CYBER SECURITY ANALYST - CORP. IT SECURITY - FIRSTBANKPR

CYBER SECURITY ANALYST

CORPORATE IT SECURITY

FIRSTBANK PR

Our Company
At FirstBank PR, we strive to be a trusted advisor to our clients and our employees are the ones that ensure we deliver on our promise of excellence in personalized customer service. Our more than 3,100 employees in Puerto Rico, the Virgin Islands and Florida share a passion for excellent customer service. We are proud of our team because they are continuously surpassing our client’s expectations.
Do you have a passion for helping customers, building relationships, and delivering extraordinary, personalized customer service? If your answer is yes, FirstBank is the number one place for you.

A Brief Overview:

The Cyber Security Analyst is responsible for assisting the Information Security Manager and the Chief Information Security Officer (CISO) in identifying, mitigating, and responding to Information Security risks. As part of the functions, this role will perform complex analysis of high impact and sensitive systems to determine the appropriate security approach based on anticipated threat vectors. Conduct cybersecurity key management tasks and strategies allowing the integration of cyber operations consistent with FirstBank's cybersecurity posture.

The Cyber Security Analyst will be part of the Corporate Security Office (CSO) which is responsible of managing the Bank's Information Security strategy such as developing IT standards, policies, and procedures, to comply with applicable laws/regulations and industry best practices.

What You’ll Need to Succeed:

• Provide feedback regarding cyber security in the development/update of Information Security (IS) policies, procedures, standards, and guidelines
• Assist the Information Security Manager and/or Chief Information Security Officer (CISO) as necessary to respond and mitigate cybersecurity risks for internal control improvement
• Assist in the selection and tailoring of approaches, methods and tools to support service offerings to applicable business units
• Oversight and monitor of critical Information Technology / Information Security third party service providers and monitoring compliance of agreed-upon contracts/terms. Coordinate with MSSP and technology teams to ensure timely response, escalation, evidence preservation, and closure of security events.
• Coordinate Penetration Tests and Vulnerability Scans and evaluate results to proactively identify and fix security flaws and vulnerabilities.
• Responsible for assessing and prioritizing vulnerabilities utilizing a risk-based approach to expedite the remediation process
• Monitor and analyze security alerts, events, threat intelligence, and telemetry from SOC/MDR, EDR, email, network, cloud, WAF, DLP, vulnerability, and related security platforms.
• Actively participate in the Vulnerability Management Board (VMB) and oversight of the Patch Management efforts to provide feedback and best practices to remediate any outstanding risks/flaws. Perform vulnerability and exposure analysis, prioritize findings based on exploitability and business impact, and track remediation to closure.
• In conjunction with the ERM Department, active participant in the Incident Response Process to detect, investigate and recover from security incidents as well as assisting with incident response plans (when applicable)
• Work in conjunction with the IT Risk Management unit in the execution of the Cyber Security Risk Assessment
• Periodically report on the Cyber Security Posture of the Corporation to Senior and Executive Management
• Perform research and analysis of emerging and disruptive Information Technology / Information Security trends and tendencies that may affect the Corporation.
• Conduct intelligence analysis of external threats targeting the financial industry as well as leverages internal data stores in order to gauge the potential impact on business operations.
• Monitor vulnerability notices and provide engineering support for security patch distribution.
• Capable of mapping Cyber Security controls with applicable Security Frameworks (COBIT, ISO, NIST)
• Capable of mapping complex technical requirements, functionality, and capabilities to prescribed security controls, policies, and practices.
• Ability to receive and accurately interpret complex ideas/information, to effectively transmit to applicable stakeholders

Competencies:

• Anticipates and provides service excellence to both internal and external customers

• Establishes, sustains and fosters both internal and professional contacts to build, enhance, and connect to FirstBank service.

• Delivers clear, effective communication and takes responsibility for understanding others.

• Understands how the organization works, including, current and future policies, practices and trends

• Identifies problems and conducts appropriate analyses involving others to searches for best solutions

• Takes initiative and assumes personal accountability for goals, outcomes and deadlines

• The employee understands organization’s vision and upholds the organizations values in everyday words and actions.

• At higher levels the employee takes a long-term view and share with others the vision and the organization path ahead.

• Provides direction and leadership to help teams achieve goals and operate cooperatively and cohesively

• Demonstrate curiosity for learning and perform activities to make the most of their skills and boost potential in self and others

• Creates a view of change as an opportunity and inspires others.

• Looks for new ways to experiment with new ideas and approaches

What You’ll Need:

A bachelor’s degree in information technology, Computer Science, engineering, or business is required for this position. The incumbent must have at least 3-5 years of Information Security experience or experience in a similar position within the Banking Industry. A master's degree in computer science, information systems, engineering, or MBA is desired but not required. Or the equivalent combination of Education and Experience needed to be able to perform the functions of this job. CISSP, CISM or any other similar certification is highly desired.

Disclaimer: The above statements describe the general nature and level of work performed by individuals assigned to this position and are not intended to be an exhaustive list of all duties or responsibilities.

EQUAL EMPLOYMENT OPPORTUNITY EMPLOYER