> Markdown version of [/jobs/ext/2879701-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/2879701-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Analyst - **Company:** ALMA Bank - **Location:** New York, NY, United States - **Salary:** $70,000.0 - $80,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Network Analysis, Cyber Security, Information Systems, Linux, Disaster Recovery, Identity and Access Management, Intrusion Detection Systems, Network Architecture, Smartsuite, Security Information and Event Management, Syslog, Virtualization Technology, Network Routers, Firewalls (Computer Science), Information Technology, Performance Monitor, Patch Management, Cisco, Security Orchestration, Automation & Response, Vulnerability Analysis - **Published:** September 13, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=556f1595a414cb83 ## About the Role CISSP (or comparable certification) required or to be attained within four years of hire date. A 4-year College Degree with related information security and cybersecurity experience, having strong knowledge in: * Financial services regulatory requirements (FFIEC, GLBA, NYSDFS), and industry standards (NIST, ISO 27001/2). * Demonstrated understanding of technological trends and developments in the areas of information security, risk management, and business continuity. * IT Systems which include Windows, Linux, virtualization technologies, VDI environment etc., and network infrastructure, including but not limited to routers, firewalls (CISCO and Palo Alto) and network analyzers. * Exposure to enterprise security tools preferred (i.e. SIEM, vulnerability scanners, firewalls, identity governance and administration). * The configuration of security tools such IAM, SOAR, SIEM , EDR, NDR, IDS/IPS , DLP. * Patch Management, Incident Management, Vendor Management, and Risk Assessment. * Knowledge of vulnerability assessment and GRC tools is desirable. * Work collaboratively across teams to achieve organizational goals. * Excellent verbal and written communication skills. ## Description The Information Security Analyst is primarily responsible for assisting the Information Security team in the development, maintenance and monitoring of Alma Bank's cybersecurity and information security programs, which are designed to protect the confidentiality, integrity and availability of the Bank's information systems. In fulfilling this responsibility, the Information Security Analyst will serve as a technical expert on information security policy and will work with the Bank's Information Security and risk management teams to develop, implement and maintain an effective cybersecurity risk framework., Overall, the Information Security Analyst's job is to work with Alma Bank's IT, Internal Audit, Risk Management, and various business lines to plan, coordinate and develop recommendations for all aspects of information security policies and procedures in order to: * Ensure that the procedures and rules of use for information systems comply with Alma Bank's information security policies. * Perform periodic reviews to assure that security policies and procedures are being complied with, as well as develop recommendations for improvements. * Work with Alma Bank's business lines, vendors, and systems professionals to identify solutions to advance the bank's information security goals. * Assist in the development and maintenance of policies, standards, processes, and procedures to assess, monitor, report, escalate and remediate information security risks and related compliance issues. * Use metrics to measure, monitor and report on the effectiveness and efficiency of information security controls and compliance with information security policies. * Assist in maintaining the information security risk register and ensure that compliance issues and other variances are resolved in a timely manner. * Oversee entitlement reviews of critical systems to protect Alma Bank's information assets from internal and external threats. * Assist in the development and delivery of activities and programs that can positively influence Alma Bank's information security culture and the related behavior of its staff, including information security education and awareness. * Assist in developing and coordinating business contingency plans and incident response plans along with related testing of both on a regular basis. * On a daily basis, review and provide an analysis of security event logs and alerts from security systems and tools such as Firewall, IDS/IPS, DLP, SIEM, Syslog, and security subscription feeds. Communicate threat intelligence to the appropriate stake holders. * Monitor and report on emerging cybersecurity threats and trends and provide recommendations to internal teams on how to mitigate risks. * Respond to security incidents and/or policy violations which might put the Bank at risk. * Implement and monitor controls and efforts in various other information security domains, including disaster recovery, business continuity, incident response, and vendor management. * Monitor performance of various controls to ensure effectiveness and recommending/implementing improvements as necessary. ## Related Videos - [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Data Analyst Salary in Switzerland](https://www.wearedevelopers.com/magazine/276-data-analyst-salary-in-switzerland) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)