Information Security Lead

JOB DESCRIPTION: The Information Security Lead will report to the SVP IT and will work closely with all Information Systems department staff to assess and reduce information security risk and ensure compliance with established financial institution regulations.

This role is responsible for Daily Security Alert Monitoring and Reporting, SOC, Security Information and Event Management (SIEM), Annual Risk Assessment Assistance, Quarterly Logical Access Reviews, Audit Response Assistance, Security Policy maintenance and mentoring other security team members. The position is responsible for the operation, performance, and availability of the Credit Union's core security systems throughout the organization. He\She is also responsible for handling security systems projects of all levels of complexity.

This is a Leadership position - in addition to the aforementioned operational responsibilities, this position will provide mentorship, guidance, performance monitoring, and escalated support to a team comprised of InfoSec Analysts, Administrators, and Engineers. This position will take ownership through hands on work and from managing and supporting the enterprise security systems, including design, implementation and support of the entire security suite at PFFCU. Must possess hands on ability to execute creative solutions to complex problems.

Must be able to balance the ability to work independently and concurrently be the leader of a high-performance team and keeping Senior Information Technology management fully appraised of the status of his\her projects and Security Operations. JOB RESPONSIBILITIES: Perform: Oversee Daily SOC dashboard maintenance and automation Daily Security Alert and Log Monitoring (Central Log, Virus, IPS, DLP, Web Content, Secure Email, and Active Directory Changes). Assist with Monthly alert and log management reporting Periodic security device and configuration reviews Monthly Security Metrics / Dashboards Quarterly and semi-annual Logical Access Reviews Utilize PFFCU's InfoSec governance risk & compliance platform to manage quarterly vulnerability reporting and remediation activities, and partner with IS team to ensure security patching is comprehensive, efficient and completed within targeted timeframes Assist with:

Evaluation and suggest improvements to PFFCU's SOC and Automation systems Supporting external and internal auditors Evaluation and suggest improvements to PFFCU's Security Information and Event Management (SIEM) Solution Documentation of Security Incidents as a part of the CSIRT Team Develop or Maintain knowledge of: The latest NCUA and GLBA financial institution regulations PFFCU departments and functions and effectively interface with staff at all levels Working with the SVP Information Technology to determine departmental priorities When appropriate, engaging outside contractors with proper technical expertise Ensuring timely completion of projects and deployments Mentor and monitor security staff to build a reliable, high performing infrastructure team Other duties as assigned by the SVP Information Technology TECHNICAL SKILLS: In depth working knowledge of a variety of network perimeter security technologies including:

Firewalls (Cisco NGFW and PaloAlto) Web Filter (ForcePoint) Intrusion Detection/ Protection Systems DLP - Network Based Data Loss Prevention Vulnerability Scanners (Nessus) Zero Day technologies (FireEye/Trellix) Endpoint technologies (AMP, Defender, etc.) Email security technologies Working knowledge of Security Risk Assessment Methodology, Vulnerability Analysis and strong knowledge of SIEM technology Project management, troubleshooting and analytical skills Project management skills a must Experience working with vendors on multiple levels (ordering, provisioning and engineering) Must possess effective written and verbal communication skills Must possess knowledge of monitoring technologies\methods relating to security systems Must possess a high level of comfort with debugging complex issues Must possess excellent customer service skills and be able to work independently and with a team in a highly customer-focused environment Strong understanding of all aspects of Security Systems as well as strong technical aptitude and problem-solving skills are needed to perform this job successfully Ability to meet deadlines and concurrently manage multiple projects. JOB REQUIREMENTS: Bachelor's Degree or equivalent related experience 5 years of hands on information security engineering and administration experience Ability to lead, mentor, and develop a high performing InfoSec Team Demonstrated technical knowledge of perimeter security devices and configuration Ability to assess problems and situations possesses analytic ability and good judgment Demonstrate effective business communication and technical writing skills Experience working with third party service providers Ability to handle multiple projects at the same time Monitor and maintain security appliances to insure the integrity of all systems from both internal and external entities.

Proactively monitor security's performance and utilization and provide recommendations for improvement, upgrades, and expansion. Accurately document current and future security configuration and changes following PFFCU's change control guidelines. Provisioning and maintenance of security infrastructure Problem or Incident escalation contact including rotating afterhours support Develop a working knowledge of the business side of PFFCU and be able to effectively interface with staff using the technology. Strong project skills required, specifically the ability to maintain focus and complete projects with multi-month timeframes Ability to think logically and visualize abstract concepts Ability to clearly communicate technical information to individuals at all levels of the organization and with vendors Ability to prioritize multiple tasks Ability to work varying hours, sometimes includes evening and weekend work PFFCUBO