IT Security Analyst

Company Federal Reserve Bank of San Francisco

• Provide Information Security Program and Risk Management support by helping to define key risk indicators, gathering metrics, and analyzing the effectiveness of District and System information security programs and policies
• Assist with creating or adjusting ongoing programs and policies as warranted based on ongoing analysis of effectiveness and internal and external cyber threat landscape and risk posture.
• Evaluate the effectiveness of awareness and training programs and makes recommendations for improvement.
• Analyze information security control metrics to demonstrate effectiveness or need for control improvement.
• Develop regular security briefings and other collateral that communicates cybersecurity and organizational risk to various stakeholders based on analytical viewpoints derived from multiple sources of internal and external security data points.
• Create, distribute, and update reports on information security service performance to management and information security governance forums
• Interface with staff from various departments communicating security issues and responding to requests for assistance and information
• Contribute to the maturation of Insider Risk Program including developing and deploying training and awareness campaigns, creating and tracking new metrics and reporting, and executing on program administration requirements

• Bachelor's degree in Computer Science, Information Systems, Computer Engineering, Cybersecurity, Systems Analysis or a related field or equivalent work experience
• 2+ years of information security related experience in areas such as: security operations, testing, and/or system or security administration
• Working knowledge of security issues, techniques, and implications across computer platforms
• Strong written and verbal communication skills
• Strong knowledge of critical security controls
• Working knowledge of the processes, tools and techniques of information security management, ability to deploy and monitor information security systems, as well as detect, resolve, and prevent violations of IT security, to protect organizational data.
• Must be a U.S. Citizen

• Experience managing cyber security risk in the context of standard enterprise risk management practices
• Security certifications:
  • Certified Security Analyst (ECSA)
  • CompTIA Cybersecurity Analyst (CSA+)
  • Certified Information Systems Auditor (CISA)
  • Certified Information Systems Security Professional (CISSP)
  • Certified in Risk and Information Systems Control (CRISC)
• MS SharePoint administration
• JIRA Software administration
• Working knowledge of scripting languages and/or process automation tools and techniques