IT Security Analyst I

Dickinson Financial Corp•Kansas City, MO

3d•$50,000 - $75,000•Onsite

About The Position

The Information Technology Security Analyst I supports the Company’s Information Security Program by assisting with day‑to‑day security operations, monitoring activities, and administrative tasks. This role works closely with senior information security staff to help ensure the confidentiality, integrity, and availability of the Company’s systems, data, and information assets in accordance with the Gramm‑Leach‑Bliley Act (GLBA), FFIEC guidance, and internal information security policies and standards. This position is execution and task‑focused and provides exposure to core security functions while operating under defined procedures and supervision.

Requirements

Foundational understanding of information security concepts (CIA triad, phishing, malware, access control).
Ability to follow documented procedures and escalation paths.
Strong attention to detail and documentation skills.
Willingness to learn regulatory and compliance requirements (GLBA, FFIEC, NIST).
Proficiency in Microsoft Copilot required
Bachelor’s degree in Information Technology, Cybersecurity, or a related field (or equivalent experience).
0–2 years of experience in IT, security operations, help desk, or related technical support roles preferred.

Nice To Haves

Basic familiarity with common security tools (endpoint protection, email security, vulnerability scanners) preferred.
Entry‑level security certifications (e.g., Security+, SSCP) are a plus but not required.

Responsibilities

Assist with distributing Business Impact Analysis questionnaires to business units.
Track responses and follow up on missing submissions.
Normalize data into BIA worksheets or SharePoint lists.
Escalate inconsistencies or gaps for senior Information Security staff for review.
Engage with Disaster Recovery Program activities (and preparation.)
Assist with monitoring and triaging alerts related to malware, phishing, endpoint security, firewall activity, and intrusion detection systems.
Escalate potential security incidents to senior Information Security staff in accordance with established incident response procedures.
Engage with investigation and documentation of basic security events with support and direction from senior Information Security staff.
Assist with Security Infrastructure engagements and document discussed requirements where needed.
Assist senior staff with vulnerability management activities, including: collecting scan results, validating asset inventories, tracking remediation status, reviewing basic validation of remediation activities for mitigated systems.
Support information security risk assessments by: collecting evidence and documentation, assisting with questionnaires and control validation, maintaining risk tracking documentation.
Support collection of audit evidence in repositories and maintaining examiner request materials.
Assist with enhancements, enforcement, and communication of information security policies, standards, and procedures.
Support security awareness initiatives, including phishing simulations and employee training tracking.
Maintain accurate records related to security tools, incidents, and compliance activities.
Work with IT teams and business units to gather information required for security reviews.
Promptly escalate issues, risks, or control gaps to senior security staff.
Participate in team meetings, table‑top exercises, and training to build security knowledge.
Protect all client and bank information confidentially and follow all company policies.
Understand, communicate, and instill the Company’s mission, vision, and values (Pillars of Success).
Complete monthly training in a timely manner to ensure knowledge of bank regulatory requirements, policies, and procedures.
Working at the worksite during regular business hours and/or assigned hours.
Other specified duties as assigned.