Information Security Analyst

NuMark Credit Union

Tinley Park (IL)

Sur place

USD 85 000 - 105 000

Plein temps

Il y a 8 jours

Générateur de candidature

Obtenez une réponse de cet employeur — un CV et une lettre de motivation adaptés exactement à ce qu’il recherche.

Passez les filtres ATS

Avantages offerts par ce poste

Health insurance

Dental

Vision

Paid time off

Holidays off

Company events

Life insurance

Disability insurance

401(k) with company match

Education reimbursement

Employee assistance program

Volunteer time

Career advancement opportunities

Résumé du poste

NuMark Credit Union is seeking an Information Security Analyst to actively defend the organization, monitor security events, manage vulnerability programs, and coordinate with IT operations, our MDR partner, and business units. The role blends technical investigation with implementing lasting fixes.

The candidate will handle phishing analysis, threat hunting with KQL, and evidence preparation for audits and regulatory reviews while maintaining security policies and supporting data protection

Qualifications

At least three years of information security/security operations experience or equivalent.
Hands‑on experience with Microsoft security tools including Defender XDR, Entra ID, and Intune.
Knowledge of networking, firewalls (Palo Alto preferred), DNS, and TCP/IP.
Understanding of incident response, vulnerability management, and MITRE ATT&CK techniques.
Strong written communication for documenting findings for staff, leadership, and examiners.
Experience handling confidential information with discretion.
Experience in a regulated financial institution is preferred.
Familiarity with FFIEC CAT / CISA CPGs, NIST CSF, or CIS Controls is a plus.
Experience with third party risk programs or platforms is a plus.
Scripting (PowerShell) and Azure security experience preferred.

Responsabilités

Triage and investigate alerts in Defender XDR and escalations from SOC/MDR.
Lead or support incident response: containment, evidence collection, root‑cause analysis, post‑incident reporting.
Analyze phishing and email threats; tune email security controls.
Hunt proactively for threats using KQL and telemetry.
Run vulnerability management: scanning, risk prioritization, remediation tracking.
Track pen tests and audits through to closure.
Monitor configurations across endpoints (Intune), identities (Entra ID), and cloud (Azure Defender).
Prepare evidence for IT examinations, audits, and regulatory reviews (NCUA, FFIEC, GLBA).
Maintain security policies/standards; track security exceptions.
Support data protection efforts (Microsoft Purview, DLP).
Contribute security metrics for the Information Security Committee.
Review SOC reports for exceptions and CUECs alignment.
Incorporate security provisions in vendor agreements with contract owners.
Maintain vendor inventory and third‑party risk documentation.
Assist security awareness training and phishing simulations.
Advise IT/business on secure design for new projects and vendors.
Participate in business continuity and disaster recovery testing.

Connaissances

InfoSec experience

Defender XDR

Entra ID

Intune

Networking basics

Firewalls

DNS

TCP/IP

MITRE ATT&CK

Incident response

Vulnerability mgmt

Written communication

Confidential data handling

Outils

Defender XDR

Entra ID

Intune

Azure security

Palo Alto firewall

Description du poste

Are you an InfoSec professional looking to make a positive impact at an organization that recognizes your talent? Look no further!

As an Information Security Analyst, you will be NuMark Credit Union's hands‑on defender.You will monitor and respond to security events, run the vulnerability management program, manage third‑party security risk, and produce the evidence and documentation our examiners and auditors rely on. You will work closely with IT operations, our managed detection and response partner, and business units across the credit union. This role suits someone who likes both technical investigation and turning findings into lasting fixes.

What You'll Do:

Triage and investigate alerts in Microsoft Defender XDR (Endpoint, Identity, Office 365, Cloud Apps) and escalations from our managed SOC/MDR provider.
Lead or support incident response activities: containment, evidence collection, root‑cause analysis, and post‑incident reporting in line with NuMark's Incident Response Plan and NCUA notification requirements.
Analyze phishing and email threats, including user‑reported messages, and tune email security controls.
Hunt proactively for threats using KQL and available telemetry.
Run the vulnerability management program: scanning, risk‑based prioritization, remediation tracking, and exception handling.
Track penetration test and audit findings through to verified closure.
Monitor secure configuration across endpoints (Intune), identities (Entra ID), and cloud resources (Azure, Defender for Cloud).
Prepare evidence and documentation for IT examinations, internal and external audits, and regulatory reviews (NCUA, FFIEC, GLBA / NCUA Part 748).
Maintain security policies, standards, and procedures, and track the security exception register.
Support data protection efforts, including Microsoft Purview sensitivity labeling and DLP.
Contribute security metrics and reporting for the Information Security Committee.
Review SOC reports for exceptions and complementary user entity controls (CUECs), and confirm that NuMark has the matching controls in place.
Work with contract owners to include appropriate security, data protection, breach notification, and right‑to‑audit provisions in vendor agreements.
Keep the vendor inventory accurate and produce third‑party risk documentation for examiners, auditors, and the Information Security Committee, following NCUA and FFIEC outsourcing guidance.
Help run security awareness training and phishing simulations.
Advise IT and business teams on secure design for new projects, vendors, and technologies.
Take part in business continuity and disaster recovery testing.

Qualifications:

At least three years of experience in information security, security operations, or systems or network administration with significant security responsibilities required.
Hands‑on experience with Microsoft security tools, including Defender XDR, Entra ID, and Intune required.
Working knowledge of networking, firewalls (Palo Alto preferred), DNS, and TCP/IP required.
Understanding of incident response, vulnerability management, and common attack techniques (MITRE ATT&CK) required.
Strong written communication skills, including the ability to document findings clearly for technical staff, leadership, and examiners required.
Ability to handle confidential information with discretion required.
Experience in a credit union, bank, or other regulated financial institution preferred.
Familiarity with the FFIEC CAT / CISA CPGs, NIST CSF, or CIS Controls preferred.
Experience with third‑party risk management programs or platforms (e.g., Nvendor, Venminder) preferred.
KQL, PowerShell, or other scripting experience preferred.
Experience with Azure security (Defender for Cloud, Azure Firewall, networking) preferred.
Exposure to Microsoft Purview, Zscaler, or Mimecast preferred.
Certifications such as Security+, CySA+, SC-200, GCIH, or CISSP (or progress toward one) preferred.

More about Us:

NuMark's mission is to enrich the financial lives of our members. We offer a full menu of financial services from mortgage and auto loans to free checking accounts and business services. NuMark Credit Union is dedicated to putting our members first, treating them like family and helping them do more with their money. We help members get to their fantastic future faster.

At NuMark Credit Union, we recognize how vital our team is to the success of our organization. We believe that investing in the wellness and professional development of our people should be at the forefront of how we operate. Our focus is on making employees feel valued and supported because we know a strong team and positive culture is what gives us a competitive advantage in the markets that we serve. Take a look at our core values that dictate how we treat members and each other:

Passionate – We are dedicated to exceeding expectations and are passionate, open‑minded, and committed to serving members and their families on their lifelong financial journeys.

Accountable – We take ownership of our responsibility to act in the best interests of our members and treat everyone with respect.

Collaborative – We work together to provide exceptional service to our members, communities, and each other. We believe in the power of teamwork to achieve a common goal.

Knowledgeable – We believe knowledge is power and that it should be freely shared with our members, communities, and employees.

Member Centric – NuMark members are the foundation of who we are. Our members and our team are made up of diverse backgrounds. This allows us to be an inclusive organization where we can proudly serve everyone.

Benefits:

We want to make sure you're taken care of, which is why we strive to offer competitive and cost‑conscious benefits for you and your family. Full Time Employees can choose between several plans from Blue Cross Blue Shield (HMO, Options or PPO), Dental, Vision, 3 weeks of Paid Time Off, Paid Holidays Off, Company Lunches and Parties, Birthday Holidays, Life Insurance (Company Paid), Short and Long Term Disability (Company Reimbursed), 401(k) Savings Plan with Company Match & Profit Sharing, Flex Spending Account, Accident Insurance Plans, Education Reimbursement for Bachelor or Master's Degrees, Employee Assistance Program, Paid Community Volunteer Time, and Career Advancement Opportunities.

Equal Opportunity Employer:

Equal Employment Opportunity has been, and will continue to be, a fundamental principle of NuMark Credit Union where employment is based upon personal capabilities and qualifications without discrimination because of race, color, religion, sex, age, national origin, disability, or any other protected characteristic as established by law.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions under the Americans with Disabilities Act (ADA).

While performing the duties of this job, the employee may be regularly required to stand, sit, talk, hear, reach, stoop, kneel, and use hands and fingers to operate a computer, telephone, and keyboard.
Specific vision abilities required by this job include close vision requirements due to computer work.
The ability to talk and hear both in‑person and by telephone is required.
Light to moderate lifting may be required up to 25 pounds.
Regular, predictable, in‑person attendance is required at the employee's assigned location(s) for all scheduled shifts.

Work Environment

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions under the Americans with Disabilities Act (ADA).