Information Security Specialist

Job Details

Job Location
Massaponax - Fredericksburg, VA

Position Type
Full Time

Job Shift
Any

Job Category
Information Technology

Description

Role
Supports the monitoring, administration, reporting, and development of, and incident response for,IT Security and risk-based monitoring systems, including, but not limited to, IDS/IPS, securityinformation and event monitoring, vulnerability management, environmental monitoring, and useractivity. Provides tier one information security support to employees, while investigating andescalating alerts as appropriate. In the event of an IT security incident or breach, responsiblefor supporting the IT Security Incident ResponseTeam.

Major Duties and Responsibilities
In coordination with the credit union's SOC services, IT Operations and Infrastructure teamactively monitors server logs,firewall logs, intrusion detection logs, and network traffic forunusual activity. Thoroughly investigate information security issues to determine root cause andpotential impact. Escalate investigations as needed.
In coordination with the credit union's SOC services, IT Operations and Infrastructure teamactively monitors server logs, firewall logs, intrusion detection logs, and network traffic for unusualactivity. Thoroughly investigate information security issues to determine root cause andpotential impact. Escalate investigations as needed.
In coordination with brand protection vendor Keeps the credit union and membership protected by investigatingand working with remediating spoofed websites, fake social media profiles, fake appsand inform customers of security concerns with their devices.
In collaboration with the IT Security Team, helps support third party awareness scans and conductsperiodic audits on current controls, policies, and procedures to determine effectiveness. Compilesreports and information for internal and external audits.
Works with vendors in relation to information security activities, third party awareness scans, andtechnology topics. Helps define security best practices and support the identification andremediation of vulnerabilities.
Stay on top of cyber security trends through monitoring security sites, participation in peergroups, continuing education, and conferences/webinars.
Manages the cyber security awareness training program for employees. Maintains training platform,makes updates, and delivers relevant trainings.

Qualifications

Knowledge and Skills
EXPERIENCE
Two to Five years of similar or related experience, including time spent in preparatory positions.Previous experience in an IT role with Information Security duties is preferred.
EDUCATION/CERTIFICATIONS/LICENSES
A two-year college degree or completion of a specialized course of study at a business or tradeschool equivalent to approximately 64 credit hours. Relevant certifications (Security+/CySA+), orrelevant work experience preferred.
INTERPERSONAL SKILLS
A significant level of trust and diplomacy is required to be an effective subject matter expert inthe position. In-depth dialogues, conversations and explanations with members, direct andindirect reports and outside vendors of a sensitive and/or highly confidential nature is a normal
part of the day-to-day experience.Communications can involve motivating, influencing, educating and/or advising others on matters of
significance. Must be able to communicate effectively with audiences that have a wide range oftechnical proficiency, goals and needs from IT subject matter experts, members and executives.
OTHER SKILLS
Ability to speak Spanish is a plus.

ADA Requirements
PHYSICAL REQUIREMENTS
Is able to bend, sit, and stand in order to perform primarily sedentary work with limited physicalexertion and occasional lifting of up to 10 lbs. Must be capable of climbing / descending stairs inan emergency situation. Must be able to operate routine office equipment including computerterminals and keyboards, telephones, copiers, facsimiles, and calculators. Must be able toroutinely perform work on computer for an average of 6-8 hours per day, when necessary. Must beable to work extended hours or travel off site whenever required or requested by management. Mustbe capable of regular, reliable and timely attendance.
WORKING CONDITIONS
Must be able to routinely perform work indoors in climate-controlled shared work area with minimalnoise. This position may be eligible for remote work.
MENTAL AND/OR EMOTIONAL REQUIREMENTS
Must be able to perform job functions independently or with limited supervision and workeffectively either on own or as part of a team. Must be able to read and carry out various writteninstructions and follow oral instructions. Must be able to complete basic mathematicalcalculations, spell accurately, and understandcomputer basics. Must be able to speak clearly and deliver information in a logical andunderstandablesequence. Must be capable of dealing calmly and professionally with numerous differentpersonalities from diverse cultures at various levels within and outside of the organization anddemonstrate highest levels of member service and discretion when dealing with the public. Must beable to perform responsibilities with composure under the stress of deadlines / requirements for
extreme accuracy and quality and/or fast pace. Must be able to effectively handle multiple,simultaneous, and changing priorities. Must be capable of exercising highest level of discretion onboth internal and external confidential matters.

Acknowledgment

Nothing in the position description restricts management's right to assign or reassign duties andresponsibilities to this job at any time.
Reasonable accommodations may be made to enable individuals with disabilities to perform theessential functions. This Job description is not a contract and should not be construed as aguarantee of employment for any period of time. TopsideFCU is an Equal Opportunity Employer and does not discriminate against employees orapplicants based on race color, religion, sex/gender, national origin, disability, age, or anyother category protected by law.