Information Security Analyst

Transpecos Banks SSB; San Antonio (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

Transpecos Banks SSB is seeking an Information Security Analyst to protect digital assets, monitor cloud and on-premises infrastructure, and manage information security risks in line with industry standards. The role includes IAM processes, policy enforcement, and regulatory reporting.

The successful candidate will work from our San Antonio HQ, collaborate with the CISO, and support governance, training, audits, and risk mitigation across the bank.

Qualifications

• Bachelor's degree or higher in a related field.
• Certifications such as CRISC/CISA/CISM/CISSP preferred.
• 2–4 years in IS/cybersecurity, banking sector preferred.
• Knowledge of NIST, FFIEC, PCI DSS, GDPR a plus.

Responsibilities

• Monitor security alerts from SIEM/IDS/IPS, DLP, and endpoint protection.
• Investigate and respond to incidents with root-cause analysis and remediation.
• Conduct vulnerability assessments and lead remediation efforts.
• Support IAM governance and secure SDLC processes.
• Prepare security reports and metrics for leadership and regulators.

Skills

Incident response

Regulatory compliance

Cloud security

Risk assessment

Team collaboration

Education

Bachelor's degree in Business Administration/Finance/Risk Management

CRISC, CISA, CISM, CISSP (preferred)

Tools

Azure

AWS

Sentinel

Defender

Purview

AWS Security Hub

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Information Security Analyst

Full Time San Antonio, TX, US

2 days ago Requisition ID: 1009

Job Description

Job Title: Information Security Analyst

This position is based in our historic downtown San Antonio headquarters.

Summary:

The Information Security (IS) Analyst is responsible for protecting the bank's digital assets and infrastructure (including cloud infrastructure) from cyber threats and managing information security risks in alignment with industry standards and regulatory expectations. This role involves monitoring systems, analyzing security incidents, conducting risk assessments, assisting with executing Identity & Access Management (IAM) processes, and ensuring compliance with regulatory requirements. The IS Analyst also assists with establishing sound governance functions and ensuring internal controls are operating effectively.

To perform this job successfully, an individual must be able to perform each of the essential duties satisfactorily. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Monitor and analyze security alerts from tools such as SIEM, IDS/IPS, DLP, and endpoint protection systems.
• Investigate and respond to cybersecurity incidents, including root cause analysis and remediation.
• Conduct vulnerability assessments and penetration testing; lead efforts to recommend mitigation strategies and ensure remediation plans are executed timely.
• Support Secure Development Lifecycle (SDLC) processes and ensure secure development processes are embedded and enforced throughout the SDLC.
• Manage processes for securing the bank's cloud infrastructure, with a focus on Microsoft Azure and AWS.
• Monitor emerging (or changes to) regulatory requirements, threats, and industry trends, advising leadership on necessary changes and improvements. Generate reports and metrics for management and regulatory bodies.
• Maintain and update IS policies, procedures, and standards in alignment with industry frameworks (i.e., NIST CSF 2.0) and regulatory requirements (FFIEC, GLBA, etc.).
• Develop and maintain security documentation, playbooks, and training materials.
• Manage and monitor security awareness, education, and training for employees.
• Perform internal and vendor IS risk assessments (including data privacy and other regulatory risk assessments). Lead remediation efforts for identified control gaps.
• Assist in the management and testing of the bank's Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) to ensure operational resiliency and rapid recovery in case of disruptions.
• Support centralized IAM governance and daily processing of access requests and provisioning.
• Manage IS metrics monitoring and reporting; prepare reports and dashboards to communicate compliance performance to senior management and stakeholders; monitor and report on the status of risk remediation activities.
• Support audits, inspections, and reviews conducted by regulators and external parties.
• Carries out responsibilities in a manner consistent with our values and operating principles, in accordance with policy and applicable laws, and with a commitment to continuous improvement and process excellence.
• Any other duties as assigned.
• Satisfactory audit results and regulatory examinations.
• Timeliness and accuracy of risk assessments and reporting.
• Satisfactory and timely resolution of compliance incidents.

Organizational Structure:

Reports to: CISO

Qualifications:

Education:

• Bachelor's degree in Business Administration, Finance, Risk Management, Law, or a related field.
• Certifications such as CRISC, CISA, CISM, CISSP, or equivalent are preferred.

Required Knowledge/Skills:

• 2–4 years of experience in an IS or cybersecurity role, preferably in the banking or financial services sector.
• Familiarity with banking regulations, Interagency Information Security Standards, and cybersecurity frameworks (e.g., NIST 2.0 CSF/RMF, PCI DSS, FFIEC, FDIC Part 364 Appendix B, GDPR, etc.).
• Strong technical aptitude with Microsoft Azure and AWS cloud infrastructure, with experience managing cloud security tools (i.e., Sentinel, Defender, Purview, AWS Security Hub, and other native security tools).
• Strong analytical and problem-solving skills.
• Knowledge of risk assessment methodologies and compliance frameworks.
• Ability to manage multiple priorities and work collaboratively in a team environment.

Talents:

• Proactive and analytical professional with a strong understanding of regulatory compliance in the banking sector.
• Strong positivity.
• Mission driven, competitive, goal oriented, and motivated to develop themselves and others.
• Energetic, resourceful, and appropriate work intensity to get the work done.
• Strong people acumen and relationship skills; naturally predisposed to quickly establish positive personal and professional relationships.

Other:

• Ability to interpret a variety of instructions furnished in written, oral, diagram or schedule form.
• Must be able to lift to 20 pounds.