Security Compliance Analyst

U.S. Century Bank is hiring a Security Compliance Analyst to support security controls and compliance with its information security, cybersecurity, and incident response programs. The role conducts security reviews and monitoring, supports risk assessments and audits, and assists with access management and cybersecurity reporting.

What you'll do:

• Information Security and Cybersecurity Program (ISP) – Support security and risk management internal controls and business processes to ensure compliance with the Bank’s Information Security, Cybersecurity, and Incident Response programs
• Security Reviews, Monitoring, and Testing – Assist with the ongoing monitoring of business applications and general computing controls established to protect information systems and assets (e.g., infrastructure, network, applications, hardware). These duties may include performing periodic reviews and tests of various security controls to assess effectiveness and adherence to Bank policy and security standards
• Security Risk Assessments and External Engagements – Actively participate with the team in threat hunting exercises, incident tabletop exercises, disaster recovery exercises, network penetration tests and other relevant external engagements. Provide support to fulfill information requests for security audits and consulting engagements
• Management Reporting Support – Assists the team with data gathering, aggregation and reporting of key performance and risk indicators to facilitate the overall monitoring of cybersecurity posture. Also assist the SVP ISO with preparation of periodic security briefings and presentations for Management and Board-Level Committees
• Access Management, Application Controls and FDICIA ITGC Compliance – Support the team in maintaining documentation for user access profiles for critical applications. Assist with the data staging, analysis, and preparation of user entitlement review for applications and systems. Support with periodic monitoring of administrator and user activity for critical applications and system. Escalate to Manager, instances of non-compliance, or suspected anomalies. Assist with updating logs to maintain key performance indicators for the area
• Other Tasks and Special Projects – Assist with special projects to improve the security posture of the Bank. Strategic initiatives or other special tasks may be assigned by the Supervisor or the Division head from time to time