The Information Security Analyst is responsible for implementing information security best practices as well as monitoring and reporting on the Bank's information security program. This role also has responsibility for business continuity and physical security initiatives.ESSENTIAL FUNCTIONS:Research and implement information security enhancements.Develop content and train employees on information security, business continuity, and physical security practices.Investigate security incidents to determine the damage and any action that may need to be taken. Thoroughly document the results of the investigation and ensure appropriate actions are taken.Investigate reported phishing attempts. Determine and take appropriate actions to mitigate risk.Oversee phishing campaigns, track failures, and provide remedial training.Perform data exfiltration and encryption reviews.Manage the access review process to ensure user access is appropriately provisioned.Manage the annual vulnerability/penetration and social engineering testing by working closely with third-party service providers.Collaborate with Information Technology to detect and mitigate vulnerabilities.Oversee data retention to ensure data is properly stored and archived.Respond to physical security alarms and business continuity events. Determine and take appropriate action.Ensure access and alarm systems are properly setup and kept up to date.Perform risk assessments related to information security, business continuity, and physical security.Develop and implement plans and procedures related to information security, business continuity, and physical security.Prepare reports for management and the Board.Gather and provide requested documentation for audits and exams.Maintain current knowledge of state and federal information security best practices.Maintain an understanding of emerging information security issues and ensure that the Bank is appropriately positioned to address those changes.Actively participate in demonstrating the behaviors outlined in The GRB Experience.Meet expectations in performance, productivity, and quality standards.Perform other duties as assigned.EDUCATION AND EXPERIENCE:Bachelor's degree in cybersecurity or a related field plus a minimum of three years of related work experience, or the equivalent combination of education and experience. In addition, a solid understanding of computer-related security systems including firewalls, encryption, password protection and authentication is required.COMPETENCIES:Provide a remarkable client experience. Greet clients with warmth, genuine interest and a smile.Lead by example. Identify current or potential problems, take ownership and see them through to resolution.Act as a unified team. Possess strong interpersonal skills including the ability to proactively communicate with and help others, within and across departments.Ability to work independently. Seek and incorporate feedback on your performance from management, coworkers and clients.Proficient in Microsoft Office Suite or related software.Proficient, or able to gain proficiency with, a broad array of software applications and tools.Ability to handle multiple tasks, moving quickly and effectively between competing goals.Ability to handle confidential information with utmost discretion and sensitivity.Exceptional decision-making skills, demonstrating a high level of judgment.Exceptional problem-solving and analytical skills.PHYSICAL DEMANDS:The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.While performing the duties of this job, the employee is regularly required to use hands or fingers, handle, or feel and reach with hands and arms. The employee frequently is required to stand, sit, climb or balance, and talk or hear. The employee regularly is required to walk and stoop, kneel, crouch, crawl, and climb stairs. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, and ability to adjust focus.WORK ENVIRONMENT: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. The work environment is indoor and climate controlled. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.Genesee Regional Bank is an equal opportunity organization. We recruit, employ, train, compensate, and promote without regard to race, religion, creed, color, national origin, age, gender, sexual orientation, gender identity, marital status, disability, veteran status, or any other basis protected by applicable federal, state or local law.THIS JOB DESCRIPTION IS SUBJECT TO CHANGE AT ANY TIME.Equal Opportunity Employer/Protected Veterans/Individuals with DisabilitiesThe contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)#J-18808-Ljbffr
