Information Security Operations Analyst

Job Description

First American Bank was founded in Chicago, and over the years has expanded throughout Wisconsin and Florida.  As the largest privately held bank in Illinois, we now have over 60 locations and assets of $8+ billion.  We are a community bank at heart with international expertise, traditional values, and a forward-looking philosophy. Our employees have the experience and vision to meet the needs of savers, borrowers, and businesses in the 21st century.  First American Bank can offer employees a level of visibility, career growth, and stability that is difficult to find in many larger corporations.

The Information Security Operations Analyst supports the Bank’s security operations, governance, and risk-management activities by identifying and assessing vulnerabilities, monitoring and coordinating the response to security events, evaluating emerging threats, and supporting timely remediation. This role collaborates with technology teams and business stakeholders to maintain security controls, configuration standards, operational workflows, access governance, awareness activities, and risk-acceptance processes. The analyst also evaluates emerging technology risks, maintains knowledge of cybersecurity practices and frameworks, and recommends improvements that strengthen the Bank’s preventative and detective capabilities.

DUTIES & RESPONSIBILITES

• Conduct in-depth analysis of identified vulnerabilities, assess associated risk, and collaborate with technology teams to prioritize and support timely remediation.
• Monitor, triage, track, and coordinate resolution of security alerts, events, and incidents; validate corrective actions; and identify opportunities to strengthen incident response processes.
• Participate in the planning, designing, implementation, and ongoing enhancement of Information Security projects, technologies, controls, and processes under the direction of the Information Security Manager and/or senior team members.
• Participate in the enterprise risk assessment process by contributing information security and technology risk expertise, supporting the identification, assessment, documentation, and monitoring of risks, and coordinating security exception and risk acceptance activities, including evaluation of compensating controls, remediation tracking, and escalation of items requiring further review.
• Support Information Security operational workflows, including security-related ticketing, issue tracking, remediation follow-up, control reviews, exception processing, and ongoing administration and oversight of assigned security technologies and processes.
• Provide analytical and technical security guidance and recommendations to other team members, other technology teams, security management, and business stakeholders.
• Monitor and analyze cybersecurity threat intelligence and emerging attack techniques to assess potential impact to the Bank, escalate relevant threats, and recommend actions to strengthen preventative and detective controls across defense layers.
• Maintain current knowledge of cybersecurity threats, emerging technologies, industry practices, security frameworks, and evolving security solutions and identify opportunities to enhance the organization's security capabilities and processes.
• Support the evaluation and monitoring of emerging technology risks, including risks associated with artificial intelligence and other evolving technologies, and assist with the implementation and ongoing oversight of applicable security controls.
• Define, maintain, monitor, and assess security configuration baselines for security technologies and enterprise systems, ensuring Information Security-managed solutions are configured and operated in accordance with established standards.
• Support identity and access security governance activities, including performing quality assurance testing on a defined percentage of completed user access reviews to validate accuracy, completeness, and adherence to established requirements.
• Support the organizations information security awareness program, including administration and coordination of security awareness training, phishing simulation activities, program maintenance, reporting, and follow-up activities.
• Create and maintain dynamic dashboards and/or scorecard for visibility of Information Security Governance activities.
• Participate in the development, review, maintenance, and implementation of Information Security policies, standards, baselines, guidelines, and procedure under the direction of the Information Security Manager and/or senior team members.
• Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security.
• Provide on-call support for security incidents and other security events requiring timely investigation or escalation, as assigned.
• Conduct and complete additional assignments/projects as designated by management.

QUALIFICATIONS

• A Bachelors degree in Information Technology/Computer Information Systems or a related field is required.

• SANS, IA, GIAC, SSCP, CISA, CEH, Security+ and / or similar certifications is a plus.

• Minimum four years experience supporting Information Security Operations, Threat Intelligence, Vulnerability Management and/or Security Incident Response is required.

• In-depth technical knowledge of and experience with one or more common security products and toolset (firewalls; intrusion prevention systems; web-security content management; identity, privileged access, authentication services; SEIM; etc.) is required.

• Working technical knowledge of wider a cross-section of the common security products and toolsets.

• Experience in proactively identifying potential Information Security controls risks, issues, and opportunities through analytical thinking and offering sustainable recommendations that address root cause rather than symptoms.

• Experience with software development, scripting languages, and electronic banking technologies are a plus.

• Ability to relay technical information to both technical and non-technical personnel.

• Must be professional, comfortable speaking with external and internal contacts with a demonstrated ability to tailor the message appropriately to the audience and situation.

• Demonstrated ability to convey thoughts and ideas effectively and succinctly via written formats, including emails, letters, and electronic platforms. Maintain professional standards relating to spelling and grammar.

• Maintain credibility through professional demeanor, appearance, and presence by modeling standards appropriate to our environment and industry.

• Maintain good working relationships with internal partners by exhibiting exemplary interpersonal skills, adopting a constructive, solutions-focused approach.

• Use sound professional judgment to balance the interests of the organization and customer, understanding and using available resources to mitigate risks.

• High proficiency with Microsoft 365 products and applications, including the ability to effectively prepare or review documents, procedures, and reports.

• Working technical knowledge of several infrastructure technologies (such as Active Directory, Server 2016 & 2019, Azure, M365, and various AV products, Vulnerability Management) is preferred.

• Demonstrated ability to learn new systems and applications, as well as the ability to understand, adapt and adjust responsibilities/workflows because of system upgrades.

• Occasional travel to other First American Bank locations, Bank functions and training facilities may be required.

• Typical hours are Monday through Friday 8:00 a.m. to 5:00 p.m. Additional hours may be required depending upon business need.

• Punctuality is required to maintain First American Bank's customer service standards.