Information Security Specialist

Job description

Under general supervision, the Information Security Specialist performs technical tasks and monitoring activities in the area of information security to ensure compliance with bank policies. He or she prepares status reports for management, works on the development and improvement of security projects, and monitors the IT security infrastructure for the business units to identify, mitigate, and control risks.

Tasks and responsibilities

* Conducting IT security activities to ensure high-quality and cost-effective service for customers * In-depth knowledge of security tools such as log aggregators, firewalls, proxies, DLP, and others * Monitoring and controlling infrastructure data by implementing agreed-upon rules and standards within the business unit to mitigate and manage data security risks * Conducting risk/vulnerability analyses, penetration tests, and other security assessments to identify potential security risks and vulnerabilities and find solutions * Technical knowledge of IT architecture, web applications, and networks * Participating in the review of designs, development, and specifications for new or revised processes, systems, information, documentation, and support materials * Supporting the timely and accurate implementation of security projects and initiatives * Responsibility for understanding and complying with all bank policies, procedures, and standards, as well as legal requirements and regulations * Monitoring user activities related to application and system security * Performing routine security administration and maintenance for all systems and bank applications * Reporting incidents where users do not comply with bank policies and ensuring that issues are resolved in a timely manner * Contributing to the implementation of new and innovative processes or technologies to advance the information security program * Maintaining the confidentiality of corporate information, including specified security elements and controls

Requirements

* Bachelor’s degree in computer science or a related field * A master’s degree is preferred * At least 7 years of professional experience in a similar role as a security analyst * Certifications such as CISA, CISM, or CISSP are desirable * Knowledge of the financial services industry and its regulations, such as GLBA, the FACT Act, the NIST Framework, and DORA * Knowledge of Spanish and/or Portuguese is desirable

We offer

No information available.