Information Security Officer & Physical Security Officer
Job Description
This role has a central and key role in working with IT vendors on the Information Security of the bank, to ensure the company’s information system assets are risk managed for regulatory exams, audits and in compliance to company standards and policies. Co-manage IT and Information Security assets with vendors. Serve as on-site IT support, main point of contact for MSSP’s (Managed Service and Security Providor) service desk, IT projects, provision, upgrade and maintain new and current IT and Information Security technologies while ensuring the physical security of the bank.
-Review billings and invoices from the MSSP, IT, telecom and physical security vendors to screen for errors.
-Work with the MSSP vendor to provide a monthly summary of active directory, network performance, servers, back-up, patching, anti-virus, IPS, IDS, web filtering and the Core Processor to review security access to the Information and Physical Security Sub-Committee and other as needed Committees.
-Take ownership of the Bank’s Information Security, Business Continuity Planning, Disaster Recovery and Pandemic policies.
-Perform the Bank’s annual testing of Business Continuity Planning and Disaster Recovery.
-Responsible for cybersecurity oversight, incidence response plan and cybersecurity incident reports.
-Take ownership of the annual Information Security, GLBA risk assessments and cyber Assessment Tool (CAT) as required by Federal Financial Institutions Examination Council (FFIEC).
-Main point of contact for annual internal IT, Information Security and GLBA audits and penetration testing.
-Main point of contact for the annual regulatory federal IT and Information Security exam.
-Be proactive and lead the development of the IT and Information Security technologies, strategy and roadmap ensuring integration with the bank’s strategic planning process.
-Attend cybersecurity and vendor conferences to maintain up to date knowledge of cybersecurity and IT.
-Serve as liaison between the Bank in the national and worldwide cybersecurity associations to share and be updated regarding cyber threats.
-Ensure that consistent and proven information- security practices are employed across all entities in order to better manage the growing level of cyber security risk.
-Provision, co-manage, maintain and dispose all of the bank’s servers, switches, routers, UPSs, end- user desktops, end-user laptops, mobile devices, phone system, mobile apps, vendor online services and website.
-Procurement, co-manage, and main point of contact for new and current technologies with core processor, Microsoft and banking applications.
-Provisioning of new employees with IT, Information Security and Physical Security needs.
-Provide cybersecurity training to all levels of the organization including board members, senior management and employees.
-Maintain the standards of the Clean Desk Policy for all employees.
-Able to communicate effectively about Information Security and IT best practices, concepts, and policies to directors, senior management and non-technical employees.
-Ensure physical security policies and standards are being followed, maintained and updated.
-Main point of contact for the monthly burglar alarm tests and annual fire drill.
-Provision and maintain the bank’s access control system and key fobs.
-Work with vendor to manage the video surveillance system of the Bank for capture and answer requests of video retrieval.
-Work with vendor to manage and maintain the monitoring and alarm systems of the bank.
-Responsible for physical security response plan and incident reports.
JOB REQUIREMENTS
Bachelor’s degree in Computer Science, Computer Information Systems, Management Information Systems, Cybersecurity or related field
• Minimum 3+ years of IT and Information Security experience in banking operations
• A good team player, organized, attention to detail, hardworking and able to work independently
• Excellent leadership, oratory, multi-tasking, and project management skills
• Proficient in the latest Windows, Server, network, Information Security, Cybersecurity best practices, standards, policies and procedures
• A+, Security+, CEH certifications are desired or have a willingness to pursue
• CCBTO, CISA, CISM, CISSP certifications are highly preferred
Company Description
Makena Tech Solutions, Inc. is a 100% Woman owned professional staffing and consulting firm inspired and created by HR and IT Professionals.