Information Security Analyst — AI & Cloud Security

Bank of the Orient; Millbrae (CA); On-site; USD 110,000 - 140,000; Full time

Job summary

Bank of the Orient is seeking an Information Security Analyst to support the Bank's information security, cybersecurity risk, privacy, and GRC programs. The role spans security operations, IAM, vulnerability management, incident response, cloud/SaaS security, data protection, and AI governance, with potential backup admin duties for secured banking apps.

The ideal candidate will collaborate with multiple stakeholders to implement controls, maintain policy alignment, and help drive continuous

Qualifications

• Bachelor's in Cybersecurity or related field, or 4+ years of relevant work experience.
• 2+ years in information security, cybersecurity operations, technology risk, or a related role; banking/financial services experience preferred.
• Knowledge of Windows and Linux, TCP/IP, DNS, firewalls, VPN/remote access, AD, Microsoft 365, cloud concepts, and enterprise security architectures.
• Experience with security monitoring, vulnerability management, incident response, IAM/access reviews, third-party risk, security awareness, or GRC activities.

Responsibilities

• Support the maintenance and continuous improvement of security programs in alignment with policy and regulatory requirements.
• Monitor and analyze security events, alerts, and logs; triage and escalate suspicious activity.
• Support security operations technologies (SIEM/SOAR, EDR/XDR, cloud security, threat intel platforms).
• Coordinate vulnerability and exposure management activities, including scanning, prioritization, patch tracking, and remediation.
• Participate in and coordinate cybersecurity incident response activities and post-incident improvements.
• Support IAM controls, MFA, RBAC, joiner/mover/leaver processes, access certifications, and privileged access reviews.
• Assist with data security and privacy controls including encryption, DLP, and secure file transfer.
• Support security reviews for projects, cloud/SaaS implementations, APIs, and new vendors; document risks and remediation.
• Assist with secure cloud and infrastructure practices (M365, Azure, AWS), Zero Trust, endpoints, and secure connectivity.
• Support AI security and governance programs; assess risks for AI/GenAI use cases and vendors; implement guardrails and monitoring.

Skills

Security operations

Vulnerability management

Incident response

GRC

IAM/access reviews

AI/GenAI security

Cloud/SaaS security

Threat intelligence

Education

Bachelor's degree or 4+ years experience

Tools

SIEM/SOAR

EDR/XDR

Microsoft 365

Azure

AWS

Power BI

Active Directory

Job description

Bank of the Orient is seeking an Information Security Analyst to support the Bank's information security, cybersecurity risk, privacy, and GRC programs. The role spans security operations, IAM, vulnerability management, incident response, cloud/SaaS security, data protection, and AI governance, with potential backup admin duties for secured banking apps.

The ideal candidate will collaborate with multiple stakeholders to implement controls, maintain policy alignment, and help drive continuous