Information Security Analyst

Key Responsibilities

• Monitor systems network and applications for security risks.
• Work with information security team to plan and enforce security requirements
• Report to management concerning residual risk vulnerabilities and other security exposures including misuse of information assets and noncompliance.
• Participate Investigate support and document cybersecurity incidents and breaches.
• Administer security tools to protect systems networks and applications. This includes firewalls Intrusion detections and prevention systems security gateways etc.
• Assess security requirements and controls during the application development and acquisition process as defined in companys security policies and standards.
• Perform vulnerability assessments and tests to uncover flaws and help technical teams to remediate identified vulnerabilities to maintain high security standards.
• Provide support to ongoing external and internal audits and audit remediation on information technology including generating technical recommendations
• Develop and maintain security processes and procedures and support service-level agreements (SLAs) to ensure that security controls are managed and maintained
  Create manage and maintain user security awareness program
• Participate in user access provisioning and de provisioning activities to verify security controls are adhered
• Conduct security research in keeping abreast of latest security threat landscape and stay abreast with the current information technology trends
• Develop positive working relationships with various teams involved in security and privacy matters

Key Qualifications

• 5 years of related work experience
• Strong hands-on experience with tools such as: IDS/IPS Metasploit Nexpose Nmap Nessus Wireshark L0phtCrack John the Ripper etc.
• In-depth knowledge and understanding of information risk concepts and principles as a means of relating business needs to security controls
• Experience with common information security management frameworks such as International Organization for Standardization (ISO) 27001 NIST Cybersecurity Framework. PCI DSS etc.
• Experience with penetration tests and techniques is preferred
• Proficiency in performing risk business impact control and vulnerability assessments
• Experience in developing documenting and maintaining security policies processes procedures and standards
• Proficiency in network infrastructure including routers switches firewalls and the associated network protocols and concepts
• Audit compliance or governance experience is preferred
• Strong analytical skills to analyze security requirements and relate them to appropriate security controls.
• Strong written and verbal communication skills.
• University degree required.
• Professional certification such as CISSP CISA.

#LI-Hybrid

Salary Range:

The actual base salary for this position will depend on several factors including job-related skills experience and addition to base pay eligible employees may participate in a discretionary variable incentive plan results are subject to both individual and company performance.

Please note that this posting is intended to fill an existing vacancy; however there may be instances where more than one vacancy is available for the same role.

Equal Opportunity Employment and Inclusion at Foresters Financial we are committed to sustaining an equal opportunity environment for all job applicants. We embrace Inclusion Diversity and Equity (IDE) as a core strategic objective for building strong innovative teams in which all our employees can show up wholly and authentically as themselves.

Foresters Financial strives to provide an accessible candidate experience for prospective employees with different abilities. If you anticipate needing any type of accommodations during the recruitment process please email in advance of your appointment.

Thank you for choosing Foresters. Only those candidates who will be selected for further consideration will be contacted by our Talent Acquisition Team.