Information Security Specialist

The incumbent in this position is responsible for providing support to the Director of Infrastructure and Security in helping to facilitate the efforts required to direct and maintain a security program and business continuity management program. Work involves moderate difficulty in coordinating activities involving information security and business continuity defined by the IT Risk Control function, and liaising with security counterparts within the IT infrastructure. Resources to do the job require reliance on knowledge of security and business continuity planning. General supervision is received from the Director of Infrastructure and Security.

Business Continuity :

•Assists in developing and maintaining business continuity plans for the credit union. •Conducts regular business continuity reviews with each department. •Identifies and assesses IT related risks and methods to mitigate those risks. •Develops and tests business continuity plans. •Responsible for business impact analysis. •Works with vendors and third-party providers to ensure uninterrupted services for the credit union •Provide guidance and coordination to ensure the business continuity program is following industry best practices and will be effective in the event of a disruption.

Security Administration :

•Collects and analyzes information on security threats, vulnerabilities and attacks on the credit union. •Continuously assesses security systems. •Establishes a comprehensive monitoring system for the credit union’s confidential information. •Defines and reviews employee system access. •Ensures compliance with all legal and regulatory security requirements. •Monitors system logs for suspicious and/or unusual activity. •Develops and manages appropriate system controls. •Supports IT staff on security-related projects. •May facilitate internal and external security audits. •May conduct employee security awareness and training. •Responsible for the data loss prevention program •Works with departments and individuals throughout the organization to ensure the security of Alliant information.

Requirements; Completion of a Bachelor’s degree in Information Systems, Computer Science, Management Information Systems or a related field and minimum three years experience in Information Security or Business Continuity Planning; or an equivalent combination of training and experience. Financial institution experience preferred. CISSP, GSEC, CISM, GIAC, CISA and other applicable certifications desired. Must have competent communication skills and the demonstrated ability to facilitate communication between multiple parties. Knowledge of business continuity practices and procedures. Familiarity with COBIT framework and GLBA regulatory guidelines.