Information Security Analyst

Cathay Bank - Headquarters; Black Rock; On-site; Full time

Job summary

A leading financial institution is seeking a Security Operations Manager to oversee the Bank's security operations. The role involves managing vendor security, assessing risks, and ensuring compliance with security policies. Ideal candidates will have a degree in IT or Security and relevant certifications. Join a team that values growth and offers competitive pay and benefits.

Benefits

Medical insurance

Dental insurance

Vision insurance

Life insurance

401(k)

Qualifications

• At least 3 years in Security Risk, Operations, or Auditing.
• Experience with third-party risk assessments.

Responsibilities

• Perform vendor security risk assessments.
• Evaluate application security risks and recommend mitigation strategies.
• Support implementation of Endpoint and Network Security solutions.

Skills

Project management skills

Excellent communication

Problem-solving skills

Interpersonal skills

Collaborative skills

Self-motivated

Education

Degree in Information Technology

Certifications such as Security+

CISSP

CISM

Tools

SIEM

EDR/XDR

NAC

Cloud Security

Microsoft security tools

Job description

Medical insurance, dental insurance, life insurance, vision insurance, 401(k)

Join Our Team!

Are you enthusiastic, highly motivated, and have a strong work ethic? If yes, come join our team! At Cathay Bank, we strive to provide a caring culture that supports your aspirations and success. We believe people are our most valuable asset and we proudly foster growth and development, empowering you to achieve your professional goals. Having thrived for 60 years, we have persevered through many economic cycles due to our team members' drive and optimism. Together, we can make a difference in the financial future of our communities.

Apply today!

What our team members are saying:

Video Clip 1

Video Clip 2

Video Clip 3

Learn more about us at cathaybank.com

Job Overview

GENERAL SUMMARY

This position is responsible for managing and maintaining the Bank's Security operations and preventive controls in accordance with established Information Security policies, standards, procedures, regulations, and industry best practices.

Primarily, the role involves reviewing vendor security controls, assessing risks, identifying control gaps, and ensuring remediation.

Essential Functions

1. Perform vendor security risk assessments to evaluate inherent and residual risks.
2. Evaluate application security risks and recommend mitigation strategies.
3. Assess the design and effectiveness of security controls implemented by vendors.
4. Review vendor security practices across various domains including governance, access control, incident response, vulnerability assessments, network and endpoint security.
5. Coordinate with Third Party Risk Management, IT, and business Relationship Managers for vendor assessments.
6. Address audit and regulatory findings related to Security and Vendor Risk Management.
7. Support the implementation and monitoring of Endpoint and Network Security solutions.
8. Assist in executing penetration tests and reviewing security baselines.
9. Propose improvements based on vulnerability management metrics.

Qualifications

Education

• Degree in Information Technology, Security, or equivalent.
• Certifications such as Security+, SSCP, CISSP, CISM preferred.

Experience

• At least 3 years in Security Risk, Operations, or Auditing.
• Experience with third-party risk assessments and security tools like SIEM, EDR/XDR, NAC, etc.
• Knowledge of Cloud Security (M365, Azure, AWS) and Microsoft security tools.
• Experience with Vendor Risk Management applications.

Skills/Abilities

• Project management skills.
• Excellent communication and problem-solving skills.
• Strong interpersonal and collaborative skills.
• Self-motivated and able to work independently.

Additional Details

Hourly pay range: $29.33 - $42.07, based on experience and location. Discretionary bonus may apply.

Benefits include medical, dental, vision, life insurance, disability, FSA, HSA, voluntary coverages, and 401(k).

We handle personal data in accordance with our Privacy Policy.

We are an Equal Opportunity Employer and welcome all qualified candidates to apply.

Contact Mickey Hsu, FVP, Employee Relations Manager, at [phone] or [e-mail] for accessibility support requests.