Information Security Analyst III - Vulnerability Management

Frost Bank; San Antonio (TX); Presencial; USD 115.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical, dental, vision

Long-term disability

Life insurance

401(k) matching

Generous paid time off

Tuition reimbursement

Employee Assistance Program

Referral bonus program

Descripción de la vacante

Frost Bank is seeking an Information Security Analyst III – Vulnerability Management to protect IT data and systems. You will coordinate vulnerability and penetration testing, lead remediation efforts, and provide expert security guidance across the organization. A CISSP or progress toward it, plus strong communication, are key.

You’ll partner with teams to reduce risk, enhance detection and response, and maintain regulatory alignment in a complex banking environment.

Formación

• Bachelor's degree in IT Security or related field, or equivalent experience.
• 5+ years of experience in Information Security, Vulnerability Management, or related discipline.
• CISSP or ability to attain within 6 months.
• Excellent written and verbal communication for executive audiences.

Responsabilidades

• Investigate, coordinate remediations, and manage vulnerabilities across enterprise systems.
• Lead incident response efforts with clear, strategic updates to executives.
• Articulate risk, impacts, and mitigation plans to technical and non-technical stakeholders.
• Analyze vulnerability data, validate findings, and guide remediation activities.
• Maintain and enhance security platforms to align with evolving threats.
• Document processes for vulnerability detection, remediation tracking, and compliance.

Conocimientos

Vulnerability management

Security operations

Risk assessment

Incident response

Cloud security

Educación

Bachelor's degree in IT Security

Herramientas

Tenable

Qualys

Rapid7

Descripción del empleo

Job Description It’s about taking care of people, our people. Are you known for your ability to think outside the box? Are you never satisfied with good enough? Does solving complex problems and ensuring top-quality standards excite you? If so, being an Information Security Analyst III with Frost could be for you. At Frost, it’s about more than a job. It’s about having a flourishing career where you can thrive, both in and out of work. At Frost, we’re committed to fostering an environment that reflects our values and encourages team members to be the best they can be. In joining our adaptable, integrity-driven team, you’ll become part of Frost’s over 150-year legacy of providing unparalleled banking services.

Who you are:

As an Information Security Analyst III - Vulnerability Management, you are our security champion. In this role, you’ll keep Frost data and IT Systems secure by analyzing and responding to IT security alerts. You will coordinate applications and enterprise vulnerability and penetration tests. You will also be responsible for performing and monitoring security processes across the organization. You believe in servant leadership and will provide technical expertise to the IT Security team.

What you’ll do:

• Investigate, assess, and coordinate remediations of security vulnerabilities across enterprise infrastructure, cloud environments, applications, and supporting technologies
• Effectively communicate while leading incident response efforts, engaging executive and board-level leadership with clear, concise, and strategic updates
• Demonstrate effective presentation skills by clearly articulating security risks, vulnerability impacts, and mitigation strategies to both technical and non-technical stakeholders, ensuring alignment with business objectives
• Analyze vulnerability scan results and related security data to identify risks, validate findings, investigate false positives, and provide remediation guidance
• Maintain and continuously enhance security platforms and solutions to improve effectiveness, resilience, and alignment with evolving threats and business needs
• Perform and document security processes including vulnerability detection, remediation tracking, exception management, compliance monitoring, and risk assessments
• Coordinate and perform application and enterprise vulnerability and penetration testing, analyze the results, and initiate remediation processes
• Partner with technology teams to investigate complex vulnerabilities, validate remediation activities, troubleshoot findings, and reduce organizational risk
• Design, configure, test, implement, maintain, and document detection, prevention, and response processes in alignment with regulatory and compliance requirements
• Maintain a current and high level of knowledge of cyber security threats and vulnerabilities, industry and regulatory standards, and market innovations
• Evaluate new security technologies to identify potential business value
• Represent the IT Security department on interdepartmental projects and collaborative efforts
• Always take action using Integrity, Caring, and Excellence to achieve all-win outcomes

What you’ll need:

• Bachelor's degree in IT Security, a related field, or equivalent experience
• 5+ years of experience in Information Security, Vulnerability Management, or a related technical discipline
• Technical expertise in vulnerability management, vulnerability scanning, risk prioritization, container and cloud environments, operating systems, networking, threat intelligence, and/or security operations technologies
• CISSP or the ability to attain within 6 months
• Excellent written and verbal communication skills, including the ability to present technical risks and recommendations to both technical and executive audiences
• Strong analytical and troubleshooting skills with experience validating vulnerability findings, identifying false positives, coordinating remediation efforts, and driving issues through resolution

Additional Preferred Skills:

• Experience with ticketing platforms, Tenable, Qualys, Rapid7, or similar vulnerability management platforms
• Experience evaluating zero-day vulnerabilities and emerging threats.
• Security+ certification, GSEC certification, or other industry-recognized cybersecurity certifications
• Experience developing vulnerability metrics, dashboards, and executive reporting

Our Benefits:

• Medical, dental, vision, long-term disability, and life insurance 401(k) matching Generous holiday and paid time off schedule Tuition reimbursement Extensive health and wellness programs, including our Employee Assistance Program Referral bonus program + more!

Since 1868, Frost has dedicated their expertise to provide exceptional banking, investment, and insurance services to businesses and individuals throughout Texas. Frost is one of the 50 largest U.S. banks by asset size and is a leader in banking customer satisfaction. At Frost, it’s about being part of something bigger. Frost’s commitment to cultivate long-term relationships is one of the reasons we’re recognized as a premier employer in the financial services industry. To attract qualified professionals, we offer an environment that’s supportive of both your professional and personal goals by providing our employees with competitive salaries and an outstanding benefits package. Frost was named to Forbes magazine's list of the Best Employers. Frost is an Equal Opportunity Employer and does not discriminate on the basis of any protected trait, including sex, sexual orientation, gender identity, race, ethnicity, disability, or veteran status.

View Employment Notices and Policies