Information Security Analyst

The Information Security Analyst supports the bank’s information security program, including but not limited to security operations, threat and vulnerability management, incident response, and cloud security. The role assists with monitoring, analysis, reporting, and supports the administration of security tools such as firewalls, web application firewalls, and related technologies. The Analyst works closely with the Senior Information Security Analyst and serves as a supporting resource for activities and projects., The Information Security Analyst may perform, assist with or support activities in the following information security functional areas:

• Security Operations & Monitoring - Review and respond to system alerts, conduct preliminary analysis of logs, and escalate suspicious activity.
• Threat and Vulnerability Management - Assist in scheduling and reviewing vulnerability scans, support threat monitoring activities, and track remediation progress with IT teams.
• Incident Response - Provide first-level response to alerts and escalate incidents requiring advanced investigation.
• Identity & Access Management - Perform annual user access reviews for high-risk systems and assist with access administration.
• Data Retention & Governance - Utilize tools to track, and report the status of long term document storage and data retention policies.
• Cloud Security - Support documentation and implementation of security controls for cloud-based operations.
• Security Tools Administration - Assist in administering firewalls, web application firewalls, endpoint security platforms, and other security technologies.
• Data Analysis & Reporting - Compile data and prepare reports on security program activities, risks, and controls for leadership review.
• Awareness & Training - Assist in delivering end-user security awareness and training programs.
• Vendor Management - Assist in onboarding new vendors, conducting vendor risk reviews, and administering vendor risk management tools.
• Business Continuity Planning - Support departments in developing and maintaining business continuity and disaster recovery plans.

Do you have experience in WAF?