Information Security Analyst

Position: Information Security Analyst I |
Division: Information Technology
Work Days: Monday - Friday |
Hours of Operation: 8:00am - 5:00pm

We are one of the largest independently owned banks in Texas with offerings in personal and private banking, wealth management, business banking and mortgage lending.

The Information Security Analyst I is responsible for supporting the Information Technology (IT) department by safeguarding the confidentiality, integrity, and availability of client and business information. This role plays a crucial part in the bank's information security program by identifying, analyzing, and mitigating security risks associated with banking systems, applications, and services. The position involves collaboration with various business lines to ensure the implementation of security controls that comply with regulatory requirements and internal policies.

• Assist the Manager of Infrastructure and Information Security in managing various components of the bank's information security program, ensuring alignment with industry best practices and regulatory requirements.
• Identify and analyze information security risks by evaluating various security controls. Ensure that risks and corresponding mitigating controls are documented within the Information Security Risk Assessment.
• Provide expert guidance to business lines on mitigating security risks related to applications, systems, and services. Ensure that security measures are appropriately implemented.
• Evaluate and gain a deep understanding of the applications and services used by the bank, focusing on user security roles and functions to support different business lines.
• Serve as the subject matter expert for security-related aspects of network and system access, including ensuring compliance with security and regulatory requirements for new projects.
• Lead the investigation and documentation of information security incidents.
• Coordinate escalation processes and manage customer notifications as necessary.
• Manage and oversee the bank's annual information security requirements, including training, user access reviews, safeguarding customer information, and data classification efforts.
• Actively participate in new projects, initiatives, and due diligence processes for new vendors or software, providing security insights and ensuring compliance with the bank's security standards.
• Provide support for internal, external, and Office of the Comptroller of the Currency (OCC) audit engagements, including responding to audit findings and recommendations.
• Prepare documentation for Information Security Committee meetings and actively participate in discussions and decision-making processes.
• Oversee and coordinate BCP and DR activities, including testing events, updates to the BCP manual, and managing BCP committee meetings.
• Develop and implement ongoing internal security awareness training, customer awareness materials, and social engineering exercises to enhance the bank's security posture.
• Perform duties as a backup to the department manager, ensuring continuity of leadership.
• Assist with various projects and perform general departmental duties as directed.
• This position may require travel within the Bank's geographic area.

• 4 years of experience in banking, including knowledge of banking systems, bank products and services, and departmental functions.
• Experience in medium-to-large corporate banking software applications, network environments, and relevant security work is essential.
• A four-year college degree is preferred; however, a combination of education and a minimum of 4 years of relevant working experience will be considered.

• Demonstrates excellent organizational skills with a strong aptitude for detail and accuracy.
• Ability to work effectively with all levels of staff and management within the organization.
• Capable of analyzing complex problems and implementing effective solutions.
• Able to manage multiple competing priorities in a fast-paced environment.
• Strong verbal and written communication skills, with the ability to convey technical information to…