Information Security Specialist bei Maine Community Bank

Description

Department: Risk

Reports to: Information Security Officer

FLSA: Non-exempt

Last Modified: 12.2.24

Job Summary:

Under the general supervision of the Information Security Officer, the incumbent supports the bank’s organization-wide information security program. Assists with monitoring controls that protect information and/or are critical to the operation of the Bank. Assists with managing the security of physical and virtual information assets. Responsible for incident detection and following escalation processes as it relates to Information Security. The incumbent is also responsible for assisting with compliance with applicable federal and state regulations as well as contractual obligations relating to Information Security. Participates in the development of relationships in the communities the Bank serves. 

Essential Functions:

• Performs daily and weekly maintenance tasks to include running firewall and managed services reports, researching phish alerts, responding and following up on alerts and processes related to data protection. 
• Performs asset management activities such as vulnerability software operation, vulnerability scanning and reporting, remediation tracking and hardware and software inventory management.
• Performs detection software management – traffic monitor management and investigations as well as workstation and server monitor management and investigations.
• Participates in audit activities such as gathering audit materials and assisting with remediation projects. 
• Assists with Information Security activities including but not limited to: writing committee minutes, updating procedures, conducting risk assessments, setting up and managing phish campaigns and information security training, researching emerging threats in order to provide information to and collaborate with the IT team on solutions, and cloud application auditing and reporting.
• Addresses physical security such as clean desk issues. 
• Provides GLBA, Functional and clean desk risk assessment support.
• Completes daily information security network access activity reviews.
• Performs user access and activity review preparation.

Other Responsibilities

Examples:

• Provides professional, courteous, and efficient service to all internal and external customers.
• Participates in special projects as directed by management.
• May assist in Project Management activities as appropriate.  
• Keeps apprised of trends and developments in Information Security, particularly relative to financial services.
• Participates in local community service affairs.
• Observes safety and security procedures and guidelines.
• Performs other miscellaneous duties as requested.

Skills, Experience, and Training Required:

Examples: 

• Bachelor’s degree in Information Technology, Information Security or a related field and a minimum of one year of information security experience; or an equivalent combination of education and experience.
• Demonstrated experience with Windows 10 and Windows Server, LAN configuration, Firewalls and Protocols.
• Expertise working with Microsoft Applications: Excel, Visio, SharePoint and Office 365 Management.
• Experience with Anti-Virus/Malware prevention. 
• Solid analytical, problem-solving and investigatory abilities. 
• Must have outstanding oral and written communication skills and have the ability to build effective working relationships with department managers.
• Must have the ability to work well independently and a strong desire for continued learning.
• Cisco, Microsoft, or CompTIA certification preferred. 
• Financial institution regulatory knowledge preferred. 

Physical Requirements and Working Conditions:

Examples:

• Handling of moderately heavy materials (up to 20 pounds).
• Minimal physical effort required. May sit or stand with freedom of movement on a regular basis.
• Physical surroundings are generally pleasant and comfortable.