What are the responsibilities and job description for the Information Security Specialist position at Delta Community Credit Union?
Position Information Security Specialist
Job Code-8431
req5567
Vinings
Full Time
Job Description
Create your success story at Delta Community Credit Union – where opportunity meets purpose. Through our commitment to excellence, Delta Community has received numerous industry awards and earned the trust and loyalty of our employees, members and the metro Atlanta community. We value talent, encourage growth and keep community at the heart of everything we do. That’s why we’re one of Atlanta’s Best Places to Work! Whether you’re starting your professional journey or navigating the next step in your career, we invite you to join the Delta Community Credit Union team.
The Information Security Specialist supports the Risk Management Department regarding all aspects of the enterprise-wide information security risk management program. Responsibilities include, but are not limited to, participating in the development and analysis of Information Security risk assessments, to include analyzing assessment findings, assisting with developing assessment reports, leveraging metrics and methodologies, and working with key stakeholders across the Credit Union to ensure information security risks are managed to accepted tolerance levels. This unique position requires a self-starting approach, which may involve delivering information security related presentations to senior leaders, to effectively set and manage the ideal balance between security and business priorities.
The Information Security Specialist will be familiar with information security incident management and overall have a strong security acumen and risk management background, capable of working closely with our IT security operations and engineering groups, IT Audit, and Enterprise Risk Management teams. The ideal candidate will be an individual who performs as a security consultant to internal stakeholders and will stay current with trends and risks through training, user groups, certifications and other available methods. With a keen focus on staff training and awareness, this position may also be tasked to work closely with our HR & Training partners to expand the information security training and awareness program and analyze trends related to user behavior.
Practices safety-conscious behaviors in all operational processes and procedures.
Essential Functions
Job Qualifications
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Required Minimum Qualifications
Job Code-8431
req5567
Vinings
Full Time
Job Description
Create your success story at Delta Community Credit Union – where opportunity meets purpose. Through our commitment to excellence, Delta Community has received numerous industry awards and earned the trust and loyalty of our employees, members and the metro Atlanta community. We value talent, encourage growth and keep community at the heart of everything we do. That’s why we’re one of Atlanta’s Best Places to Work! Whether you’re starting your professional journey or navigating the next step in your career, we invite you to join the Delta Community Credit Union team.
The Information Security Specialist supports the Risk Management Department regarding all aspects of the enterprise-wide information security risk management program. Responsibilities include, but are not limited to, participating in the development and analysis of Information Security risk assessments, to include analyzing assessment findings, assisting with developing assessment reports, leveraging metrics and methodologies, and working with key stakeholders across the Credit Union to ensure information security risks are managed to accepted tolerance levels. This unique position requires a self-starting approach, which may involve delivering information security related presentations to senior leaders, to effectively set and manage the ideal balance between security and business priorities.
The Information Security Specialist will be familiar with information security incident management and overall have a strong security acumen and risk management background, capable of working closely with our IT security operations and engineering groups, IT Audit, and Enterprise Risk Management teams. The ideal candidate will be an individual who performs as a security consultant to internal stakeholders and will stay current with trends and risks through training, user groups, certifications and other available methods. With a keen focus on staff training and awareness, this position may also be tasked to work closely with our HR & Training partners to expand the information security training and awareness program and analyze trends related to user behavior.
Practices safety-conscious behaviors in all operational processes and procedures.
Essential Functions
- Perform continual information security risk analysis and reporting
- Assist in the expansion of an information security risk-based metrics and reporting framework
- Participate in the enhancement of the information security awareness program
- Support information security related projects and implementation of new security solutions (
- Support Identity and Access Management (IAM) initiatives including access entitlement reviews and overall governance to ensure compliance with corporate polices with corporate polices
- Provide internal consultative support to enterprise project managers, development teams, IT engineering and CU business leaders
- Assist in the detection and identification, assessment, prediction, and control performance monitoring of information security risks throughout the organization
- Facilitate information security incident response triage
- Participate in regular and ad-hoc analysis of security audits and IT controls reviews, including security penetration testing, third party vendor management reviews, and design recommendations
- Must be able to translate business needs into solutions, and work well with all parts of the Credit Union to convert information security risk data insights into business actions
- Strong team player skills and the ability to work harmoniously with a diverse workforce, and share knowledge with others who may have a willingness to learn about information security trends and topics
- Assist in third party risk assessment to identify and mitigate risks introduced by vendors, partners, or other external entities that access or interact with the organization’s systems or data
- Deliver information security training and awareness workshops or seminars
- This description reflects management’s assignment of essential functions; it does not prescribe or restrict the tasks that may be assigned.
- This job description is subject to change at any time
Job Qualifications
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Required Minimum Qualifications
- Bachelor’s Degree in Information Systems, Computer Science, Business or related discipline
- 2 years’ overall experience with information security related administration across multiple operating systems and technologies
- Must demonstrate experience and a sound foundational understanding of information security best practices and risk mitigation
- Excellent oral and written communication skills with experience communicating security information to IT and non-IT business leadership
- Complies with all Credit Union policies and procedures including those related to Bank Secrecy Act regulations
- Master’s Degree in Information Systems, Computer Science, Business or related discipline
- 4 years’ overall experience with information security related administration across multiple operating systems and technologies
- Industry recognized security certification, or working to obtain (e.g. CISSP, CISM, GSEC, or CEH)
- Working knowledge of conceptual security design considerations, or hands-on experience as a security professional delivering on critical security projects, including scripting, programming, and forensics
- Comfortable with analyzing the output and best-practice usage of security technologies and software
- Experience in financial services, with a working knowledge of regulatory requirements and industry data security standards (e.g. FFIEC, PCI, and GLBA), conducting red-team exercises, and security awareness training
- Experience with IT risk assessments with a working knowledge of methodologies and frameworks, compliance standards, and IT security controls testing (e.g. NIST 800-53 r5, COBIT, NIST CSF, ISO27001, and CIS Critical Security Controls)
- Familiarity with Governance, Risk and Compliance platforms, including solutions such as RSA Archer
- Familiarity with business intelligence BI / data analytics software such as MicroStrategy, Teradata, Tableau and Power BI
- Data manipulation and analysis, building or validating advanced statistical models (including regression and classification models)
- Familiarity with threat hunting and conducting data breach simulation exercises
- Medical, Dental and Vision Coverage
- Basic Life and Accidental Death & Dismemberment Insurance, Long Term Disability, Employee Assistance Program and MyAdvocate
- Supplemental Insurance or Voluntary Insurance
- 401(k) Plan with Company Match
- Vacation, Holidays and Personal Time Off
- Paid Maternity and Paternity Leave
- Pre-tax Health and Dependent Care Spending Accounts
- Benefit Choice Program
- Health Reward Dollars
- Discount on Gym Reimbursement and Identity Theft Programs
- Legal Services