tests, including the tracking of results, lessons learned, and corrective actions.
Monitors and reviews daily logs, alerts, and reports from the Bank’s threat detection and SEIM system and other data management systems. Investigates irregularities and escalates suspicious activity, control gaps, and other issues to the Senior Information Security Specialist and Information Security Officer, as needed.
Supports information security operations by assisting with control monitoring, user awareness activities, phishing and social engineering exercises, policy and procedure maintenance, and periodic risk or control assessments.
Assists with incident response and issue management activities by documenting events, gathering information, coordinating follow-up, and tracking remediation to completion.
Maintains accurate program records, metrics, and reports for management, committees, audits, and examinations; elevates overdue items, exceptions, and emerging risks as needed.
Supports internal and external audits, regulatory examinations, and independent reviews by preparing documentation, responding to requests, and assisting with remediation of findings related to information security, third-party risk, business continuity, and enterprise risk management.
Conducts research and assists in the development, implementation, and ongoing maintenance of policies, procedures, standards, and program documentation.
Complies with applicable laws, regulations, and Bank policies and provides professional, courteous, and efficient service to internal and external customers.
Performs other duties, projects, and special assignments as required or assigned.
Attends all required meetings and training.
Completes assigned training.
Serves on various committees as assigned.