• Report known and potential information security risks and vulnerabilities to Credit Union management. Track the status of known information security vulnerabilities and work with IT and business departments to promote remediation or acceptance of known exposures.
• Maintain an inventory of VPN, mobile device, and file sharing site users and ensure only active, authorized individuals have external access to Credit Union data.
• Conduct user awareness training for new employees during new employee orientation. Conduct periodic user security awareness campaigns and training.
• Prepare, document, and maintain standard operating procedures and technical references for security solutions/tools.
• Make information security a cultural focus of the organization by utilizing various methods such as awareness campaigns and branch visits.
• Manage and maintain all IT security related applications, hardware, and tools. Ensure all aspects of these products are working as intended and are updated against the latest threats.
• Perform routine monitoring and analysis of system logs, user activity reports, and other security related alerts and reports in order to identify suspicious, unauthorized, or malicious activity.
• Review the configuration of workstations, servers, and network devices, including firewalls and other external facing devices, on a periodic basis. Report any potential security risks or violations of Credit Union security best practices to management.
• Ensure patch management is completed in an accurate and timely manner.
• Assist with malware analysis, threat modeling and deployment/usage of a malware detonation device/sandbox to test for potential malicious software or websites.
• Maintain knowledge of relevant laws and standards including Gramm-Leach-Bliley Act, National Credit Union Administration (NCUA), Federal Financial Institutions Examination Council (FFIEC) and National Institute of Standards and Technology (NIST) requirements and standards.
• Determine security violations and inefficiencies by conducting periodic audits and vulnerability assessments. Determine the potential impacts and mitigations and relay to appropriate staff for remediation.
• Assist in collecting documentation from IT and business departments in preparation for NCUA and external audit annual exams.
• Assist with incident response, mitigation, and reporting.
• Maintain up-to-date knowledge and skills in the Information Security field through yearly training and skills maintenance.
• Follow all Credit Union policies, procedures and regulations.
• Represent the Credit Union in a professional manner (including but not limited to appearance, behavior and performance).
• Maintain regular and predictable attendance.
• Work cooperatively with others.
• All other duties as assigned.

Required Qualifications:

• Bachelor's degree from four-year college or university or related experience or equivalent combination of education and experience.
• Individual must possess the knowledge skills and ability required to execute the essential functions in a satisfactory manner.
• Ability to read, analyze and interpret general business periodicals, professional journals, or governmental regulations.
• Ability to write reports, and procedure manuals and use proper grammar, punctuation and spelling.
• Ability to effectively present information and respond to questions from groups.
• Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions and decimals.
• Ability to compute rate, ratio and percent.
• Ability to solve practical problems and deal with a variety of concrete variables in situations where only limited standardization exists.
• Ability to interpret a variety of instructions furnished in written or oral form.
• Knowledge of IT networks.
• Ability to operate related computer applications including Word, Excel and email.
• Proficient typing skills.
• Ability to operate other business equipment including adding machine, coin, and money counting machines and telephone.

Preferred Qualifications:

• Two or more years of experience in Information Technology.
• IT security certifications.
• At least one professional certification in IT Security preferred.
• Valid driver’s license.

N/A