Information Security Data Analyst
$42K-$74K (Glassdoor est.)
PRIMARY PURPOSE:
In conjunction with the Information Security team, the Information Security Data Analyst is responsible for safeguarding organizational information assets through data analysis, and development and maintenance of metrics to measure the effectiveness of the information security function. This position will produce reporting through data analysis to come up with actionable items to help Management make informed data-based decisions.

ESSENTIAL DUTIES AND RESPONSIBILITIES:
1.Uses a combination of software tools, statistical analysis, critical thinking, programming and/or scripting, and web research to analyze large, complex sets of data related to Information Security data, including vulnerability and compliance scans.
2.Conducts routine and ad hoc data extraction, analysis, charting and reporting to inform data-based decision making for management.
3.Extracts information security data from multiple sources and inspects, cleans and models the data to discover useful information for the Department.
4.Identifies, analyzes, and interprets trends, patterns, and outliers in complex data.
5.Quantifies the impact and assesses the severity of data issues.
6.Proposes and assists in the development of innovative ways of presenting complex data and metrics.
7.Monitors systems and tools for malicious activity, providing appropriate correlation of threats across the entire enterprise.
8.Partners with business and functional units to create and maintain the bank’s Business Continuity, Disaster Recovery Plans, and Incident Response Plan.
9.Assists the Information Security team with implementing appropriate monitoring and testing to ensure the Bank’s information security protocols are adhered to across the organization.
10.Maintains information security documentation including procedures, processes and guidelines that are implemented to ensure the organization’s information security safety and soundness and compliance with all applicable banking regulations.
11.May assist in the creation and maintenance of information security procedures designed for business and technology units to establish and maintain a compliant, risk-focused information security platform.
12.Has understanding of security solutions such as SEIM, IPS/IDS, End Point Security, Network Security, Database Security, Firewalls, Cloud Proxy, Network Admission Control and Network Segregation to identify security risks.
13.Maintains ongoing communications with IT peers to ensure enterprise-wide understanding of information security goals, to solicit feedback and to foster co-operation.
14.In concert with the Information Security Team, ensures appropriate systems and controls exist to protect the confidentiality, integrity and availability of data residing on or transmitted to/from/through enterprise workstations, servers and other systems and in databases and other data repositories.
15.Maintains current knowledge and understanding of the information security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.
16.In concert with the Information Security Team, executes the deployment, integration and initial configuration of all new and enhanced information security solutions with IT partners in accordance with standard best operating practices and the enterprise’s documented information security procedures.
17.Active participant in Incident Response Plan tabletop exercises.
18.Creates/Maintains vulnerability scans, and then analyze data and integrate into reporting and dashboard creation.
19.Has input on security policies, controls and cyber incident response planning.
20.Ensures continued compliance with laws and applicable regulations.
21.Chooses and recommends security products, as necessary.
22.Assists in the coordination of electronic discovery and digital forensic investigations.


JOB SPECIFICATIONS:
Knowledge, Skills& Abilities
•Working knowledge of information systems& technology audit processes and procedures.
•Demonstrated ability to understand complex security issues.
•Proven ability to successfully partner with internal clients and vendors to align strategy with deliverables, identify business challenges and develop alternatives to mitigate.
•Working knowledge of SQL preferred.
•Understands the IT threat landscape for banking and financial services industry.
•Strong service management and service delivery orientation.
•Strong written, oral, and interpersonal communication skills.
•Ability to present ideas in user-friendly language to a variety of constituent audiences.
•Proven ability to work within a changing environment and lead the implementation of change.
•Ability to assess the impact or potential impact of change management initiatives of various sizes and degrees of complexities on business financials and performance.
•Ability to effectively prioritize and execute tasks in a high-pressure environment.

Experience& Education
•Bachelor’s degree in related discipline or equivalent work experience required.
•Minimum 4 years of progressively responsible professional experience in an information technology environment with demonstrated experience core security concepts and data analysis.
•Experience implementing system solutions in a banking environment preferred.
•Experience with data presentation via a dashboard preferred.
•Industry recognized Infosec certifications such as CompTIA Security+, GSEC, CISSP: Certified Information Systems Security Professional, CISM: Certified Information Security Manager, strongly desired.

Internal and External Contacts
•Extensive external contact with equipment and service suppliers.
•Internal contacts are with all department managers, senior management and directors on an ongoing basis.

Working Conditions/Physical Requirements
Office environment. Ability to operate computer. Ability to communicate in order to exchange simple to complex information with individuals and groups. Ability to travel throughout Bank footprint.
Equal Opportunity Employer
Minorities/Females/Veterans/Individuals with Disabilities/Sexual Orientation/Gender Identity
For Recruiting Agencies
OceanFirst Bank does not accept agency resumes submitted by third-party vendors unless a valid agreement has been signed and the OceanFirst Bank Talent Acquisition Team has granted authorization for submissions regarding a specified position. Please do not forward resumes to us, OceanFirst Bank employees or any other company location. OceanFirst Bank is not responsible for any fees related to unsolicited resumes.
OceanFirst Financial
4.3
OceanFirst Financial
