IT Security Analyst

The First National Bank of Fort Smith•Fort Smith, AR

4h•Onsite

About The Position

The IT Information Security Analyst supports the Bank’s IT Department and Information Security Program by monitoring, analyzing, and protecting information systems to safeguard organizational data. This role works with IT, Risk Management, and the Information Security Officer to identify vulnerabilities, respond to security events, support regulatory compliance, strengthen day-to-day security operations, and provide documentation for exam readiness, ISO program oversight, and board reporting.

Requirements

High School Graduate or General Education Degree (GED)
Excellent knowledge of Windows operating systems, including Windows Server
Working knowledge of VMware vCenter and vSphere
Excellent knowledge of Microsoft Office suite of products
Network and Internet connectivity knowledge – including switch, router, firewall and wireless management.
Strong understanding of Network security, endpoint security, and identity management
Strong understanding of Security monitoring tools (SIEM, EDR, MDR)
Knowledge of banking regulatory frameworks (FFIEC, GLBA, NIST)
Risk assessment and control evaluation skills
Analytical and problem-solving ability
Strong written and verbal communication skills (especially audit/regulatory communication)

Nice To Haves

Bachelor’s degree or higher in I.T. related field
Two or more years of experience in Cybersecurity environment
Bachelor’s degree in computer science, Information Systems, or related field
Certifications in CISSP, CISM, CISA, Security+
Experience in financial services or regulated environment

Responsibilities

Monitor security tools (SIEM, MDR, endpoint protection, and network controls) for suspicious activity
Assist ISO with investigation of security events and escalate incidents in accordance with the bank’s incident response procedures
Document incidents, root cause analysis, and remediation actions
Support ISO with phishing simulations and user-awareness initiatives
Support ISO in maintaining risk assessments for systems, applications, and vendors
Review and assist with security considerations related to third-party connections and service providers
Perform vulnerability scanning and track remediation efforts
Monitor emerging threats and assess exposure to the institution
Coordinate patch management and secure configuration practices
Participate in penetration testing and external audit remediation
Maintain and enforce security policies, standards, and procedures
Ensure controls align with the organization’s information security program and risk appetite
Configure and validate security tools such as: Firewalls, MFA, endpoint protection, Email security and web filtering, Data protection and encryption controls
Assist in third-party risk and vendor access reviews
Prepare reports on: Security posture, Risk findings, Incident trends
Maintain documentation
Assist ISO with Business Continuity Planning (BCP) and Disaster Recovery (DR) testing
Ensure recovery strategies align with regulatory expectations
Assist in audit preparation, evidence gathering, and control documentation for IT department