Senior Information Security Analyst

Braemar Hotels & Resorts • Red Bank, NJ

12h • $103,000 - $147,000 • Hybrid

About The Position

The Senior Information Security Analyst develops, implements, and manages an enterprise-wide information security framework in conjunction with the Information Security Operations Manager. The role helps establish defenses against security vulnerabilities and breaches, leads the creation and maintenance of security procedures, and supports a compliant, risk-focused information security platform. It partners with business and technology units to maintain Business Continuity, Disaster Recovery, and Incident Response plans, and implements monitoring and testing to ensure adherence to security protocols.

The position detects and investigates potential attacks, anomalous activity, and misuse; deploys and maintains security solutions; protects the confidentiality, integrity, and availability of enterprise data; and supports regulatory compliance. It also coordinates incident reviews, security assessments, vulnerability scanning, security awareness training, electronic discovery, digital forensics, and incident response exercises. The analyst leads or manages departmental efforts and resources in support of strategic goals.

The role has extensive external contact with equipment and service suppliers and ongoing internal contact with department managers, senior management, and directors. Work is in an office environment, with the ability to travel throughout the Bank footprint. A hybrid schedule is available after initial onboarding: three days in the office and two days remote.

Requirements

• Bachelor's degree in a related discipline or equivalent work experience.
• Five to six years of progressively responsible professional experience in an Information Technology or Information Security environment.
• Demonstrated experience in disaster recovery, information security, and/or IT audit.
• Prior experience implementing system solutions in a banking environment.
• Hands-on deployment of Splunk and Splunk ES use cases and log ingestion.
• Experience creating Splunk dashboards and queries.
• Solid understanding of network and system intrusion and detection methods, including technologies such as EDR, SIEM, and hacking tactics, techniques, and procedures.
• Experience with Nessus, Metasploit, Splunk, CrowdStrike, and Fortinet firewalls.
• Ability to partner with internal clients and vendors to align strategy with deliverables, identify business challenges, and develop alternatives to mitigate them.
• Strong service management and service delivery orientation.
• Strong written, oral, and interpersonal communication skills.
• Ability to present ideas in user-friendly language to varied audiences.
• Ability to work in a changing environment and lead implementation of change.
• Ability to assess the impact of change initiatives on business financials and performance.
• Ability to prioritize and execute tasks effectively in a high-pressure environment.
• Ability to provide organized and effective departmental leadership and management for projects, incident response, and team resources.
• Ability to act as a trusted advisor for enterprise initiatives, incidents, and projects.
• Ability to operate a computer, communicate information ranging from simple to complex, and travel throughout the Bank footprint.

Nice To Haves

• Industry-recognized information security certifications are strongly desired, including CompTIA Security+, CEH (Certified Ethical Hacker), GSEC (SANS GIAC Security Essentials), CISSP (Certified Information Systems Security Professional), or CISM (Certified Information Security Manager).

Responsibilities

• Develop, implement, and manage an enterprise-wide information security framework with the Information Security Operations Manager.
• Help lead the creation and maintenance of information security procedures for business and technology units.
• Partner with business and functional units to create and maintain Business Continuity, Disaster Recovery, and Incident Response plans.
• Implement monitoring and testing to ensure organization-wide adherence to information security protocols.
• Detect, identify, and alert on possible attacks, anomalous activities, and misuse activities using security solutions.
• Ensure systems and controls protect the confidentiality, integrity, and availability of enterprise data.
• Deploy, integrate, and initially configure new and enhanced information security solutions with IT partners.
• Maintain information security documentation, including procedures, processes, and guidelines, to support security and regulatory compliance.
• Coordinate and document incident reviews and ensure controls are implemented to prevent or mitigate recurrence of security and continuity incidents or data breaches.
• Work with IT to maintain Business Continuity and Disaster Recovery plans, identify security risks, and develop mitigating controls.
• Communicate with IT peers about security goals, solicit feedback, and foster cooperation.
• Support information security activities involving the bank's external network sources.
• Maintain current knowledge of security solutions, processes, attacks, and threat vectors, including the banking and financial services threat landscape.
• Help deliver enterprise-wide security awareness training.
• Participate in Incident Response Plan tabletop exercises.
• Create and maintain vulnerability scans, analyze scan data, and incorporate findings into reports and dashboards.
• Update security software tools to current versions.
• Review and recommend security policies, controls, and cyber incident response planning.
• Approve and oversee identity and access management policies and system access control.
• Ensure continued compliance with applicable laws and regulations.
• Schedule and participate in periodic security assessments.
• Choose and recommend security products as needed.
• Coordinate electronic discovery and digital forensic investigations.
• Ensure the technology asset inventory is maintained and assets are classified by sensitivity and criticality.
• Review relevant logs for security events.
• Lead or manage departmental efforts and resources to accomplish departmental strategic goals.

Benefits

• On-site fitness facility at the Red Bank and Toms River headquarters offices.
• Hybrid schedule after initial onboarding: three days in the office and two days remote.
• Employee perks and discount programs.
• Tuition assistance.
• Incentive compensation program.
• Professional development opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior