IS Security Analyst I

STRIDE BANK NA•Oklahoma City, OK

11h•Onsite

About The Position

The IS Security Analyst I assists with implementing, administering, monitoring, and maintaining information security controls and technologies that protect the Bank’s systems, networks, applications, data, and users. The role supports day-to-day security operations through security-event monitoring, investigation of potential threats and vulnerabilities, incident response, security reviews, and assistance with regulatory and compliance requirements. The analyst documents security work, identifies recurring issues and control gaps, recommends practical improvements, and takes assigned issues and projects from identification through resolution or completion. The position also supports audits, examinations, assessments, and governance, risk, and compliance activities, including providing requested evidence and helping remediate findings. The analyst maintains awareness of relevant cybersecurity threats, technologies, IT trends, regulatory requirements, and security standards. Participation in after-hours security response activities may be required.

Requirements

High school diploma or equivalent.
1–2 years of experience in information technology, cybersecurity, networking, systems administration, or a related role.
Ability to communicate information security risks, technical findings, and recommended actions clearly to technical and non-technical audiences.
Strong analytical and problem-solving skills, including the ability to evaluate technical information and determine appropriate courses of action.
Working knowledge of information security principles, cybersecurity best practices, network security, endpoint security, authentication, access control, and internet communications.
Ability to investigate issues independently, determine next steps, and drive assigned work through resolution without continuous direction or close supervision.
Ability to identify opportunities for process, control, and security improvements and take initiative to pursue solutions.

Nice To Haves

Experience with security monitoring, vulnerability management, endpoint security, identity and access management, network security, or incident response.
CompTIA Security+ certification.
Additional cybersecurity certifications, education, training, or relevant technical experience.

Responsibilities

Monitor, analyze, and respond to security alerts, events, and notifications to identify potential threats, vulnerabilities, unauthorized activity, and policy violations.
Assist with developing, implementing, testing, and maintaining security policies, procedures, standards, processes, and technical controls.
Maintain accurate documentation of security investigations, incidents, vulnerabilities, remediation activities, system reviews, projects, and other security work.
Identify recurring security issues, control gaps, process deficiencies, and opportunities for improvement.
Recommend and assist with implementing solutions to reduce risk and improve security operations.
Own assigned security issues and projects through resolution or completion, coordinating with teams, tracking progress, documenting outcomes, and communicating status and risks to stakeholders.
Assist with security audits, examinations, assessments, and governance, risk, and compliance activities; provide documentation and evidence and assist with remediation of findings.
Maintain awareness of cybersecurity threats, attack techniques, vulnerabilities, security technologies, IT trends, regulatory requirements, and relevant security standards.
Participate in after-hours security response activities as required.
Perform other duties as assigned.