Sr. Analyst, Information Security

Company: FNBO
Location: Omaha
Posted on: January 26, 2023

Job Description:

At FNBO, our employees are the heart of our story and we're committed to their success! Please see below the details of this career opportunity and how it fits into our organization's success.Our Modern, Flexible Workplace: We believe in a Modern, Flexible Workplace, and we are continuously exploring advancements in technology and office environments to make it easier to work from anywhere at any time, allowing for more flexibility in where and how you work. We know that choice and flexibility are important to you. We also recognize that flexible and remote positions can become opportunities for military partners, caregivers, and individuals with disabilities to thrive at our company. We invite you to consider what a Modern, Flexible Workplace can mean for you!It is anticipated that an incumbent in this role will work onsite for three (3) or more days a week and will have a dedicated workspace when working onsite. Work location is subject to change based on business needs.Summary of the Job: The Information Security Senior Analyst is a role within the Information Security department. The Sr. Analyst reports to the Information Security Officer (ISO) responsible for managing the team. The Senior Analyst develops and drives the adoption of technical security strategy, standards, design patterns, and best practices across all areas of the enterprise. Builds and maintains strong relationships with multiple business and technical teams and ensures that the technical security strategy is aligned with those teams' objectives and the overall business strategy. Actively participates as a project team member and/or project team leader if necessary. Information Security subject matter expert on a wide variety of departmental and enterprise-wide projects and initiatives. Maintains a deep level of expertise in multiple technical domains and (e.g., securing permissions on systems such as Windows, mainframe, Unix/Linux, Tandem, Active Directory and Cloud: Azure Active Directory, AWS, etc) provides/contributes to leadership in these areas. Supports applications and systems owned and maintained by the Logical Access Team.About This Role: Job Responsibilities

• The Senior Analyst will support the implementation and administration of information security policies, practices, and procedures to ensure the protection of confidential information.
• Assist IT staff and end users with technical problems and implementations relative to data and computer system security and access controls both on prem and in Cloud environments.
• Detecting and responding to security incidents and assisting with audits both internal and external.
• Address threats directed against enterprise Networks, hosts, and data on a 7 x 24 x 365 basis.
• Development and execution of Information Security Identity and Access Management (IAM) strategies and roadmaps.
• Participate and/or manage projects and engagements relative to the IAM roadmap (e.g., implementation of new IAM tools, automation, etc).
• Creation and maintenance of security policies, standards, and security patterns.
• Provide consulting to the business and IT teams on security requirements around IAM on prem and in Cloud environments.
• Develop and maintain critical Information Security vendor relationships (e.g., Okta, Vormetric, CyberArk, etc).
• Development of security awareness and training relevant to areas of responsibility.
• Maintain knowledge and compliance of all industry relevant regulatory requirements.
• Participates in projects and other activities involving the use of security technologies related to the protection of Enterprise systems and data.
• Participates in the planning, designing, development and implementation of data and system security controls.
• Develops and implements strategies to close identified gaps in security.
• Develops automation to improve efficiencies for Information Security as well as the enterprise specific to IAM through PowerShell scripting or other technologies
• Support and collaborate with other Information Security Teams.The Ideal Candidate for This Role: The ideal candidate will have the following:
  • Excellent communication and customer interface/relationship skills, as well as the ability to effectively coordinate and work with other departments.
  • Extensive knowledge of industry and Government standards as applicable to Information Protection and Assurance and knowledge of Information Security best practices and business controls.
    • Extensive networking and troubleshooting knowledge (On-Prem & Cloud based networking).
    • Understanding of application security architecture and secure development best practices.
    • Knowledge and experience with Active Directory, IAM, and Exchange Online in Microsoft Azure
    • Knowledge and experience with IAM and JSON in Amazon AWS
    • Knowledge and experience with PowerShell scripting
    • Knowledge and experience with Mainframe systems (i.e. ACF2/RACF, CICS, etc) is desired.
    • Ability to make appropriate decisions considering the relative costs and benefits of potential actions.
    • Ability to apply varying leadership skills and traits that create solutions to unexpected situations.
    • Ability to help and assist less experienced team members to achieve their goals.
    • Must have broad and deep technical knowledge and be able to learn new technologies rapidly and independently.
    • Should have broad knowledge of security policies and practices, including ISO 17799 (27001), Payment Card Industry (PCI), Federal Financial institution regulatory agencies (OCC, FFIEC), and other internal or external governing entities.
      • Candidates must have a minimum of 5 years of relevant experience.
      • Ability to work independently with limited supervision.
      • Ability to recognize and deal appropriately with confidential and sensitive information.
      • Accepts ownership and full accountability for areas of responsibility with a high degree of initiative and passion for the work
      • A Bachelor's degree in computer science, information systems, business management, engineering, a physical science, or other relevant field is required. Equivalent work experience may be considered as a substitution.
      • One or more information security certifications desired (CISSP, CISM, CISA, SANS, etc.)
      • One or more Cloud certifications is preferred (AWS, Azure).
      • Regular and predictable attendance is a required function of the job.Equity, Diversity, & Inclusion:FNBO is committed to belonging, inclusion, diversity and equity. We are committed to intentionally and proactively creating pathways to success for historically underrepresented populations. To accomplish this, we foster a culture of belonging and inclusion so that every employee is valued, and has opportunity and the ability to make an impact. FNBO strives to reflect the diversity of the communities we serve in the makeup of our workforce.See the full FNBO Equity, Diversity, & Inclusion Statement here All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status. Click here to download 'EEO is The Law' Self-Print Poster Click here to download 'EEO is The Law' Supplement for Federal Contractors Click here to download 'EEO is The Law' GINA Supplement

Keywords: FNBO, Omaha , Sr. Analyst, Information Security, Professions , Omaha, Nebraska