Note: The job is a remote job and is open to candidates in USA. Nuvision Federal Credit Union is seeking a Senior Information Security Administrator to oversee and maintain the organization's information security systems and controls. This role involves managing daily security operations, ensuring compliance with regulatory requirements, and collaborating with IT and other departments to strengthen the credit union's security posture.
Responsibilities
- Protect electronic information and infrastructure from external and internal threats, maintain compliance with statutory and regulatory requirements regarding information access, security and privacy
- Manage and configure security tools and technologies, including firewalls, intrusion detection systems, and antivirus software
- Analyze logs for suspect intrusion or attacks
- Analyze event logs, alerts, and system activity to detect anomalies and respond appropriately to potential incidents
- Oversee and support daily operations of Fortigate Firewalls, Darktrace Email and IDS/IPS, Arctic Wolf SIEM and vulnerability management, Appgate VPN, Sophos Anti-Virus, Fortra DLP, and additional security systems as assigned
- Monitor security incidents and alerts, escalate as needed, and participate in containment and remediation activities
- Participate in system security configuration changes (Change/Configuration Management)
- Ensuring all changes are properly scheduled, documented, and fully tested prior to roll-out
- Conduct regular security assessments, audits, and risk analysis to identify vulnerabilities and threats
- Collaborate with IT and other departments to ensure security measures are integrated into all aspects of the organization's operations
- Prepare written and oral reports to keep team leaders informed of work progress
- Maintains and documents security systems in accordance with internal standards
- Ensure compliance and enforcement of systems standards and policies for connected computing environments
- Analyzes and participates in the development of security standardization and implementation of security controls
- Keeps professional skills updated and stays up to date with the latest security trends, threats, and technologies
- May participate in an on-call rotation or respond to after-hours security events as needed
- Perform vulnerability assessments, patch management, malware/rootkit protection, log review, access audits, and secure traffic control. Ensure timely remediation and proper configuration of network-connected systems
- Manage secure vendor connectivity
- Oversee daily performance of security infrastructure including firewalls, SIEM, secure remote access, etc
- Ensure systems are properly configured, monitored, and updated to maintain network integrity
- Perform audits and tests of all security systems and work with security vendors to remediate alerts
- Maintain inventory of security hardware/software and assist in lifecycle management, budgeting, and licensing compliance
- Be a contributing member of various project teams with the possibility of multiple team projects overlapping
- Manage your time and productivity to ensure projects stay on task in time, cost, and scope
- Effectively work with project manager and stakeholders, maintaining communications
- Support ongoing security hardening, DR/BCP exercises, testing of data/system recovery, and improvements to resilience
- Treats all co-workers and members with respect
- Support and participate in continuous improvement activities
- Represent the Credit Union in a positive and professional manner
- Other related duties as assigned
- Maintains member and other sensitive information with confidentiality
Skills
- Minimum 5 years experience in information security, network security, or systems administration with hands-on experience managing firewalls, IDS/IPS, SIEM, VPN, endpoint protection, and vulnerability management
- The incumbent is required to be highly qualified for a large variety of networking security technologies, to possess excellent analytical skills and to demonstrate a high degree of interpersonal abilities
- Strong understanding of network security and protocols, traffic capturing and protocol analysis
- Hands on implementation, configuration, and management of security enterprise infrastructure
- Physical work experience with enterprise class firewalls and IDS Knowledge of information security governance
- Excellent communications and interpersonal skills, and ability to work effectively with all organizational levels and auditing entities
- Able to work on multiple projects/priorities in a deadline-driven environment and adapt quickly to change
- A wide degree of creativity and latitude is expected
- Foundational certifications such as CompTIA Security+, Network+, or equivalent knowledge gained through work experience are preferred for minimum qualification
- Equivalent professional experience may be considered in place of formal certifications
- Bachelor of Science degree in computer science, MIS, or similar discipline or equivalent years of service
- 3 years experience as a security administrator with exposure to financial services, banking, or credit-union environments
- Experience administering enterprise platforms such as Fortigate firewalls, Darktrace, Arctic Wolf SIEM, Appgate VPN, Sophos, and Fortra DLP
- Experience working with cloud or hybrid infrastructures (Azure, AWS, GCP) is strongly preferred
- Experience with cloud security and virtualization technologies
- Knowledge of UNIX/Linux operating systems
- Ability to conduct research into a wide range of information security issues as required
- Ability to absorb and retain information quickly
- Ability to present ideas in user friendly language to non-technical staff and end-users
- Information Security certifications (CISSP, CEH, MCSE)
Benefits
- Medical
- Dental
- Vision
- Life Insurance
- Flexible Spending Account
- 401(k) Matching
- Paid Time Off
- Training Provided
- Tuition Reimbursement
Company Overview