Senior Information Security Analyst

OceanFirst Bank • Toms River, NJ

1d • Hybrid

About The Position

At OceanFirst Bank, the Senior Information Security Analyst helps develop, implement, and manage an enterprise-wide information security framework in conjunction with the Information Security Operations Manager. The role establishes defenses against security vulnerabilities and breaches and helps create and maintain procedures for business and technology units to support a compliant, risk-focused security platform. The analyst partners with business and functional units on the bank’s Business Continuity, Disaster Recovery, and Incident Response plans, and implements monitoring and testing to assess adherence to security protocols.

The role supports information security operations across the organization, including threat detection, security solution deployment and maintenance, incident reviews, vulnerability management, identity and access management, security assessments, regulatory compliance, security awareness training, and digital forensic investigations. It also provides departmental leadership and manages resources in support of strategic goals.

The position is based in an office environment and allows a hybrid schedule after initial onboarding: three days in the office and two days remote. Travel throughout the bank’s footprint is required.

Requirements

• Bachelor’s degree in a related discipline or equivalent work experience.
• Five to six years of progressively responsible professional experience in an Information Technology or Information Security environment, with demonstrated experience in disaster recovery, information security, and/or IT audit.
• Prior experience implementing system solutions in a banking environment.
• Hands-on deployment of Splunk and Splunk ES use cases and log ingestion.
• Experience creating Splunk dashboards and queries.
• Solid understanding of network and system intrusion and detection methods, including technologies such as next-generation EDR, SIEM, and hacking tactics, techniques, and procedures.
• Experience with Nessus, Metasploit, Splunk, CrowdStrike, and Fortinet firewalls.
• Ability to partner with internal clients and vendors to align strategy with deliverables, identify business challenges, and develop alternatives to mitigate them.
• Strong service management and service delivery orientation.
• Strong written, oral, and interpersonal communication skills, including the ability to present ideas in user-friendly language to varied audiences.
• Ability to work in a changing environment and lead implementation of change.
• Ability to assess the potential impact of change management initiatives on business financials and performance.
• Ability to prioritize and execute tasks effectively in a high-pressure environment.
• Ability to provide organized and effective leadership and management at the departmental level for projects, incident response, and team resources.
• Ability to travel throughout the bank’s footprint.
• Ability to operate a computer and communicate to exchange simple to complex information with individuals and groups.

Nice To Haves

• Industry-recognized information security certifications are strongly desired, such as CompTIA Security+, CEH (Certified Ethical Hacker), GSEC (SANS GIAC Security Essentials), CISSP (Certified Information Systems Security Professional), or CISM (Certified Information Security Manager).

Responsibilities

• Detect, identify, and alert stakeholders to possible attacks, anomalous activity, and misuse.
• Use security solutions—including SIEM, IPS/IDS, endpoint security, network security, database security, firewalls, cloud proxy, network access control, and network segmentation—to identify security risks.
• Ensure systems and controls protect the confidentiality, integrity, and availability of enterprise data.
• Deploy, integrate, and initially configure new and enhanced information security solutions with IT partners, following best practices and documented procedures.
• Maintain information security procedures, processes, guidelines, and other documentation to support security and regulatory compliance.
• Coordinate and document incident reviews and ensure controls are implemented to prevent or mitigate recurring security and continuity incidents or data breaches.
• Work with IT to maintain Business Continuity and Disaster Recovery plans, identify security risks, and develop mitigating controls.
• Communicate with IT peers about security goals, solicit feedback, and foster cooperation.
• Support information security activities involving the bank’s external network sources.
• Maintain current knowledge of security solutions, processes, attacks, and threat vectors, including the threat landscape for banking and financial services.
• Help deliver enterprise-wide security awareness training.
• Participate in Incident Response Plan tabletop exercises.
• Create and maintain vulnerability scans, analyze results, and incorporate findings into reports and dashboards.
• Update security software tools to current versions.
• Review and recommend security policies, controls, and cyber incident response planning.
• Approve and oversee identity and access management policies and system access control.
• Ensure continued compliance with applicable laws and regulations.
• Schedule and participate in periodic security assessments.
• Select and recommend security products as needed.
• Coordinate electronic discovery and digital forensic investigations.
• Maintain an inventory of technology assets classified by sensitivity and criticality.
• Review relevant logs for security events.
• Lead or manage departmental efforts and resources to achieve strategic goals.
• Provide departmental leadership and management for projects, incident response, and team resources.
• Act as a trusted advisor for enterprise initiatives, incidents, and projects.

Benefits

• On-site fitness facility at Red Bank and Toms River headquarters offices
• Hybrid schedule after initial onboarding: three days in the office and two days remote
• Employee perks and discount programs
• Tuition assistance
• Incentive compensation program
• Professional development opportunities

What This Job Offers

• Job Type: Full-time
• Career Level: Senior