Monitor SIEM systems and alert on anomalies, threats, and policy violations
Define detection rules and policies for IDS/IPS; own EDR and email security controls
Own the vulnerability management program: coordinate assessments, assign risk ratings, and track remediation with the Network Security Engineer
Perform threat intelligence analysis and translate findings into defensive action
Lead security analysis and forensic response during incidents; coordinate network-level containment with the Network Security Engineer
Define patching strategy and standards; partner with the Network Security Engineer on execution
Maintain the ISMS including risk register, statement of applicability, and control documentation
Coordinate internal audits and gap analyses against applicable cybersecurity frameworks and FFIEC guidance
Develop and maintain security policies, standards, and procedures
Govern access control policies and conduct privilege access reviews with the Network Security Engineer
Develop and maintain the bank's AI security framework, governing the secure adoption and use of AI/ML tools and platforms
Conduct cybersecurity due diligence on third-party vendors and technology providers
Maintain accurate security documentation including risk registers, incident logs, and audit evidence

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity or related field (or equivalent experience)
5+ years of experience in network engineering, IT infrastructure or cybersecurity operations. Preferably in financial services or a regulated industry.
Strong knowledge of routing and switching (Cisco, Aruba, or similar)
Experience with firewalls (e.g., Fortinet, Palo Alto, Cisco ASA)
Familiarity with VPNs, VLANs, QoS, and network segmentation
Understanding of cloud networking (Azure/AWS)
Knowledge of cybersecurity principles and frameworks

Cybersecurity Analyst

Key skills