Cyber Security Configuration Compliance Monitoring Analyst

Bank of America; Culver City (CA); On-site; USD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Configuration Compliance Monitoring Analyst to ensure compliance across various high-risk technologies. This role involves monitoring configurations, interpreting baseline requirements, and providing expert guidance. You'll be part of a team that values inclusivity and personal growth, offering you the chance to build a successful career while making a meaningful impact. If you are passionate about information security and compliance, this opportunity is perfect for you.

Qualifications

• 5+ years in Information Security with server configuration expertise.
• Experience in compliance monitoring and troubleshooting.

Responsibilities

• Monitor technical configurations across high-risk technologies.
• Interpret GIS baseline requirements into functional policy test cases.
• Provide technical guidance for compliance issues.

Skills

Information Security

Server Configuration

Troubleshooting

Communication Skills

Critical Thinking

Tools

Qualys Policy Compliance

Bladelogic

Tanium

Oracle

MySQL

SQL Server

Job description

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities, and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates' physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Responsibilities:

The Configuration Compliance Monitoring Analyst will be a Subject Matter Expert responsible for monitoring technical configurations across high-risk technologies such as Operating Systems, Databases, Middleware Components, and Network Devices to ensure compliance with GIS requirements. Key responsibilities include understanding Operating System configurations, interpreting GIS baseline requirements into functional policy test cases, and providing support/remediation guidance. Job expectations include ensuring full monitoring coverage across all Operating Systems, providing expert technical guidance to support partners, and updating existing policy checks to ensure comprehensive technical configuration monitoring across all in-scope GIS Baselines.

Job Responsibilities:

• Conduct compliance monitoring leveraging technical knowledge in configuring various Operating Systems and/or Databases.
• Interpret baseline requirements into policy check test cases.
• Validate the accuracy of compliance scanning weekly.
• Ensure current baseline requirements have full monitoring coverage.
• Address monitoring coverage gaps promptly.
• Provide troubleshooting and technical guidance to address non-compliance issues.
• Maintain relationships with the GIS Policy team and technology partners.

Required Qualifications:

• Minimum 5 years of experience in Information Security or SME skills configuring servers across various operating systems (Unix, Linux, Windows, Cloud, Containers, etc.).
• At least 2 years of experience applying configurations to meet compliance requirements or developing configuration compliance monitoring capabilities.
• Experience troubleshooting servers/OS to ensure compliance with security requirements.
• Exceptional written and verbal communication skills.
• Critical thinking skills.

Desired Qualifications:

• Familiarity with compliance monitoring tools such as Qualys Policy Compliance, Bladelogic, Tanium, or others.
• Security Certifications (CISSP, MCSE, RHCE, etc.).
• Experience in designing and deploying technical configuration monitoring.
• Windows & UNIX/Linux platform administration experience.
• Database administration experience (Oracle, MySQL, SQL Server, etc.).
• Experience in data mining, analytics, and reporting.