IT Security Administrator

Welcome to PeoplesBank! We are the largest mutually chartered bank in Western Mass and Northern Connecticut and a leader in green values, sustainable energy financing, and charitable giving. We operate in the best interest of our customers and strive to be an inclusive and engaging work environment. We offer excellent compensation, workplace flexibility, and a competitive benefits package to our associates. Our award-winning culture has earned us recognition as Best Place to Work and Best Local Bank. Come join our team of dedicated and innovative individuals and contribute to our dynamic, successful organization.

Summary: The IT Security Administrator will ensure applications, data, platforms, and environments (cloud and on-premises) are protected from unauthorized access leveraging advanced security monitoring to parse data, find suspicious activity, and mitigate risks / vulnerabilities. Must be knowledgeable about virtual environments and Microsoft Azure security, including 365.

Essential Duties and Responsibilities include the following. Other duties may be assigned.

Assist to implement security measures to protect bank systems, per direction of IT management and under the guidance of the Risk Oversight Group (ROG) and the bank's Information Security Program.

* Responsible for day-to-day firewall, anti-malware, MFA, and secure email gateway monitoring and updating. Works with the bank's associated vendors as needed.

* Responds to incoming security requests through the Bank's service management platform, in a timely manner according to SLA's.

* Responds to computer security breaches and viruses.

* Adheres to computer security policies and procedures which relate to the internal and external integrity of the Bank's systems. Assist in the production of and maintain documentation and standard operational procedures.

* Follows and implements best practice standards for IT security (e.g., NIST, FS-ISAC, etc.)

* With coordination of the IT Security Officer, reviews and applies applicable software patches and upgrades to bank systems. Documents applied security patches, including the criticality and patch purpose. Review and respond to security events, documents, and enter IT service management platform.

* Works with subject matter experts to provide guidance on incident analysis, root cause analysis and problem resolution.

* Monitors and reviews security system logs and alerts via a SIEM and/or other tools; works with security team, ROG, and MSP to ensure logs and alerts have been investigated, cleared, and addressed appropriately.

* Assists ROG and IT Security Officer with IT security components of the Bank's disaster recovery testing and documentation.

* Works with Information Technology vendors to implement security systems.

* Works with IT Management and ROG to implement security solutions on the Bank's network and systems.

* Stay up to date on the latest threats and vulnerabilities and protect bank systems from attack.

* Completes all yearly compliance training and testing and complies with bank, federal, and state regulations. Complies with Bank Policies and Procedures. Adheres to departmental and bank-wide service standards.

Qualifications: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required.

Education and/or Experience: Generally, requires a four-year degree or an equivalent combination of education and experience plus two to four years of relevant experience. May require thorough knowledge of a technical or specialized field.

Skills needed:

• Must have excellent customer service skills, projecting a positive image and professional manner at all times.
• Excellent verbal and written communication skills.
• Able to develop and understand technical documents.
• Organized with attention to detail.
• Strong critical thinking skills.
• Demonstrated problem-solving and analytical skills.
• Proficient, or able to gain proficiency with, a broad array of security software applications and tools.
• Thorough understanding of computer-related security systems including firewalls, encryption, and password protection and authentication.
• Experience with application/system IT Security assessments including internal/external penetration testing.
• Strong working knowledge of Active Directory and group policy security schemes
• Working knowledge of hardening host's and guest operating systems in a virtualized environment
• Working knowledge of Microsoft Azure and 365 platforms.

Certifications, Licenses and/or registrations: Security+ or equivalent certification preferred.

Computer Skills: Knowledge of Information System Security, firewalls, SIEM, intrusion detection/protection and related vulnerability assessment tools.