Cyber Security Specialist

• THIS POSITION IS OPEN TO CANDIDATES IN THE COASTAL BEND AND RIO GRANDE VALLEY*

PRIMARY OBJECTIVE OF POSITION

Maintain system security following credit union processes, procedures, and change management practices. Work with Security Operations, Information Technology staff, other essential credit union staff, and business units to support the goals and objectives of the credit union. Assist in implementation and management of enterprise security technologies and practices that ensure corporate assets and financial data are protected.

ESSENTIAL JOB FUNCTIONS

• Assist in implementation, management and support the lifecycle of web and email security systems and processes that protect end users from email or web-based cyber threats.
• Assist in maintaining proper configuration, health, and effectiveness of all managed security systems and applications.
• Support and maintain web and email security technologies to ensure staff email and internet access is in line with credit union email usage policies.
• Coordinate with I.T. staff and outside business partners to ensure proper and ongoing adherence to secure industry standard configuration baselines for web and email protection systems.
• Provide reports to management indicating web and email system security posture including potential risks, improperly configured systems, system audit results, remediation actions, security configuration and enhancement, recommendations, etc.
• Document all configurations and management practices for web and email security systems and applications.
• Participate in the change management program to ensure that changes are in line with security guidance and benchmark expectations.
• Continually develop knowledge and skills through formal education, certifications, self-study, or other approved training opportunities.
• Assist in maintaining endpoint security applications performing updates, patches, and configuration changes.
• Analyze and prevent web and email activity that presents a security risk to the enterprise and take corrective action according to incident response policy and procedures.
• Assist in maintaining proper configuration, health, and effectiveness of all managed security systems and applications.
• Coordinate with appropriate staff, business partners, and outside agencies to ensure that the web and email security infrastructure is compliant with all applicable laws and regulations as well as internal policies and security programs.
• Support and maintain data loss prevention practices and systems that monitor the movement of sensitive data to ensure loss prevention.
• Assist with supporting enterprise log consolidation systems ensuring all necessary logs are collected and accessible for event correlation.
• Participate in departmental on-call scheduling, as well as weekly maintenance window schedules.
• All other duties as assigned.

RELATIONSHIPS AND CONTACTS

Supervise Approximately: None

Reports to: Vice President of Information Security

Contacts: Frequent contact with other employees, departments, and outside vendors. Some contact with members.

EDUCATION

• Associate degree from an accredited college or university or 64 college credit hours. Commensurate IT experience will be considered in lieu of degree.

EXPERIENCE

• Four (4) years of information technology experience to include two (2) years of cyber security experience
• Must possess or obtain and maintain CompTIA Security + certification within the first 90 days of employment

PHYSICAL REQUIREMENTS

• Position involves wrist/hand manipulation; good visual acuity for detail work; ability to bend stoop on a regular basis; reach overhead and lift up to 50 pounds.
• Vision abilities required by this job include close vision for frequent viewing of computer monitors and review of documents.
• Must possess a valid Texas driver's license, means of transportation and be able to travel independently and work after normal business hours, when requested by management.

MENTAL REQUIREMENTS

• Must be able to perform job functions independently or with limited supervision and work effectively either on own or as part of a team.
• Must have a strong ability to read and carry out various written instructions and follow oral instructions.
• Must have a strong ability to speak clearly and deliver information in a logical and understandable sequence.
• Must be capable of dealing calmly and professionally with numerous different personalities from diverse cultures at various levels within and outside of the organization and demonstrate highest levels of customer service and discretion when dealing with the public.
• Must be able to perform responsibilities with composure under the stress of deadlines / requirements for extreme accuracy and quality and/or fast pace.
• Must be able to effectively handle multiple, simultaneous, and changing priorities.
• Must be capable of exercising highest level of discretion on both internal and external confidential matters.

EQUIPMENT REQUIRMENTS

• PC's and printers, telecommunications equipment, calculator, fax and copy machine.
• Must have an understanding of networking and network design, IT security architecture, Microsoft Operating systems and Microsoft applications.
• Prior experience with enterprise security applications and appliances are a plus. Must understand and have experience with TCP/IP networking, Microsoft OS, Linux OS, iOS, and possess successful troubleshooting abilities. Periodic after-hours work will be required.

I acknowledge that I have received, read, and understand this Job Description. I agree to perform to the best of my abilities the functions and duties described herein, with or without reasonable accommodation. I understand that this Job Description does not constitute an employment contract or alter my "at-will" employment status. I further understand that the duties and responsibilities described in this Job Description are subject to change or modification, as determined by management, and that I am responsible for performing any job duties, or other tasks, and responsibilities that may be assigned, and/or directed by management.