Job Description

Under direct supervision, assist with the completion of Information Security reviews in accordance with the annual Information Security review calendar. Assist with the research and completion of projects as directed by the Information Security Manager. Administer the Bank’s Data Loss Prevention system.

Essential Functions

1. Conduct assigned Information Security reviews. Develop, document, test, and report on IT-related internal controls to ensure compliance with Bank policies and government regulations, including the Federal Deposit Insurance Corporation Improvement Act and the FFIEC IT Examination Handbook.

2. Act as an administrator of the Bank’s Data Loss Prevention and Darkweb monitoring software. Perform periodic reviews and tests to ensure that the systems are functioning properly. Evaluate any alerts generated by either software in a timely manner.

3. Assist with the development of Information Security training materials and email phishing campaigns.

4. Assist with the completion of risk assessments as directed by the Information Security Manager.

5. Analyze new trends, software, or laws impacting information security that could directly affect the Bank’s current policies and procedures.

6. Comply with all applicable banking compliance rules and regulations established by both internal departments and external agencies.

7. Participate in Bank projects, as directed by the Information Security Manager.

8. Maintain current knowledge of bank regulations, new threat networks, and new threats to the industry. Ensure compliance with all IS requirements and new regulations.

9. Other duties as assigned.

Requirements

· Bachelor's degree from an accredited College or training equivalent or the equivalent in related experience.

· Knowledge of IS policy and procedures and IS compliance is preferred.

· Strong project management and presentation skills along with effective oral and written communication skills are highly desired.

· Strong personal computer skills with knowledge of the Microsoft Office suite of applications (Microsoft Word, Excel, Outlook, etc.) is preferred.

· Ability to read and interpret documents such as regulatory manuals, safety rules, operating and maintenance instructions, and procedural manuals. Ability to write complex reports and correspondence.