Information Security Analyst

PGMTEK Inc.; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

PGMTEK Inc. is seeking an experienced IT security leader in New York to oversee daily security operations and drive regulatory compliance across banking standards. The role requires hands-on expertise with firewalls, SIEM, IDS/IPS, DLP, and encryption, plus a track record in IT risk assessments.

You will design security strategies for network, cloud, and endpoints, manage backups and patch cycles, and coordinate with IT and business units to align security with business goals.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or related field; advanced certifications preferred.
• Strong regulatory knowledge of federal and state banking requirements.
• Experience in network security, backups, patch management, and IT risk assessments.
• Hands-on with firewalls, SIEM, IDS/IPS, DLP, and antivirus tools.
• Excellent verbal and written communication with global teams; security evangelist.

Responsibilities

• Oversee day-to-day security operations including monitoring and incident response.
• Manage and optimize security tools and technologies (firewalls, SIEM, IDS/IPS).
• Ensure regulatory compliance with FFIEC, GLBA, NYDFS, PCI-DSS, GDPR.
• Design and implement network, cloud, and endpoint security strategies.
• Lead backup, disaster recovery, and patch management programs.
• Perform IT risk assessments and develop mitigation plans; align with business goals.
• Collaborate with IT and business units to implement security policies; communicate risks.

Skills

Security operations

Incident response

Vulnerability management

Security assessments

Cloud/network security

IT risk assessment

Security governance

Communication

Education

Bachelor's degree in Information Security/CS

CISSP

CISM

CISA

Tools

Firewalls

IDS/IPS

SIEM

Antivirus

Encryption

Job description

Languages:

Fluency in both English and Mandarin is MANDATORY given global team.

Lead and Manage Security Operations:

• Oversee day-to-day security operations, including monitoring, incident response, vulnerability management, and security assessments.
• Manage and optimize security tools and technologies such as firewalls, IDS/IPS, SIEM systems, antivirus solutions, and encryption protocols.

Regulatory Compliance:

• Ensure compliance with federal and state regulatory requirements (e.g., FFIEC, GLBA, NYDFS, PCI-DSS, GDPR).
• Prepare and present audit and compliance reports to internal and external stakeholders.

Network and Infrastructure Security:

• Design and implement security strategies for network, cloud, and endpoint protection.
• Conduct security audits and penetration testing to identify and mitigate risks.

Backup and Patch Management:

• Manage backup and disaster recovery solutions to ensure data integrity and availability.
• Oversee patch management to address vulnerabilities promptly.

Risk Assessment and Mitigation:

• Perform IT risk assessments, identify vulnerabilities, and develop mitigation plans.
• Collaborate with IT and business teams to ensure security measures align with business objectives.

Collaboration and Communication:

• Work closely with internal IT teams, business units, and external partners to implement security policies and procedures.
• Communicate security risks and action plans effectively to both technical and non-technical audiences.
• Stay updated on emerging security threats and best practices.
• Recommend and implement enhancements to strengthen the security posture.

Required Qualifications

• Experience: 5-10 years of IT security experience within the banking industry.
• Education: Bachelor’s degree in Information Security, Computer Science, or a related field. Advanced certifications such as CISSP, CISM, or CISA are preferred.
• Regulatory Knowledge: Strong understanding of federal and state regulatory requirements affecting the banking sector.
• Technical Expertise:
• Proven experience in network security, backup solutions, patch management, and IT risk assessments.
• Hands-on experience with security tools like firewalls, SIEM, IDS/IPS, DLP, and antivirus systems.
• Communication Skills: Excellent verbal and written communication skills with the ability to interact with diverse teams globally.
• Certifications: Security certifications such as CISSP, CISM, CEH, or similar are a plus.