JOB DESCRIPTION:

The Information Security Lead will report to the SVP IT and will work closely with all Information Systems department staff to assess and reduce information security risk and ensure compliance with established financial institution regulations. This role is responsible for Daily Security Alert Monitoring and Reporting, SOC, Security Information and Event Management (SIEM), Annual Risk Assessment Assistance, Quarterly Logical Access Reviews, Audit Response Assistance, Security Policy maintenance and mentoring other security team members.

The position is responsible for the operation, performance, and availability of the Credit Union’s core security systems throughout the organization. He\She is also responsible for handling security systems projects of all levels of complexity. This is a Leadership position – in addition to the aforementioned operational responsibilities, this position will provide mentorship, guidance, performance monitoring, and escalated support to a team comprised of InfoSec Analysts, Administrators, and Engineers.

This position will take ownership through hands on work and from managing and supporting the enterprise security systems, including design, implementation and support of the entire security suite at PFFCU. Must possess hands on ability to execute creative solutions to complex problems. Must be able to balance the ability to work independently and concurrently be the leader of a high-performance team and keeping Senior Information Technology management fully appraised of the status of his\her projects and Security Operations.

JOB RESPONSIBILITIES:

Perform:
Oversee Daily SOC dashboard maintenance and automation
Daily Security Alert and Log Monitoring (Central Log, Virus, IPS, DLP, Web Content, Secure Email, and Active Directory Changes). Assist with Monthly alert and log management reporting
Periodic security device and configuration reviews
Monthly Security Metrics / Dashboards
Quarterly and semi-annual Logical Access Reviews
Utilize PFFCU’s InfoSec governance risk & compliance platform to manage quarterly vulnerability reporting and remediation activities, and partner with IS team to ensure security patching is comprehensive, efficient and completed within targeted timeframes
Assist with:
Evaluation and suggest improvements to PFFCU’s SOC and Automation systems
Supporting external and internal auditors
Evaluation and suggest improvements to PFFCU’s Security Information and Event Management (SIEM) Solution
Documentation of Security Incidents as a part of the CSIRT Team
Develop or Maintain knowledge of:
The latest NCUA and GLBA financial institution regulations
PFFCU departments and functions and effectively interface with staff at all levels
Working with the SVP Information Technology to determine departmental priorities
When appropriate, engaging outside contractors with proper technical expertise
Ensuring timely completion of projects and deployments
Mentor and monitor security staff to build a reliable, high performing infrastructure team
Other duties as assigned by the SVP Information Technology

TECHNICAL SKILLS:

In depth working knowledge of a variety of network perimeter security technologies including:
Firewalls (Cisco NGFW and PaloAlto)
Web Filter (ForcePoint)
Intrusion Detection/ Protection Systems
DLP - Network Based Data Loss Prevention
Vulnerability Scanners (Nessus)
Zero Day technologies (FireEye/Trellix)
Endpoint technologies (AMP, Defender, etc.)
Email security technologies
Working knowledge of Security Risk Assessment Methodology, Vulnerability Analysis and strong knowledge of SIEM technology
Project management, troubleshooting and analytical skills
Project management skills a must
Experience working with vendors on multiple levels (ordering, provisioning and engineering)
Must possess effective written and verbal communication skills
Must possess knowledge of monitoring technologies\methods relating to security systems
Must possess a high level of comfort with debugging complex issues
Must possess excellent customer service skills and be able to work independently and with a team in a highly customer-focused environment
Strong understanding of all aspects of Security Systems as well as strong technical aptitude and problem-solving skills are needed to perform this job successfully
Ability to meet deadlines and concurrently manage multiple projects.

JOB REQUIREMENTS:

Bachelor's Degree or equivalent related experience
5 + years of hands on information security engineering and administration experience
Ability to lead, mentor, and develop a high performing InfoSec Team
Demonstrated technical knowledge of perimeter security devices and configuration
Ability to assess problems and situations possesses analytic ability and good judgment
Demonstrate effective business communication and technical writing skills
Experience working with third party service providers
Ability to handle multiple projects at the same time
Monitor and maintain security appliances to insure the integrity of all systems from both internal and external entities.
Proactively monitor security’s performance and utilization and provide recommendations for improvement, upgrades, and expansion.
Accurately document current and future security configuration and changes following PFFCU’s change control guidelines.
Provisioning and maintenance of security infrastructure
Problem or Incident escalation contact including rotating afterhours support
Develop a working knowledge of the business side of PFFCU and be able to effectively interface with staff using the technology.
Strong project skills required, specifically the ability to maintain focus and complete projects with multi-month timeframes
Ability to think logically and visualize abstract concepts
Ability to clearly communicate technical information to individuals at all levels of the organization and with vendors
Ability to prioritize multiple tasks
Ability to work varying hours, sometimes includes evening and weekend work

#PFFCUBO