Description

Role
Supports the monitoring, administration, reporting, and development of, and incident response for, IT Security and risk-based monitoring systems, including, but not limited to, IDS/IPS, security information and event monitoring, vulnerability management, environmental monitoring, and user activity. Provides tier one information security support to employees, while investigating and escalating alerts as appropriate. In the event of an IT security incident or breach, responsible for supporting the IT Security Incident Response Team.
Major Duties and Responsibilities

• In coordination with the credit union’s SOC services, IT Operations and Infrastructure team actively monitors server logs, firewall logs, intrusion detection logs, and network traffic for unusual activity. Thoroughly investigate information security issues to determine root cause and potential impact. Escalate investigations as needed.

• In coordination with the credit union’s SOC services, IT Operations and Infrastructure team actively monitors server logs, firewall logs, intrusion detection logs, and network traffic for unusual activity. Thoroughly investigate information security issues to determine root cause and potential impact. Escalate investigations as needed.

• In coordination with brand protection vendor Keeps the credit union and membership protected by investigating and working with remediating spoofed websites, fake social media profiles, fake apps and inform customers of security concerns with their devices.

• In collaboration with the IT Security Team, helps support third party awareness scans and conducts periodic audits on current controls, policies, and procedures to determine effectiveness. Compiles reports and information for internal and external audits.

• Works with vendors in relation to information security activities, third party awareness scans, and technology topics. Helps define security best practices and support the identification and remediation of vulnerabilities. 

• Stay on top of cyber security trends through monitoring security sites, participation in peer groups, continuing education, and conferences/webinars.

• Manages the cyber security awareness training program for employees. Maintains training platform, makes updates, and delivers relevant trainings.

Qualifications

Knowledge and Skills
EXPERIENCE
Two to Five years of similar or related experience, including time spent in preparatory positions. Previous experience in an IT role with Information Security duties is preferred.
EDUCATION/CERTIFICATIONS/LICENSES
A two-year college degree or completion of a specialized course of study at a business or trade school equivalent to approximately 64 credit hours. Relevant certifications (Security /CySA ), or relevant work experience preferred.
INTERPERSONAL SKILLS
A significant level of trust and diplomacy is required to be an effective subject matter expert in the position. In-depth dialogues, conversations and explanations with members, direct and indirect reports and outside vendors of a sensitive and/or highly confidential nature is a normal 
part of the day-to-day experience. Communications can involve motivating, influencing, educating and/or advising others on matters of 
significance. Must be able to communicate effectively with audiences that have a wide range of technical proficiency, goals and needs from IT subject matter experts, members and executives.
OTHER SKILLS
Ability to speak Spanish is a plus.

ADA Requirements
PHYSICAL REQUIREMENTS
Is able to bend, sit, and stand in order to perform primarily sedentary work with limited physical exertion and occasional lifting of up to 10 lbs. Must be capable of climbing / descending stairs in an emergency situation. Must be able to operate routine office equipment including computer terminals and keyboards, telephones, copiers, facsimiles, and calculators. Must be able to routinely perform work on computer for an average of 6-8 hours per day, when necessary. Must be able to work extended hours or travel off site whenever required or requested by management. Must be capable of regular, reliable and timely attendance.
WORKING CONDITIONS
Must be able to routinely perform work indoors in climate-controlled shared work area with minimal noise. This position may be eligible for remote work. 
MENTAL AND/OR EMOTIONAL REQUIREMENTS
Must be able to perform job functions independently or with limited supervision and work effectively either on own or as part of a team. Must be able to read and carry out various written instructions and follow oral instructions. Must be able to complete basic mathematical calculations, spell accurately, and understand computer basics. Must be able to speak clearly and deliver information in a logical and understandable sequence. Must be capable of dealing calmly and professionally with numerous different personalities from diverse cultures at various levels within and outside of the organization and demonstrate highest levels of member service and discretion when dealing with the public. Must be able to perform responsibilities with composure under the stress of deadlines / requirements for 
extreme accuracy and quality and/or fast pace. Must be able to effectively handle multiple, simultaneous, and changing priorities. Must be capable of exercising highest level of discretion on both internal and external confidential matters.

Acknowledgment

Nothing in the position description restricts management’s right to assign or reassign duties and responsibilities to this job at any time.
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. This Job description is not a contract and should not be construed as a guarantee of employment for any period of time. Topside FCU is an Equal Opportunity Employer and does not discriminate against employees or applicants based on race color, religion, sex/gender, national origin, disability, age, or any other category protected by law.