Information Security Analyst

Commercial Bank
United States
3 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Compensation
$75,000.0 - $95,000.0
Working hours
Regular working hours
Job source

Tech stack

Application Programming Interfaces (APIs) Artificial Intelligence Software System Penetration Testing Application Performance Management Cloud Computing Cloud Computing Security Cyber Security Information Systems Information Leak Prevention Hypervisor Identity and Access Management Intrusion Detection and Prevention
+12 more
Network Architecture Phishing Security Information and Event Management Software Vulnerability Management Web Applications Enterprise Software Applications Cloud Platform System Firewalls (Computer Science) Web Filtering Information Technology Tenable Nessus Vulnerability Analysis

Job description

We are looking for a skilled and adaptable Information Security Analyst who is passionate about protecting critical systems and helping strengthen cybersecurity across our organization.

In this dynamic role, you will contribute across multiple security functions, take ownership of key initiatives, and work closely with cross-functional partners to support a resilient and secure banking environment.

You will play an important role in both preventive and detective security efforts, partnering with internal teams and external vendors to enhance the bank’s security posture and support ongoing regulatory compliance., * Help protect the organization by monitoring, investigating, and responding to security alerts generated by enterprise security tools in partnership with management and engineering teams.

  • Expand your technical expertise by supporting and serving as backup administrator for a wide range of security tools, including data loss prevention, firewalls, intrusion prevention, cloud content filtering, file integrity monitoring, email security, brand and dark web monitoring, security awareness platforms, privileged access management, endpoint and cloud security, SIEM, and AI-driven detection and response solutions.
  • Play a key role in strengthening access governance by coordinating annual user access reviews across applications, cloud environments, network infrastructure, hypervisors, and other critical systems.
  • Contribute to a strong security culture by helping develop departmental communications, employee awareness content, and training materials.
  • Help drive continuous improvement by documenting, tracking, and supporting remediation of identified control gaps through security posture management, self-assessments, and risk assessment activities.
  • Support the bank’s vulnerability management efforts by administering scanning tools across networks, hosts, web applications, and APIs, reporting findings, and partnering with IT on remediation.
  • Support oversight of privileged and administrative activity across critical systems to help ensure access and changes align with approved requests and security standards.
  • Support security awareness initiatives by coordinating quarterly social engineering tests, follow-up training, retesting, and phishing reporting programs.
  • Support secure asset handling by sanitizing IT equipment in accordance with Information Security Policy requirements.
  • Contribute to the development and maintenance of security procedures, standards, and documentation that support a strong control environment.
  • Partner with internal stakeholders to support audit and regulatory requests by gathering information and responding to documentation needs.
  • Take on additional projects and responsibilities that support team goals and provide opportunities for growth.
  • Occasional travel of up to 5% to corporate locations may be part of this role.

Requirements

Do you have experience in Regulatory compliance?, Do you have a Bachelor’s degree?, The ideal candidate is proactive, detail-oriented, and collaborative, with strong technical expertise, sound judgment, and a solid foundation in information security and compliance practices. If you thrive in a fast-paced environment, communicate effectively, and enjoy solving complex challenges, this is an excellent opportunity to make a meaningful impact., * Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent practical experience.

  • Relevant security certifications are preferred, such as CISSP, CISA, CISM, CEH, or Security+.
  • At least three years of hands-on or audit experience in IT, information security, or security operations within a regulated environment, including FFIEC, FDIC, NACHA, or PCI frameworks.
  • Strong understanding of applicable legal and regulatory requirements, including FFIEC guidance and FDIC and DFPI rules and regulations.

Preferred Qualifications

  • Experience with network penetration testing and vulnerability scanning.
  • Experience securing and monitoring applications, cloud environments, networks, hypervisors, and enterprise systems.

Skills and Abilities

  • Strong analytical, critical thinking, decision-making, and problem-solving skills.
  • Ability to prioritize work, manage multiple tasks, and meet deadlines with minimal supervision.
  • Ability to respond to escalated support issues with urgency and professionalism.
  • Ability to quickly learn new technologies using documentation, research, and available resources.
  • Strong written and verbal communication skills, with the ability to work effectively with employees, executives, and external vendors.

Collaborative team player with the ability to work effectively across diverse teams and contribute to a positive, results-driven environment.

Benefits & conditions

2.72.7 out of 5 stars United States Remote $75,000 - $95,000 a year - Full-time, Pulled from the full job description

  • Tuition reimbursement
  • AD&D insurance
  • Health insurance
  • 401(k) matching
  • Paid time off
  • Employee discount
  • Vision insurance, Benefits & Perks
  • Competitive employer contribution to medical, dental and vision coverage
  • 401k plan with employer match
  • Flexible Spending Accounts (FSA) and Dependent Care Accounts
  • Employee Assistance Program (EAP)
  • Employer provided Calm subscription
  • Employer provided mental health benefits through Teladoc
  • Life, AD&D and disability insurance
  • Minimum 15 Days of Vacation, 11 Paid Federal Holidays, Paid Time off to Volunteer
  • Online discount program
  • Tuition Reimbursement Program

About the company

Commercial Bank of California (CBC) is the largest Latino-owned bank in California and a certified Minority Depository Institution (MDI). Headquartered in Irvine and founded in 2003, CBC is one of the largest privately held banks in the state, with over $3.5 billion in assets as of December 2025.

We are a purpose-driven financial institution committed to building long-term relationships and delivering innovative, personalized banking solutions. Our leadership reflects the diverse communities we serve, and our mission is rooted in empowering entrepreneurs, business owners, and community leaders to thrive.

As a certified MDI, CBC is proud to play a vital role in advancing financial inclusion and economic opportunity. We believe in a higher vision for banking-one that prioritizes trust, collaboration, and community impact. Join us and be part of a team that’s redefining what it means to be a community-focused, relationship-driven bank that puts people over profits.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:29 min

Evaluating phishing emails that leverage artificial time constraints

Mauro Verderosa · LIVE

3:53 min

History of hardware virtualization and infrastructure abstraction layers

Edo Edo · WWC 2024

2:50 min

Filtering unstructured web data for model training

Jodie Burchell · LIVE

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

2:39 min

Exposing stored XSS and phishing attacks via markdown

Ramona Schwering Ramona Schwering · WWC Europe 2026

52 sec

Defining application, pipeline, and security operations roles

Aarno Aukia · LIVE

Videos

See all

Related articles

See all