FIRST NATIONAL BANK OF BASTROP - Information Security Administrator at FIRST NATIONAL BANK OF BASTROP

The First National Bank of Bastrop is proud to be named a Best Place for Working Parents®. We offer an opportunity to work with a financial institution that prides itself on excellent customer service and a competitive compensation and benefits package that includes:

• Employer paid benefits:
  • Paid time off
  • Paid parental leave
  • Paid volunteer time
  • Employee Stock Ownership Plan with 401(k) Provisions (KSOP) with match
  • Up to $825 match on Health Savings Account (qualifying medical plan required)
  • Life/AD&D/LTD insurance
  • Tuition reimbursement
• Optional benefits:
  • Medical insurance
  • Dental insurance
  • Vision insurance
  • Supplemental coverages
    • Short term disability
    • Cancer
    • Critical Illness
    • Accident
  • Medical Spending Accounts
    • Flexible Spending Account (FSA)
    • Health Savings Account (HSA)
    • Dependent Care FSA

Description:

A critical function of technology modernization is a strong information security program. Robust information security programs require cybersecurity professionals that understand how to support business unit technology needs without compromising information security standards. The Information Security Administrator (ISA) will execute the day-to-day information security duties and the technical delivery of the Bank’s information security program. The ISA will identify security gaps, monitor all lines of business with respect to cybersecurity, and assist the Chief Information Officer (CIO) in the continued development of the

information security program.

 Essential Duties:  

• Enhance, monitor, and report on the Vulnerability Management Program.
• Partner with the Manager, Information Technology, to develop a Change Management Program.
• Implement and monitor Enterprise-wide Security Solutions.
• Identify bank managed firewall and intrusion prevention solutions.
• Identify a bank managed web content filtering solution.
• Continued development of M365 security solutions and Windows Defender.
• Further documentation of the Information Security Program.
• Support annual BCP/DR testing.
• Configuring security systems, analyzing security requirements, and recommending Improvements.
• Monitoring network traffic for suspicious behavior.
• Creating network policies and authorization roles and defending against unauthorized access, modifications, and destruction.
• Consult staff, managers, and executives about the best security practices and providing technical advice.
• Configure and support security tools, such as firewalls and anti-virus software.
• Prepare and deliver reports as requested.
• Perform other duties as assigned.

Bank Secrecy Act Duties:

• In the performance of respective tasks and duties, this position must maintain knowledge of Bank Secrecy Act regulations and all other regulatory, security, and Bank policies and procedures.

Company Conformance:

• First National Bank’s (FNB) promotional materials may include photos, videos and other recordings taken in the workplace or at company-sponsored events. Acceptance of employment with FNB gives consent to such photos, videos and other recordings and these may be used in social media posts, newsletters and other promotional materials. No extra compensation or advance notice will be provided when recordings are made or published.
• In compliance with all applicable regulations and Bank policies, this position is expected to successfully produce quality work within deadlines, with or without supervision; interact professionally with other employees, customers, and vendors, while always respecting the need for confidentiality of customer information. The employee will work effectively as a team contributor on all assignments and work independently while understanding the necessity for communicating and coordinating work efforts with other employees and organizations. Furthermore, the employee is encouraged to actively represent the Bank to customers and the general public in ways that promote the integrity, validity, and mission of the Bank by participating in community organizations, events, and activities. The employee is also expected to maintain a commitment to continuing education in the banking field through self-study and both in-house and outside training opportunities in all applicable banking policies, procedures, and regulations.
• Regular and punctual attendance is expected, and appropriate attire is required at all times, while either performing job functions or representing the Bank at outside events and activities.

Required Minimum Qualifications:

• High School graduation or equivalent with related Accredited Certifications.
• Five years of experience working in an information security role at a financial institution.
• Experience working within the NIST Framework; developing M365 security solutions and Windows Defender; installing, administering, and troubleshooting network security solutions; updating software with the latest security patches and ensuring proper defenses are present for each network resource; performing vulnerability and penetration tests, identifying and defending against threats, and developing disaster recovery plans; configuring security systems, analyzing security requirements, and making recommendations; developing, monitoring, and testing business continuity and disaster recovery programs. Experience with regulatory exams and audits; policy writing and development; and preparing and delivering reports to Executive Management and Board of Directors.
• Preferred: College Degree

Must also have the following demonstrated knowledge, skills, and abilities:   

• Strong knowledge of the FFIEC Regulations and Guidelines and all other relevant regulations for information security programs (related to financial institutions).
• Demonstrated knowledge of vendor management and reviewing information security related documents.
• Knowledge of regulatory requirements, federal and state laws related to the financial industry.
• Excellent written and verbal communication skills.
• Problem-solving and critical-thinking skills.
• Ability to lead and teach others.
• Ability to explain highly technical concepts in simple terms.