Information Security Specialist - Temp to Hire

Socket.dev; Sacramento (CA); On-site; USD 52,000 - 78,000; Full time

Job summary

Socket.dev in Sacramento, CA is seeking an entry-level Information Security Analyst to assist with annual reviews and the administration of the bank's Data Loss Prevention system. You will support research projects and participate in security initiatives under supervision.

The role emphasizes developing IT controls, monitoring alerts, and staying current with regulatory requirements affecting information security practices.

Qualifications

• Bachelor’s degree or equivalent in related field.
• Knowledge of IS policy and compliance preferred.
• Strong written and oral communication skills.
• Experience interpreting regulatory manuals and writing reports.

Responsibilities

• Conduct Information Security reviews and document IT controls for policy compliance.
• Administer DLP and darkweb monitoring software; review alerts.
• Assist with developing IS training materials and phishing campaigns.
• Assist with risk assessments as directed by the IS Manager.
• Analyze new trends, laws, or software impacting information security.
• Ensure compliance with bank regulations and external agencies.
• Participate in bank projects per IS Manager guidance.
• Maintain knowledge of regulations, threats, and IS requirements.

Skills

Project management

Communication

Microsoft Office

Regulatory compliance

Education

Bachelor's degree

Tools

DLP software

Darkweb monitoring tools

Job description

Description

Under direct supervision, assist with the completion of Information Security reviews in accordance with the annual Information Security review calendar. Assist with the research and completion of projects as directed by the Information Security Manager. Administer the Bank’s Data Loss Prevention system.

Essential Functions

1. Conduct assigned Information Security reviews. Develop, document, test, and report on IT-related internal controls to ensure compliance with Bank policies and government regulations, including the Federal Deposit Insurance Corporation Improvement Act and the FFIEC IT Examination Handbook.

2. Act as an administrator of the Bank’s Data Loss Prevention and Darkweb monitoring software. Perform periodic reviews and tests to ensure that the systems are functioning properly. Evaluate any alerts generated by either software in a timely manner.

3. Assist with the development of Information Security training materials and email phishing campaigns.

4. Assist with the completion of risk assessments as directed by the Information Security Manager.

5. Analyze new trends, software, or laws impacting information security that could directly affect the Bank’s current policies and procedures.

6. Comply with all applicable banking compliance rules and regulations established by both internal departments and external agencies.

7. Participate in Bank projects, as directed by the Information Security Manager.

8. Maintain current knowledge of bank regulations, new threat networks, and new threats to the industry. Ensure compliance with all IS requirements and new regulations.

9. Other duties as assigned.

Requirements

• Bachelor's degree from an accredited College or training equivalent or the equivalent in related experience.
• Knowledge of IS policy and procedures and IS compliance is preferred.
• Strong project management and presentation skills along with effective oral and written communication skills are highly desired.
• Strong personal computer skills with knowledge of the Microsoft Office suite of applications (Microsoft Word, Excel, Outlook, etc.) is preferred.
• Ability to read and interpret documents such as regulatory manuals, safety rules, operating and maintenance instructions, and procedural manuals. Ability to write complex reports and correspondence.