Information Security Analyst

Operating within a highly regulated financial environment, the Information Security Analyst will also oversee vital security operations, including SIEM administration, enterprise vulnerability management, and rapid incident response, ensuring the continuous protection and compliance of our data assets. The ideal candidate pairs deep technical knowledge of the Microsoft cloud security stack with a polished, professional approach to enterprise risk management and cross-departmental collaboration., * Architect, provision, and maintain robust security configurations within Microsoft Azure and Microsoft 365 environments to ensure a secure and resilient cloud infrastructure

• Administer Microsoft Entra ID, actively managing Privileged Identity Management (PIM) and enforcing stringent, leastprivilege identity and access controls across the organization
• Deploy, manage, and monitor Mobile Application Management (MAM) policies and Microsoft Intune to meticulously control access to corporate data, specifically tailored for Exchange Online security
• Configure, maintain, and monitor the Microsoft Defender suite to proactively detect, investigate, and mitigate advanced security threats and vulnerabilities across all endpoints and cloud services
• Lead the configuration and management of Single SignOn (SSO) integrations for both internal enterprise systems and thirdparty vendor applications, ensuring seamless and secure access leveraging Microsoft Entra ID
• Administer the Security Information and Event Management (SIEM) system, ensuring optimal configuration for continuous data collection, anomaly analysis, and prompt incident alerting
• Lead the enterprise vulnerability management lifecycle, including the continuous discovery, assessment, and remediation of vulnerable assets, providing critical compliance guidance to asset owners
• Serve as a primary, decisive member of the IT Security Incident Response Team, responding promptly to IT security incidents, anomalous network behavior, and potential data breaches
• Understand enterprise firewall architectures and manage configuration requests, policy changes, and incident resolution with our thirdparty managed firewall vendor
• Maintain comprehensive, uptodate documentation of cloud security environments, access policies, incidents, and remediation processes
• Respond to help desk requests from employees, ranging from login assistance to system access, hardware troubles, and general inquiries
• Collaborate continuously with leadership, ensuring consultation for any critical permission modifications and maintaining transparent communication regarding the organization’s security posture
• Comply strictly with all company policies, procedures, and federal regulatory requirements, including but not limited to the Bank Secrecy Act, the Patriot Act, and OFAC
• Contribute to the development and delivery of employee security awareness training programs to foster a strong culture of cybersecurity vigilance

• Bachelor’s degree in Cybersecurity, Information Technology, or equivalent experience
• Minimum of 35 years of dedicated experience in Information Security, Cloud Security engineering, or IT systems administration
• Demonstrated, handson expertise in Microsoft Azure security provisioning, Microsoft 365 administration, and the Microsoft Defender suite
• Strong proficiency with Microsoft Entra ID administration, specifically Privileged Identity Management (PIM), and Microsoft Intune deployment
• Direct experience managing Exchange Online security, encompassing granular access controls and the deployment of Mobile Application Management (MAM) policies
• Experience administering SIEM platforms and leading vulnerability management, discovery, and remediation efforts within an enterprise setting
• Exceptional analytical, troubleshooting, and problemsolving capabilities within complex, cloudintegrated network environments
• Excellent verbal and written communication skills, featuring the ability to articulate complex security metrics to both technical personnel and executive leadership, * Industry certifications are strongly preferred, such as Microsoft Certified: Azure Security Engineer Associate (AZ500), Microsoft 365 Certified: Administrator Expert, CISSP, or other relevant Microsoft cloud security certifications
• A strong understanding of the operational relationship between financial services and technology within a regulated banking or credit union environment