Information Security Analyst II

Our Mission is to help Members grow financially.

Our Vision is to be Members' First Choice for all Financial Services.

We can achieve these goals through our commitment to providing excellent service to our membership and our communities. And it all starts with YOU We are looking for a service-minded individual to join our team in order to continue to provide the high-quality service our members expect from us.

Our full-time team members enjoy a wealth of benefits including employer-paid medical and dental insurance premiums, competitive pay, and a 401(k) plan with an employer match. The great service we provide to our Members is reflected in our team environment and the professional development opportunities our positions offer. People Helping People is what we do every day.

Submit your application to us today and let us be the First Choice for your new career journey

About Us:

Knoxville TVA Employees Credit Union is a not-for-profit, Member-owned, and locally operated financial institution serving the financial needs of its communities of Membership. We have 25 locations throughout East Tennessee and we serve more than 264,000 Members. The Credit Union helps Members grow financially by offering a variety of accounts including: checking, savings and investments. Also offered are competitive loan rates on new and used autos and recreational vehicles, mortgages, personal loans and credit cards.

Benefits:

• Employer-paid health and dental insurance monthly premiums
• Accrual of paid PTO Leave
• Employer-matched 401k, 50% match up to 6% of employee contributions
• Employer-paid Group Life Insurance and Long-Term Disability benefits
• Potential bonus up to 11% of average salary over the past year based on Credit Union-wide goals
• Paid Holidays and Paid Training
• Potential pay increases through additional training opportunities
• Opportunity to earn incentive pay
• The ability to help serve your local community through our mindset of People Helping People

PRIMARY RESPONSIBILITIES

Administrative:

Report known and potential information security risks and vulnerabilities to Credit Union management. Track the status of known information security vulnerabilities and work with IT and business departments to promote remediation or acceptance of known exposures.

Maintain an inventory of VPN, mobile device, and file sharing site users and ensure only active, authorized individuals have external access to Credit Union data.

Develop and conduct user awareness training for new employees during new employee orientation. Develop and conduct periodic user security awareness campaigns and training.

Prepare, document, and maintain standard operating procedures and technical references for security solutions/tools.

Make information security a cultural focus of the organization by utilizing various methods such as awareness campaigns and branch visits.

Technical:

Manage and maintain all IT security related applications, hardware, and tools. Ensure all aspects of these products are working as intended and are updated against the latest threats.

Perform routine monitoring and analysis of system logs, user activity reports, and other security related alerts and reports in order to identify suspicious, unauthorized, or malicious activity.

Participate in the evaluation of new products and services and ensure the Credit Union understands and properly weighs the potential security risks inherent within these products.

Review the configuration of workstations, servers, and network devices, including firewalls and other external facing devices, on a periodic basis. Provide guidance and recommendations around any potential security risks or violations of Credit Union security best practices.

Ensure patch management is completed in an accurate and timely manner.

Responsible for malware analysis, threat modeling and deployment/usage of a malware detonation device/sandbox to test for potential malicious software or websites.

Information Security:

Maintain knowledge of relevant laws and standards including Gramm-Leach-Bliley Act, National Credit Union Administration (NCUA), Federal Financial Institutions, Examination Council (FFIEC) and National Institute of Standards and Technology (NIST) requirements and standards.

Determine security violations and inefficiencies by conducting periodic audits and vulnerability assessments. Determine the potential impacts and mitigations and relay to appropriate staff for remediation.

Assist in collecting documentation from IT and business departments in preparation for NCUA and external audit annual exams and participate in audit interviews and responses.

Responsible for incident response, mitigation, and reporting.

Maintain up-to-date knowledge and skills in the Information Security field through yearly training and skills maintenance.

Standards:

Follow all Credit Union policies, procedures and regulations.

Represent the Credit Union in a professional manner (including but not limited to appearance, behavior and performance).

Maintain regular and predictable attendance.

Work cooperatively with others.

All other duties as assigned.

POSITION COMPETENCIES

Service – Excellent interpersonal skills and professional demeanor. Ability to develop relationships with members to meet financial needs through the relevant suggestion and referral of Credit Union products and services.

Job Knowledge – Technically and professionally skilled in all position responsibilities and duties. Seeks new skills and opportunities for self-development.

Quality – Ability to be flexible and have a service-oriented view to fulfill member, employee and Credit Union needs. Perform tasks with a high level of accuracy while maintaining attention to detail.

Teamwork – Ability to work as a team as well as independently to meet goals and objectives and to meet the needs of all members.

Analytical – Work systemically and logically to resolve problems, identify causation and anticipate unexpected results. Manage issues by drawing on own experience and knowledge and call on other resources as necessary.

Communication – Ability to handle situations with tact and respect. Ability to maintain confidentiality of member information.

Initiative – Demonstrate a desire to do the job to the best of ability and have a desire to learn new techniques and skills.

Planning/Organizing – Ability to work under deadlines with frequent interruption; and the ability to balance multiple projects/activities with varying deadlines.

Quantity – Ability to meet established goals.

QUALIFICATIONS

Education/Experience – Bachelor’s degree from four-year college or university or related experience or equivalent combination of education and experience. Five or more years of experience in Information Technology preferred. IT security certifications preferred.

Qualifications and Requirements – Individual must possess the knowledge skills and ability required to execute the essential functions in a satisfactory manner.

Language – Ability to read, analyze and interpret general business periodicals, professional journals, or governmental regulations. Ability to write reports, and procedure manuals and use proper grammar, punctuation and spelling. Ability to effectively present information and respond to questions from groups.

Mathematical – Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions and decimals. Ability to compute rate, ratio and percent.

Reasoning – Ability to solve practical problems and deal with a variety of concrete variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written or oral form.

Computer – Knowledge of IT networks. Ability to operate related computer applications including Word, Excel and email. Proficient typing skills. Ability to operate other business equipment including adding machine, coin, and money counting machines and telephone.

Certificates and Licenses – At least two professional certifications in IT Security preferred. Valid driver’s license.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)

---